Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1940a56-0333-33e8-a7f0-812a202e46eb.roa
File:                     c1940a56-0333-33e8-a7f0-812a202e46eb.roa (raw, json)
Hash identifier:          T0ZM2RABF91ZqMxVRismd382Bt4lsx7EMTbowxMZkMw=
Subject key identifier:   21:D4:E7:5E:5C:F8:DE:EF:DF:EC:C3:CB:1A:D4:86:A4:D9:7A:86:02
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF9A69FCF3DA1973A9BA00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1940a56-0333-33e8-a7f0-812a202e46eb.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:878b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:9a:69:fc:f3:da:19:73:a9:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=a0975171-7b5e-454c-9a49-83ae8d8b9ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:59:c4:92:75:2a:c4:0c:1f:46:47:6c:fd:
                    f1:a2:05:2e:01:bd:be:c9:c8:c8:ca:1d:7f:11:38:
                    e4:ce:d3:bf:f6:1a:f5:98:c2:bf:97:42:82:5a:d8:
                    85:61:0b:e4:ac:41:e1:a6:a5:af:7e:95:76:ed:32:
                    e1:1f:58:95:8a:a6:00:7b:02:88:9a:92:e5:96:8f:
                    28:fa:63:4f:81:f2:78:2a:7f:5a:70:a3:05:cc:cb:
                    42:55:c9:51:3f:2e:37:aa:24:b4:2a:20:1a:e8:d4:
                    21:40:3f:5d:31:9a:94:2c:5e:d9:42:40:c7:d7:64:
                    6a:8b:43:fc:ef:8d:ad:8d:24:9f:f4:7c:02:11:83:
                    19:58:41:43:c5:fb:20:1e:fa:58:6f:89:37:3e:3d:
                    e4:2e:42:0d:f7:09:99:c8:5a:f6:0d:97:9b:45:f0:
                    68:93:c0:12:6d:d7:fe:9c:16:4c:26:48:3d:fb:4d:
                    78:45:29:bb:e6:8b:10:7f:28:f6:d8:94:3b:8e:1c:
                    54:20:04:59:0b:f3:ae:cf:1b:c4:24:8b:77:be:41:
                    78:4b:88:5d:6a:b6:12:f0:7f:02:35:ed:dc:3f:07:
                    61:05:a5:b9:78:d2:c4:d7:54:af:49:48:d2:b0:50:
                    8a:15:04:4b:a9:32:cf:b6:d7:c4:ff:5c:bd:3f:ae:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D4:E7:5E:5C:F8:DE:EF:DF:EC:C3:CB:1A:D4:86:A4:D9:7A:86:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c1940a56-0333-33e8-a7f0-812a202e46eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:878b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:16:aa:08:84:f4:18:26:85:5c:2e:d9:2a:ab:98:21:72:5c:
         08:52:f1:e0:1f:12:44:0b:2d:8c:86:66:c1:37:c1:a4:cb:be:
         5d:14:81:bf:8d:6c:2a:62:17:6e:36:48:42:20:8a:21:cd:4e:
         29:e6:04:73:ef:a7:54:69:57:61:65:a1:9b:30:19:51:06:3b:
         a9:f3:70:70:24:11:0d:36:99:d8:d7:c5:1d:cd:bf:3b:82:64:
         7e:1c:18:6d:3d:f8:58:db:5f:7c:a7:4d:47:88:4e:07:3a:9e:
         0f:a1:9a:96:6b:10:a3:3d:45:51:44:86:a5:f2:d7:ba:d2:ec:
         a4:5c:a5:65:4f:91:c9:4f:84:2a:d4:94:2b:31:e4:c4:4b:fd:
         3d:a5:5e:36:d2:94:f9:31:f2:1d:a7:4f:9f:fb:cc:82:17:14:
         00:6f:60:87:2b:5a:18:ab:44:ce:59:6b:44:8e:8c:03:0a:36:
         73:aa:96:d7:cd:a2:50:c6:6d:8f:1a:1b:da:b6:6e:56:55:34:
         c0:bf:3b:55:3a:93:5b:b3:29:68:0b:55:02:3b:35:2a:de:53:
         94:fa:f7:16:31:49:9a:6f:d5:bd:87:f3:12:f8:ab:9c:80:6f:
         c7:21:66:af:2e:b6:1f:71:8c:e7:01:b5:62:d1:27:6e:6f:35:
         d8:a5:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:25:52 2025 by rpki-client