Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab598a67-b850-3ebd-99c0-d176d789e30a.roa
File:                     ab598a67-b850-3ebd-99c0-d176d789e30a.roa (raw, json)
Hash identifier:          abydeBkxOkAF0UQhESz0YAKsrYGct4C5PXuFfOVuRu8=
Subject key identifier:   8E:79:78:05:95:9F:ED:6B:A1:5D:C1:94:1C:A5:FA:FB:3E:C8:B1:6D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF8F808D8ECF02C929E700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab598a67-b850-3ebd-99c0-d176d789e30a.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:807c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:8f:80:8d:8e:cf:02:c9:29:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=f9e3013c-9eac-4022-8b0c-f5a6e9d754fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:fa:34:ee:5f:ef:11:54:04:3f:72:10:4a:
                    a3:71:7a:e4:ef:84:bc:38:84:33:2c:2f:80:96:f5:
                    a5:7e:0b:ea:c3:1b:cc:07:4b:f3:5e:9c:c4:f3:1c:
                    db:dd:bf:63:25:12:91:6b:1d:59:98:1a:57:ff:00:
                    54:45:40:cb:8b:9a:55:f3:67:db:0e:b8:e8:0f:29:
                    c9:3a:dc:32:4b:11:66:94:9a:93:df:b0:53:fd:02:
                    f1:30:23:3e:41:33:4c:4e:01:c7:81:8b:a3:ae:1b:
                    d9:33:14:f9:fa:97:9f:e7:d9:47:5f:3a:9d:f8:f3:
                    00:7a:23:47:63:c8:fc:d8:c3:4a:72:07:79:78:a5:
                    86:56:ab:76:96:1b:c6:73:04:03:f6:5b:81:00:7e:
                    d8:de:01:06:ed:d5:1e:49:6c:7e:77:58:45:7d:c1:
                    c1:f8:11:08:7f:1f:4a:1a:74:8b:fb:11:d4:ec:38:
                    26:4f:2b:6d:b4:43:42:82:46:28:e5:56:b3:f8:a7:
                    64:3e:ba:3c:5e:71:94:19:19:cd:0d:42:60:c0:5c:
                    a9:e1:e8:ad:f6:14:b6:ed:bf:7f:36:96:36:5c:21:
                    80:99:04:69:ba:7a:4c:3d:86:20:2d:df:e7:13:80:
                    73:f6:cb:2e:97:01:34:0e:2a:4e:d5:cf:48:09:c5:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:79:78:05:95:9F:ED:6B:A1:5D:C1:94:1C:A5:FA:FB:3E:C8:B1:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab598a67-b850-3ebd-99c0-d176d789e30a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:807c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3c:f3:0d:8c:ec:59:34:0c:24:aa:37:c3:a2:bd:10:7e:a8:
         94:61:dc:4a:9c:5b:42:ee:b2:bf:a7:ab:2f:1b:a0:64:31:77:
         86:f3:82:e2:ca:90:7d:95:17:fc:49:ff:d8:35:6a:9b:bf:e9:
         2e:c8:43:66:1b:9f:5c:bf:a3:0a:bb:d5:df:41:32:b4:f7:35:
         5e:21:40:3a:8e:95:60:fe:ff:67:85:84:d3:68:ee:49:40:0f:
         29:af:a7:e7:a3:7a:f7:46:28:cb:a6:25:7e:a8:bd:1a:2e:5e:
         83:b0:6c:52:be:75:ee:4f:14:41:92:f7:21:93:99:15:30:d0:
         52:fe:db:8a:5d:cf:8c:03:f5:34:34:0c:f9:6c:29:6e:91:d1:
         38:f5:67:58:e0:50:67:80:f6:30:05:b1:b9:ea:f7:7d:72:02:
         ab:86:c9:0f:7f:ec:b3:55:e0:da:11:94:47:47:cd:2f:5d:ac:
         55:19:15:c7:e3:92:35:65:6f:76:90:80:88:a4:dd:54:5e:d9:
         df:58:3a:84:f9:a0:26:0b:d9:94:f7:61:09:e3:44:ad:71:be:
         cd:23:47:91:6f:e7:3e:01:6c:80:ad:2f:7b:18:88:9f:0f:a5:
         c8:b8:11:be:a6:2a:ff:a9:16:c7:db:d8:30:6a:dc:42:09:26:
         4b:3b:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:05 2025 by rpki-client