Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9cbe4c57-4503-3ef0-906e-7f37c1208722.roa
File:                     9cbe4c57-4503-3ef0-906e-7f37c1208722.roa (raw, json)
Hash identifier:          c3MLpm69gPX5TsRQrOMSCmz1JxQPDG8/arZcWsxdwOw=
Subject key identifier:   BB:8C:7B:0A:07:A6:78:95:AF:DD:87:D9:82:54:C4:A6:AF:F8:B5:02
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFC18131CC04C88C6AAD00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9cbe4c57-4503-3ef0-906e-7f37c1208722.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:80d6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c1:81:31:cc:04:c8:8c:6a:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=320e3c6e-f150-4f5d-86b6-d828d015eb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:19:4b:37:a7:7c:15:7e:2a:0e:77:37:a4:
                    15:c2:32:2c:fb:3a:82:02:66:21:71:a9:ff:fe:9b:
                    df:27:65:02:a0:4f:d6:8f:ad:44:e1:e8:8b:f4:7c:
                    ed:d5:30:b5:94:30:0c:31:4f:4c:d1:12:18:0d:a9:
                    4d:bb:3f:98:e1:69:60:ff:a9:05:d7:ee:2b:af:a0:
                    c9:a2:5c:35:7e:b8:f5:1b:39:03:01:f4:b6:96:c5:
                    e0:76:ee:e6:9a:37:dc:39:3f:14:ad:eb:09:87:76:
                    1f:60:e5:c9:84:ec:fd:da:c1:45:68:bd:e4:94:76:
                    bd:8f:9a:1a:58:f3:5f:1f:67:0d:4b:e6:b5:dd:22:
                    c8:8e:35:12:3e:47:f8:d5:b5:8a:29:d8:ba:f2:51:
                    60:1b:1b:6a:cc:2b:ba:85:aa:fd:2f:b4:86:7b:a4:
                    1c:ff:56:b2:f9:54:36:34:43:12:4e:87:e8:0c:ae:
                    6a:c2:64:61:2a:77:1f:de:96:36:b0:4d:10:c2:25:
                    b5:98:8f:61:19:23:6c:c7:8d:4c:e9:8d:b2:1c:17:
                    e6:07:8c:31:4a:d2:43:11:a6:fd:9d:5f:dd:18:3e:
                    3e:73:2c:7c:22:5a:49:d3:5b:9a:f3:93:b9:dc:b8:
                    5c:ed:04:fb:4b:21:ce:18:ca:10:3d:7b:3e:0b:28:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8C:7B:0A:07:A6:78:95:AF:DD:87:D9:82:54:C4:A6:AF:F8:B5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9cbe4c57-4503-3ef0-906e-7f37c1208722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80d6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:5a:12:9c:65:ec:de:1a:a8:de:ac:42:ac:57:e8:99:1d:
         95:a6:39:df:54:0f:55:83:71:0e:0a:99:eb:cd:2c:91:73:fb:
         c9:15:93:93:7e:69:05:b0:ee:89:12:c4:5c:20:48:48:50:fc:
         10:62:71:b7:00:65:0e:0a:50:1c:4d:e9:4f:4d:cc:50:51:a2:
         0a:86:05:cf:89:e6:1d:29:b0:db:1b:e6:f6:a9:59:9d:39:09:
         84:5c:20:cb:ea:08:66:11:ef:dc:27:23:be:07:65:52:bb:4f:
         0c:7a:cc:4e:f1:66:06:3f:91:90:a0:db:6b:69:b2:4c:16:83:
         f4:45:a3:2b:32:c0:78:7e:ca:46:f7:b3:f8:c2:fe:a7:22:f9:
         06:5e:6f:f4:af:4a:dd:17:1d:3f:2a:2a:84:c8:68:99:ab:06:
         a1:6a:df:ca:af:d2:62:e9:5f:d5:50:81:63:db:b0:a3:60:88:
         6a:06:92:db:40:9d:03:39:1e:57:ea:a7:c5:b6:cc:d1:d7:03:
         61:f1:7c:50:4d:63:96:ae:29:ff:a2:d3:44:79:ce:c8:36:fc:
         98:d7:2f:d4:90:4b:79:e4:40:2b:6c:70:5f:da:d8:63:63:c0:
         0d:ca:a1:c6:3a:fc:0d:17:e5:d6:09:04:d4:29:39:06:e2:ae:
         df:77:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:28 2025 by rpki-client