Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6de8e6b6-b0fd-3bb1-b7eb-f4dae28f96e1.roa
File:                     6de8e6b6-b0fd-3bb1-b7eb-f4dae28f96e1.roa (raw, json)
Hash identifier:          gmN7mtt/s5Z4b/mxlf7Ss9rqk4IwS4MXSpClLSMLa9o=
Subject key identifier:   C6:7F:B4:78:FA:68:5D:D2:FF:E6:16:0C:32:8A:A9:E3:33:EE:D0:AB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFAC3B3F848211CAF40700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6de8e6b6-b0fd-3bb1-b7eb-f4dae28f96e1.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     10838
IP address blocks:        2603:90d8::/30 maxlen: 30
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:ac:3b:3f:84:82:11:ca:f4:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=bc795432-3912-488c-b839-eb6dc9a0571e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b0:c1:85:06:38:42:44:03:a1:2d:16:eb:0c:
                    41:36:82:e3:a1:65:5e:28:71:0f:5c:4f:87:ae:66:
                    48:e7:d7:34:e3:89:d6:b1:15:ee:c2:95:6e:53:13:
                    94:02:28:17:ac:70:00:f0:62:7d:5d:c2:24:5b:f8:
                    20:67:05:80:e2:6d:33:f5:0d:df:6d:fd:b8:fd:c8:
                    2d:37:fb:82:c2:ec:e3:65:e4:95:92:92:23:0a:52:
                    03:7d:f0:f7:2d:a3:da:a4:bf:f0:b6:a1:f9:f8:67:
                    ad:27:98:02:1a:0b:d2:e5:86:05:14:c5:14:8f:10:
                    fb:d6:6d:45:d8:ad:f9:45:07:38:1d:59:57:51:18:
                    ad:95:7b:a7:10:f3:7d:39:b5:82:cb:81:04:86:a3:
                    2f:55:90:84:e9:e8:ca:12:13:cf:29:9c:c3:0c:be:
                    e4:be:3b:17:81:37:a8:63:d8:73:18:54:10:c3:08:
                    69:89:6c:da:2b:4d:7d:ab:9f:be:cb:ef:13:0d:b9:
                    8a:2d:ab:8c:d3:f0:d7:f9:bf:ce:49:17:17:a2:c6:
                    88:90:29:4b:bd:5e:f3:08:38:a6:d5:17:7a:b6:77:
                    d5:0b:16:8f:0b:3f:ab:93:11:4b:25:1a:14:7d:b6:
                    1f:f6:4a:90:0a:f8:13:a6:51:5d:e9:0e:31:6d:c3:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:B4:78:FA:68:5D:D2:FF:E6:16:0C:32:8A:A9:E3:33:EE:D0:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6de8e6b6-b0fd-3bb1-b7eb-f4dae28f96e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90d8::/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:85:6c:6b:b4:42:1d:44:8f:2c:e8:df:28:40:32:98:ea:
         e8:b3:ff:56:85:5b:17:eb:05:3d:a3:f8:76:4e:47:f8:1c:a4:
         69:ad:d6:6a:fb:3c:b2:d6:d6:9b:82:93:59:69:8e:3a:65:f5:
         ac:ac:82:78:d1:85:08:80:06:f9:8a:a7:6f:fb:b3:7b:7e:11:
         2a:9c:b2:3d:64:60:a4:d8:03:43:53:6e:3e:84:b0:d7:04:02:
         b9:38:0a:84:a6:64:cf:dc:0b:62:8e:c0:66:0a:4a:4c:27:3c:
         d5:0e:60:b7:86:b0:37:13:6c:bd:87:e3:e7:c3:1f:02:b7:4e:
         08:01:28:54:40:aa:80:1c:1d:0c:a5:45:84:7d:0e:7b:b2:22:
         fa:01:73:d3:0f:5b:9f:62:d8:39:3d:97:64:7e:d8:57:5f:9c:
         35:5d:59:41:04:ea:ae:88:04:a5:b8:4d:7f:48:b1:97:a1:f6:
         b1:3f:3d:f7:37:30:e4:e1:90:76:8f:be:34:0a:b7:ae:51:5c:
         5a:79:12:71:3f:62:12:64:66:2b:77:eb:b6:85:46:79:bb:7e:
         f2:ab:8d:9f:eb:d6:e2:76:39:17:0b:f9:05:62:93:6f:33:61:
         f7:1b:4f:1a:06:f7:2a:c1:5b:3e:4d:9a:d6:11:97:a3:46:64:
         43:0a:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:23 2025 by rpki-client