Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa
File:                     28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa (raw, json)
Hash identifier:          ikBN7/iTmoYTmqA4nbJB7Umh8xQ87aLBDAoTZlhywoc=
Subject key identifier:   CD:97:1A:28:A3:C7:CF:30:A9:D9:6F:AD:B6:B1:FC:A6:7D:71:37:F3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF927B47895E2D535DFC00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8209::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:92:7b:47:89:5e:2d:53:5d:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=78d6ca50-fe95-497e-b4d3-672faff92536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:cd:f8:03:92:8e:ae:ac:65:a3:2b:a9:26:
                    0f:b2:dc:0f:6e:80:3e:43:12:58:ef:c8:e9:98:26:
                    ac:7f:78:18:e8:12:18:13:1a:a0:e5:ef:58:94:83:
                    bc:8e:7e:71:db:91:54:7a:f9:3a:c0:8f:8f:36:af:
                    6a:55:60:63:63:57:ff:4d:e9:8c:77:a2:18:2c:8a:
                    0f:36:47:a7:d0:1e:73:01:6f:66:19:b6:a9:f5:d7:
                    aa:fc:12:65:85:34:bd:4d:4d:14:a2:b4:fe:ce:41:
                    c5:38:e8:8c:5a:d3:1a:4f:17:68:b6:cc:a5:22:75:
                    15:c8:77:1b:b1:fc:8e:a2:8c:d7:71:3a:79:75:3d:
                    c6:18:1f:19:72:e1:d0:c2:e5:1a:cd:94:8d:21:a3:
                    c7:a4:4d:a7:6d:13:3e:47:f3:9b:72:0d:1b:d0:4c:
                    9e:57:a6:87:25:ec:87:13:ba:51:69:36:76:90:a1:
                    ac:22:38:66:e7:27:4d:6e:7d:d2:9c:6b:b3:4e:14:
                    ef:d9:45:33:48:da:98:88:19:e8:54:27:c1:ee:ae:
                    16:c0:fe:be:f9:4e:8d:78:f7:d5:ce:f2:ca:6f:95:
                    c1:c5:05:a3:91:5b:1e:92:23:ab:f5:a7:27:ef:36:
                    89:3b:53:b7:93:79:a7:32:6e:0f:d8:1d:c7:a5:04:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:97:1A:28:A3:C7:CF:30:A9:D9:6F:AD:B6:B1:FC:A6:7D:71:37:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8209::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a1:40:a6:ad:a2:d8:84:20:53:70:23:88:06:8a:12:e1:3e:
         e8:16:b9:d5:8e:bd:5d:38:96:cd:d9:b0:34:9e:78:4b:6e:8e:
         9a:25:11:12:55:d5:3f:a0:50:21:1d:14:22:1e:3f:43:87:39:
         f6:b0:78:49:67:a2:02:75:c8:33:e6:2f:c7:20:22:d6:ff:ea:
         af:65:ba:6e:d1:14:1b:8d:2e:2c:63:65:b9:18:cf:83:af:26:
         c9:3c:38:6b:bb:1b:34:2c:de:f3:b4:51:f2:bb:69:6e:b1:ff:
         71:23:9c:69:5a:8c:7b:0d:87:17:e7:1c:a4:3a:8b:39:7b:09:
         47:df:1d:7d:92:76:43:8f:f3:ac:bd:97:e5:5b:99:fb:57:dc:
         7a:dc:b7:76:67:43:56:cd:6b:31:0e:89:1a:25:ad:49:a8:2a:
         07:51:cc:eb:cf:25:a1:a9:c4:4c:fc:9e:52:f1:40:25:e3:83:
         1e:81:1b:e8:8a:1b:60:b1:51:c7:30:27:87:6d:c3:11:75:8b:
         76:80:4e:28:ec:0e:0a:32:46:21:55:7a:de:19:fb:8a:31:cc:
         b5:eb:b5:76:7d:b4:b2:af:1c:44:88:36:ac:17:96:a1:a1:df:
         f5:05:18:1a:74:c2:bf:94:27:a2:c0:a8:cc:0f:02:24:7f:8b:
         f3:6a:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:34 2025 by rpki-client