Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4d4b8223-85ee-3255-b036-a8a8294f42d7.roa
File:                     4d4b8223-85ee-3255-b036-a8a8294f42d7.roa (raw, json)
Hash identifier:          CKTI+WXBqSiVxhzfqGPYybf7vcE2+bs4qUUeEL7T5EE=
Subject key identifier:   A5:A7:39:A8:25:2B:28:2D:99:85:98:AC:BA:FF:12:C4:79:1F:F2:B0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFB9539027B27B76945C10
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4d4b8223-85ee-3255-b036-a8a8294f42d7.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:80d8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:b9:53:90:27:b2:7b:76:94:5c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=6b79b2b3-e4a8-4f1c-80ed-347a8dcd1caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:70:91:cf:55:42:9e:05:58:71:55:32:ca:
                    09:2b:bc:98:cb:4e:ee:d4:cf:0e:06:cf:98:fe:1d:
                    42:f7:c8:01:a9:de:7d:31:13:27:2d:de:85:ad:89:
                    5c:0d:ee:95:19:38:cc:41:a3:8a:fb:02:c8:c2:d4:
                    81:ab:36:e8:1b:01:ce:b4:45:f6:36:aa:5b:18:a6:
                    dc:ac:24:c7:ae:3b:57:6c:d2:54:df:f2:d4:0f:cc:
                    29:f9:67:07:5b:4d:1b:aa:50:5c:f0:3d:cf:ef:3f:
                    cd:a7:44:d7:ea:8f:ab:9b:36:2e:78:08:ba:74:08:
                    0e:07:e1:4d:b5:b3:fe:ac:98:27:a8:c1:91:4b:cb:
                    31:a2:28:f1:3d:42:da:4d:12:e6:fb:d5:6a:49:1b:
                    12:72:2d:83:c1:ac:0e:3c:28:54:29:29:1e:d5:8e:
                    9e:8a:d5:db:18:87:ab:39:54:e3:7d:1a:7a:8c:4b:
                    e5:de:37:75:9e:d2:40:9e:81:ec:4c:89:a6:f2:6d:
                    b1:8e:63:37:2f:b6:e9:2c:47:f4:cb:b5:9c:e9:a8:
                    10:17:ce:3c:09:38:68:b3:0e:b9:1d:85:dd:eb:3d:
                    66:66:04:5a:11:b8:d6:21:1d:3f:65:16:ce:1d:be:
                    36:3f:54:86:f8:85:2f:c1:4d:5d:52:d0:52:f5:e5:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:39:A8:25:2B:28:2D:99:85:98:AC:BA:FF:12:C4:79:1F:F2:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4d4b8223-85ee-3255-b036-a8a8294f42d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9d:48:dd:07:2d:e7:6a:65:2c:7f:0b:52:fc:bb:ed:e2:a0:
         84:32:cb:32:13:cc:7a:ae:3d:63:7b:33:e2:d2:8a:1f:96:ff:
         a9:4a:c7:1a:be:d4:96:7b:d0:fb:59:f3:1f:3b:ee:a7:b2:d1:
         96:e1:6d:47:8d:59:6a:cb:42:c8:31:34:cf:5b:7a:bb:7f:58:
         38:e1:c2:69:a5:ff:9d:41:d6:ee:d4:3b:54:42:e6:41:ab:91:
         0d:7b:37:8a:af:d8:10:3e:51:eb:91:91:f6:4f:db:5f:14:62:
         73:e4:73:c7:59:10:28:cc:00:61:5e:70:9e:e4:de:27:38:42:
         63:12:b0:5c:ce:17:3d:ba:1f:40:07:21:7c:e7:01:c8:8c:89:
         42:fb:17:4c:bf:e0:0f:f2:7c:52:79:68:f1:53:37:a0:c1:90:
         15:41:ce:a7:bd:8d:dc:5e:73:fa:1d:84:3f:5a:10:ac:dd:99:
         bd:dd:12:20:bd:92:33:cb:b9:28:a6:be:8a:f5:94:0b:c9:9f:
         41:5f:f6:14:55:2f:bc:30:1c:d7:63:b1:4e:9c:6f:59:3f:82:
         59:d7:c7:4f:e8:bf:6f:1e:03:8d:da:78:e3:8c:d4:bd:31:b6:
         b8:08:c5:3c:92:68:87:6a:c4:dc:2b:bd:85:4b:3a:aa:1c:3c:
         94:0b:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:14 2025 by rpki-client