Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa
File:                     04467d97-4061-38b5-9207-71b697628f7f.roa (raw, json)
Hash identifier:          HvWksPOeJn5h4AgLVCuEEoRgAPET6nXaCeczUwJbMNE=
Subject key identifier:   D5:0F:82:C0:1E:69:4D:7D:84:6D:29:31:4A:D3:BC:E9:73:C7:D4:A3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFB936D70D012424266A60
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2607:f098:3200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:b9:36:d7:0d:01:24:24:26:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=b543473e-d86e-4953-8c9a-2b5027fe2e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:44:5a:ee:8b:a2:08:bb:e1:5b:c9:a7:26:
                    ba:8a:db:f5:67:77:b6:71:12:15:c6:5e:e0:98:05:
                    f9:d9:1b:4f:49:bd:a0:26:de:9c:75:06:fe:a6:75:
                    43:00:8f:d0:bf:1a:ec:5d:bd:d5:0b:0d:67:b0:c1:
                    0e:56:1e:29:39:ab:c8:12:a7:b8:4e:f9:85:39:c5:
                    3a:69:0c:a4:f9:12:46:b4:00:a8:fc:d5:98:d9:cd:
                    d1:8a:d8:17:c6:06:b7:4e:16:bf:db:d0:bc:fc:cf:
                    37:b0:fd:63:6e:fa:78:a3:a9:0f:1c:48:1d:51:91:
                    ee:b4:7e:e3:e2:5e:3d:13:6c:78:ac:59:bc:d9:7f:
                    7a:ea:2a:19:95:07:62:2a:09:cc:91:e0:1d:cf:11:
                    08:70:17:91:7b:26:e1:1e:14:b3:16:b8:90:f1:a3:
                    37:cc:87:3a:3b:68:27:e7:96:fc:80:c4:35:64:fc:
                    85:61:9f:55:97:98:8e:d2:ea:fc:51:6c:74:09:8d:
                    ed:99:fd:e8:55:5d:89:00:9b:cf:99:c8:80:fe:a7:
                    8f:3b:1e:b4:30:78:52:7b:79:9f:2c:ce:77:af:d6:
                    76:92:44:ca:bf:0e:05:71:c3:d4:3a:72:88:7c:0c:
                    ba:4f:5c:8f:6f:7f:d6:0d:86:49:22:1f:d7:cb:dc:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0F:82:C0:1E:69:4D:7D:84:6D:29:31:4A:D3:BC:E9:73:C7:D4:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:95:04:64:69:30:76:9c:d3:a7:33:ad:77:02:bd:34:3b:01:
         b3:72:75:0d:27:ba:55:18:55:d4:a5:9f:69:dc:d0:0a:34:17:
         d6:4b:af:62:ff:e3:e5:06:d9:53:06:1a:b4:73:91:cc:74:7c:
         53:03:b9:07:e0:46:66:a8:2a:55:ca:60:a0:ac:99:bc:c3:ab:
         cb:d0:17:b2:66:ee:23:f7:13:9c:ec:e7:0e:61:73:9f:9b:81:
         0e:6f:9b:6d:6f:12:fa:2d:30:77:08:d2:ba:aa:89:17:2a:5e:
         6f:a3:51:06:99:87:86:90:ff:d9:dc:60:6e:30:01:25:b1:96:
         f5:24:b5:16:4c:31:35:e5:85:9c:f8:fb:21:f9:cc:60:65:48:
         5d:8a:7f:3a:93:a4:6b:d9:b0:49:3d:32:c8:05:42:fb:d2:98:
         e2:7e:f7:0e:53:48:43:7e:be:96:bc:42:34:fe:7f:fd:f3:56:
         4b:57:7f:6c:84:4b:af:16:23:71:e0:d3:a0:8e:d8:c1:3f:c0:
         5e:7d:d8:97:88:9c:ad:bd:1a:0c:2d:1b:07:32:b5:7f:5c:80:
         d7:fe:63:9d:75:21:e5:3a:64:88:13:51:f9:53:a0:44:c6:e4:
         15:33:f1:32:0c:be:cd:09:3e:87:75:61:5b:7f:2b:a6:04:a9:
         99:76:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:59 2025 by rpki-client