Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49fae9bc-7ce0-30e9-960f-6b2c373c8482.roa
File:                     49fae9bc-7ce0-30e9-960f-6b2c373c8482.roa (raw, json)
Hash identifier:          2dO6RDlL9RePcRJbpf/5C3D/XEj2TGRKmeLa/KXUXeU=
Subject key identifier:   0C:35:7E:D8:78:F6:BF:89:63:FA:EC:D1:7F:BF:EC:FC:BB:A3:0E:FA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF9A182765BACCE6693400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49fae9bc-7ce0-30e9-960f-6b2c373c8482.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8626::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:9a:18:27:65:ba:cc:e6:69:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=7c2318f7-8a56-43c5-8112-41628f49a838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:84:88:a1:fa:52:fe:a6:6d:63:2c:48:1a:
                    c6:16:46:61:ad:75:47:96:26:8f:5e:70:9c:27:13:
                    66:3b:4d:91:e2:cc:c6:60:f1:5e:37:47:a3:8a:33:
                    00:97:75:fc:9c:c0:36:46:cc:7a:5a:e2:e8:15:8a:
                    a7:fb:be:e6:7a:15:30:3a:5b:03:9c:fe:7c:01:86:
                    d5:f4:8f:b2:0f:89:b7:77:4f:54:4e:bb:8e:50:35:
                    6b:ea:c4:81:c4:42:b1:60:84:03:0a:82:57:f3:21:
                    fb:b7:1a:10:21:8b:7d:c3:97:ce:ab:ba:27:0b:79:
                    78:04:5e:28:cd:f4:73:c9:8b:e5:02:d4:1d:37:ad:
                    fd:5b:df:73:6a:b7:2c:01:1d:04:e7:e8:4c:aa:48:
                    83:cf:84:b7:7e:e4:9b:45:40:a2:82:87:22:10:15:
                    fb:f8:e0:c4:1f:bc:f0:6c:d2:fc:80:e9:27:12:77:
                    98:2a:96:26:dc:99:8c:36:0e:7b:00:55:7c:22:1b:
                    64:b3:9e:83:1f:8c:03:f7:db:4e:a7:22:48:3e:83:
                    25:b1:71:31:6a:4a:e0:b1:14:50:7e:28:ad:d0:f7:
                    94:58:97:99:25:ea:34:76:2f:a7:0c:2a:26:c0:42:
                    38:d3:19:35:f4:2b:c6:f9:1a:88:5b:76:1c:5a:51:
                    fa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:35:7E:D8:78:F6:BF:89:63:FA:EC:D1:7F:BF:EC:FC:BB:A3:0E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49fae9bc-7ce0-30e9-960f-6b2c373c8482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8626::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:bb:f2:54:3b:0f:0a:5a:ee:3d:49:18:df:76:1f:a0:5a:
         3b:a7:be:90:2c:e2:8d:78:13:59:14:de:6c:1e:6e:ef:ca:92:
         da:b5:c3:4d:f1:2b:2d:54:75:61:e7:6b:67:9a:40:f6:03:df:
         c2:73:94:62:09:40:a7:55:00:29:63:f8:31:ea:18:48:2c:bd:
         97:b2:a1:a3:53:f8:63:f8:18:fd:d3:66:47:8f:75:46:35:4e:
         fa:6b:f5:f4:78:74:07:f5:2e:e1:a6:00:5a:6a:90:d1:80:9a:
         84:bc:8a:0d:cc:b0:88:4d:42:ff:49:f2:2f:3a:dd:59:fe:2c:
         c1:98:af:c8:cd:f1:b4:56:53:19:af:28:68:78:ff:85:ca:d1:
         d0:d5:ca:8b:91:1c:84:d0:96:6b:83:e7:01:4e:4b:62:c9:06:
         17:e1:82:5f:cc:91:bc:5f:b3:7b:0d:98:5b:57:59:fa:80:5b:
         2d:b5:bf:d8:47:23:a3:b0:0a:55:b0:e2:55:cb:dd:32:59:52:
         77:2c:e2:76:86:03:1a:a0:54:b5:8b:1b:68:df:fe:fd:79:ac:
         85:a5:7e:a1:f9:a7:62:c1:9e:c3:a9:d5:73:cd:d0:8c:2e:60:
         41:09:f6:cc:65:f5:e3:e0:ca:e2:9b:07:93:7f:82:58:46:b8:
         9e:e7:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:26 2025 by rpki-client