Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7e1f1f56-700c-3eb6-887f-cd7f7b4d5e39.roa
File:                     7e1f1f56-700c-3eb6-887f-cd7f7b4d5e39.roa (raw, json)
Hash identifier:          0rI+FfWIoko8Xy13ZMojm+qzd0CYzuAO3GyWgHQ0OUI=
Subject key identifier:   EB:06:D8:91:1A:62:32:B2:E7:E9:3A:5C:2D:9A:FA:E9:19:9F:09:57
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFB00C18946386F6501B40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7e1f1f56-700c-3eb6-887f-cd7f7b4d5e39.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     20115
IP address blocks:        2603:90f5:e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:b0:0c:18:94:63:86:f6:50:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=8515243d-74a1-476c-b64b-fa5b9ad25cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:f1:79:a6:c9:61:33:51:b4:7c:6c:c0:d9:
                    80:8e:dd:cd:2c:11:35:03:66:c5:41:0b:9c:a0:d6:
                    26:85:5d:7a:1c:c4:29:c2:17:11:2a:6a:bb:36:10:
                    97:94:d0:09:f9:ac:64:55:54:db:8e:61:a2:73:4b:
                    ab:aa:3d:16:9c:91:70:07:29:e5:56:9f:25:2a:5a:
                    d0:8c:eb:cf:3a:bc:75:63:78:cd:65:25:b5:96:1a:
                    5a:bd:f3:df:15:99:f4:50:13:d5:4a:68:04:c6:75:
                    6b:78:29:49:fe:5f:84:a9:55:05:91:9b:f5:5a:22:
                    15:e0:5d:c9:a3:18:9a:78:dd:7f:33:3c:8c:fd:05:
                    6c:14:7a:48:6f:db:28:60:ec:6a:f1:eb:1f:fa:05:
                    a5:da:07:fc:6e:0b:bb:6e:84:a2:9f:68:e4:10:7e:
                    1c:6e:bf:99:ee:fc:fa:a8:6d:18:45:20:15:e0:58:
                    f0:63:a8:c1:45:0f:9b:f8:66:a5:a1:11:88:a7:74:
                    e4:40:ef:b5:72:c8:20:17:3e:a6:f5:31:b2:c0:1f:
                    29:d0:69:0a:6c:07:90:aa:34:bc:59:d0:4e:b2:2a:
                    49:89:80:4f:58:04:e2:35:1e:8d:4d:6e:b0:a6:1b:
                    bb:04:c7:32:49:0c:30:99:f0:06:b5:27:f6:01:02:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:06:D8:91:1A:62:32:B2:E7:E9:3A:5C:2D:9A:FA:E9:19:9F:09:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7e1f1f56-700c-3eb6-887f-cd7f7b4d5e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:9a:b5:6f:b0:6c:52:33:25:4e:96:f9:b4:4f:14:ca:b6:5c:
         0f:3e:12:18:92:f0:c5:26:28:0d:c5:58:04:db:57:bf:ef:5a:
         c9:17:3d:85:ac:55:77:42:c9:e4:0c:ca:71:ff:e2:6d:e0:08:
         0a:a4:14:76:8c:85:75:29:1b:97:04:8b:ad:4a:77:40:99:b7:
         77:f5:eb:f2:13:7e:d1:75:0f:3b:6a:a0:13:80:45:d7:12:fc:
         e3:d5:8e:af:c8:ee:2b:ad:b1:1f:fb:46:a1:27:61:c0:bf:e7:
         d5:7c:0c:7c:e6:27:32:86:2b:8f:e9:87:1e:47:81:6b:1c:22:
         c4:18:c1:d1:2e:52:66:d9:8d:8b:84:48:d9:8d:a2:39:eb:a1:
         4b:17:54:eb:54:9c:94:12:49:3c:05:9f:6d:5d:1f:49:ad:6d:
         d7:97:2b:e9:2f:87:ba:b1:3a:6a:76:7c:19:53:31:4a:57:b9:
         ce:4d:e8:8d:11:5e:1a:03:c0:01:52:72:a5:bd:5a:35:99:e9:
         61:77:6a:7e:10:2c:aa:e2:a3:4a:e2:50:5d:9b:c1:0a:f3:9d:
         d5:a9:61:d9:c0:41:3a:08:c3:d5:fe:73:b0:d3:fe:b1:d3:2d:
         20:06:8e:b3:13:7b:cf:6f:77:ac:88:c6:b6:c2:1e:f9:a8:97:
         df:f0:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:12 2025 by rpki-client