Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/951ba47c-3cb6-3d2d-b31e-43902c878b67.roa
File:                     951ba47c-3cb6-3d2d-b31e-43902c878b67.roa (raw, json)
Hash identifier:          gkq+4OZCco9UbKD49uWaNOnfYLXsWkkYCZyTnL9o14Q=
Subject key identifier:   ED:01:BD:EE:92:B1:31:7B:13:1A:2C:77:ED:1C:6F:D2:3F:01:26:DC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF975998A0DF30C81B3580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/951ba47c-3cb6-3d2d-b31e-43902c878b67.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8101::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:97:59:98:a0:df:30:c8:1b:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=fdf75276-c766-4604-bd46-bcbe19fad152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:c9:3e:83:ef:fe:11:c1:73:6e:39:23:3f:
                    e2:71:e6:d9:ed:31:50:79:c4:72:87:20:96:f0:9f:
                    ba:06:7e:2d:0e:c9:58:91:4f:fc:53:c0:d2:52:28:
                    83:fa:28:a1:7a:57:dc:45:25:9c:8e:cd:93:88:64:
                    4f:88:a5:e7:4e:8f:8e:48:9b:66:af:3d:02:73:31:
                    be:34:b0:7e:10:da:00:7e:a8:f0:b0:9e:56:6a:a2:
                    75:10:55:d4:8a:5e:4d:5b:a2:bd:c7:fb:e1:4f:83:
                    12:0a:20:8a:a6:88:dd:7e:23:99:53:c5:56:07:9c:
                    55:54:39:92:96:2d:24:11:4f:7a:e3:02:5b:b4:3a:
                    fb:c9:e5:fe:a9:dc:3f:d3:62:fd:af:35:76:79:e6:
                    8a:23:b3:3b:0d:f5:c8:d4:15:6e:d2:a5:3a:bd:b8:
                    f2:87:8a:3e:42:4c:10:b2:2d:6f:39:b9:36:f2:76:
                    d5:dd:f3:ca:79:74:4a:fb:7b:ae:c5:a7:54:18:3a:
                    d2:3a:48:cd:44:8e:de:40:52:c1:26:20:af:b2:52:
                    6d:0e:67:ef:09:7e:21:56:5a:de:d7:b7:15:c2:f5:
                    08:1c:75:1c:58:94:e0:b0:18:c8:e6:61:d2:b5:e3:
                    00:d2:44:1b:81:e6:3d:48:fe:84:94:3b:c6:6f:86:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:01:BD:EE:92:B1:31:7B:13:1A:2C:77:ED:1C:6F:D2:3F:01:26:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/951ba47c-3cb6-3d2d-b31e-43902c878b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d1:12:e0:9b:fe:3f:e9:ce:41:92:52:7e:87:bc:c3:f6:fc:
         03:3c:ed:ef:5d:00:a1:91:b5:89:a0:f4:a5:f2:dd:31:b7:3e:
         e6:48:ed:ab:0f:8d:a0:db:53:ce:f1:d0:31:d6:f5:d0:5c:ea:
         1e:dc:25:c3:23:55:23:8e:3a:ad:aa:9e:c7:df:db:03:0b:76:
         d0:c1:a6:b5:0a:79:09:18:9f:0a:24:2c:0e:68:87:b8:e9:96:
         9f:5d:d5:60:c4:ea:af:26:bb:15:58:b4:72:e3:7d:c7:91:38:
         3c:08:98:5b:cb:d7:bd:28:3e:be:aa:ab:0a:e7:f4:f5:f7:94:
         10:e9:0a:7a:a0:4f:c7:71:73:e2:85:30:95:34:92:af:67:fa:
         ec:f3:d5:7d:1b:69:93:d0:bd:2c:9c:02:36:fa:ef:03:85:0b:
         16:5d:39:77:fc:11:8c:fd:e6:b4:d6:db:8a:09:ea:1f:90:d2:
         b0:ad:cb:87:b6:b0:91:e7:b6:36:6e:4f:5e:a3:2c:1f:fc:53:
         45:e9:31:a2:5d:75:45:21:51:20:44:35:e1:3b:cd:79:19:1b:
         ac:e8:09:93:ff:f7:34:ac:88:4c:91:2d:c9:ab:8e:8c:f3:4a:
         70:dd:06:a8:c0:4b:32:d3:7d:56:ab:ca:6e:82:85:e1:3a:c4:
         cf:6c:80:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:42 2025 by rpki-client