Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7adf2f7e-f1a3-30c8-bdef-8dfbade8a8f0.roa
File:                     7adf2f7e-f1a3-30c8-bdef-8dfbade8a8f0.roa (raw, json)
Hash identifier:          PTbwhHIvMqbxOIgzXexDh0zkvK1MgkLB7hFsca3BUcc=
Subject key identifier:   0B:9A:2A:FB:67:F5:0B:4E:76:40:E3:18:58:DE:1A:56:FA:C4:40:DE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848494575E00B3AB8E0CB3C8B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7adf2f7e-f1a3-30c8-bdef-8dfbade8a8f0.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2603:9016::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:75:e0:0b:3a:b8:e0:cb:3c:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=e0683624-369d-47cf-8e80-4549bf50e906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:3c:70:94:fd:f2:ba:00:94:29:a7:e6:d2:
                    f9:65:52:ff:60:2a:28:91:4f:3e:0c:3c:d8:c9:01:
                    00:de:41:d4:33:c5:bf:b8:3d:e5:ad:7c:04:bf:63:
                    bc:55:62:ba:e1:1f:1b:d4:98:2f:2d:c8:e8:d3:fb:
                    c8:26:f6:0f:70:c7:fb:39:dc:53:33:68:c3:af:67:
                    de:a6:7a:7d:ea:08:2e:f0:44:03:c5:60:fd:ce:e2:
                    4b:a2:60:90:65:56:d2:92:f3:d1:e4:e9:53:45:53:
                    34:16:37:c5:d3:82:fb:fe:df:6c:c3:ca:8c:1b:a0:
                    58:1c:cb:92:9d:61:08:24:c7:d0:ad:dc:fc:36:91:
                    be:33:27:36:e6:88:65:52:04:f9:64:ec:12:00:a8:
                    2b:40:48:d2:7d:36:97:ba:56:a2:ae:47:f9:52:76:
                    3a:f1:67:49:59:c0:17:64:6b:14:e4:4b:4d:e1:c1:
                    37:a6:90:62:fd:2c:8a:70:28:80:bf:ec:dd:4c:90:
                    75:2d:1e:31:46:29:64:e7:fa:25:13:2f:9d:77:ac:
                    0c:17:5a:c9:bc:67:68:46:f1:37:a5:56:43:3f:03:
                    03:ca:1e:44:e1:bb:6d:8b:8c:f1:e2:bf:14:7e:65:
                    a3:0e:28:41:9d:b2:31:22:fd:10:ca:a6:0b:1a:cf:
                    e0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9A:2A:FB:67:F5:0B:4E:76:40:E3:18:58:DE:1A:56:FA:C4:40:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7adf2f7e-f1a3-30c8-bdef-8dfbade8a8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9016::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:51:59:44:e3:5a:40:b1:be:09:36:bf:15:37:1e:1e:dd:
         73:0b:df:5a:44:20:78:bc:38:4b:26:72:8c:62:62:d4:21:c4:
         83:e5:bf:6f:62:1f:64:db:3f:92:14:f9:53:2e:79:18:60:7a:
         a4:d9:02:56:2a:46:2c:b5:49:a7:d7:21:05:87:15:e2:10:58:
         56:b2:ad:e7:55:18:fc:20:d7:4e:34:e4:7a:21:fb:7e:53:b3:
         e4:ea:7b:f5:09:c8:ab:5b:d6:4f:16:50:51:5b:71:71:15:28:
         71:50:3c:fb:f9:01:e3:f8:47:5b:db:a7:7a:28:01:20:43:0a:
         78:b3:be:e3:b8:d4:79:71:04:11:04:67:c2:40:82:3d:a2:a9:
         b2:5d:60:a5:3b:fb:9b:68:7f:58:b8:e1:38:3c:f3:50:be:c0:
         4a:6d:61:34:0f:a9:50:16:e7:3f:aa:ff:a0:e4:9a:55:b0:5d:
         05:32:1b:2e:8a:4d:62:34:bc:41:e1:30:7b:8d:38:40:77:2f:
         9b:4b:06:ae:b0:ec:3f:88:f3:aa:0d:1b:ac:52:50:44:54:2b:
         db:8f:6c:18:ee:83:5e:89:03:68:09:e3:11:73:3c:a9:e0:2d:
         b9:81:bc:76:01:2b:7e:3b:a7:3e:87:88:c9:b7:04:b8:27:db:
         44:73:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:20:36 2025 by rpki-client