Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/76abfc2a-eed0-3a72-af01-3a7c4991f61f.roa
File:                     76abfc2a-eed0-3a72-af01-3a7c4991f61f.roa (raw, json)
Hash identifier:          Z7yayUhQQIev5Q770kCPzc6mGUOsUykKuTz+H5szQYg=
Subject key identifier:   DE:23:84:10:23:8E:B5:7A:48:31:23:FD:A6:3A:A4:8C:7B:18:20:45
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F4328584839EAB74F4ED0B905147A38C0
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/76abfc2a-eed0-3a72-af01-3a7c4991f61f.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     398447
IP address blocks:        2606:6240::/48 maxlen: 48
                          2606:6240:1::/48 maxlen: 48
                          2606:6240:2::/48 maxlen: 48
                          2606:6240:174::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:b7:4f:4e:d0:b9:05:14:7a:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=3dcf31ed-44a4-4f42-a106-165fbe403ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:38:f2:a3:a9:cb:88:e4:ee:bd:78:43:ab:18:
                    6c:92:24:b6:6c:1f:d8:7b:ca:8a:72:b7:ab:09:27:
                    e9:2a:d0:be:05:2f:2b:bc:d8:27:3d:9b:93:58:e9:
                    0f:41:0d:d2:91:a8:86:b7:37:50:f9:1d:aa:5a:2e:
                    94:32:56:f0:f1:c7:47:71:16:9c:85:d4:ba:30:02:
                    67:c0:16:33:49:77:ed:08:22:f0:41:eb:8a:0c:d8:
                    34:af:fc:4f:76:17:e6:02:d7:6c:49:09:50:00:aa:
                    48:e2:c3:c2:c6:22:5e:4c:f1:30:3b:15:54:bc:b2:
                    3d:aa:c0:5f:11:5d:8f:76:83:73:3a:c4:dc:a4:ce:
                    60:fe:49:eb:4a:5f:5a:1b:9d:99:9f:81:ab:7d:97:
                    76:44:2e:e6:58:5a:16:c7:e6:93:d7:da:e3:49:01:
                    de:3f:f9:9a:a0:b5:11:cd:8c:c7:37:e3:55:9d:6c:
                    26:a0:94:35:7e:8b:7a:16:22:2e:b1:af:a7:a3:9d:
                    1b:8b:20:c7:8b:d3:6a:14:11:75:38:93:6a:b2:63:
                    c0:b3:3b:bf:ab:33:44:1c:f6:05:50:be:1f:a9:8e:
                    16:8c:75:39:6b:03:fc:30:4b:30:74:e3:54:33:39:
                    9c:88:10:b0:f5:36:10:63:d0:ee:d7:59:00:b1:27:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:23:84:10:23:8E:B5:7A:48:31:23:FD:A6:3A:A4:8C:7B:18:20:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/76abfc2a-eed0-3a72-af01-3a7c4991f61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6240::-2606:6240:2:ffff:ffff:ffff:ffff:ffff
                  2606:6240:174::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3b:05:9b:a5:88:2d:fe:43:e2:fb:d7:8c:de:c9:30:fa:c3:
         80:27:d6:2a:46:7d:c7:08:5e:fd:5f:09:e8:dd:58:e3:3a:b7:
         09:bd:8f:71:1c:06:98:b1:56:55:d8:61:64:c9:d0:4f:c5:d3:
         21:e9:37:e0:30:4b:2f:eb:4f:18:98:86:37:8a:a0:da:9a:1d:
         55:08:fc:bf:7d:ce:48:c2:a3:57:0d:e5:cc:9b:d0:e7:68:3a:
         19:29:96:c8:e0:fc:33:c5:3b:eb:3a:52:0d:79:d7:a5:dd:27:
         c4:42:19:a4:9c:89:ec:41:79:8b:6e:91:87:a5:2d:32:c6:c7:
         1f:67:b3:0f:1e:eb:ef:70:d0:cf:8a:dd:f5:b8:6a:25:21:36:
         b4:28:fe:bd:c9:b2:f2:95:41:6e:fd:8b:49:c5:9c:dd:a1:76:
         df:7c:a6:fb:1e:c7:9c:45:18:92:d8:11:ed:8e:9e:48:fc:cc:
         9d:ee:89:25:fe:8e:2a:07:dc:93:92:2e:b4:1d:23:a3:bf:52:
         a2:99:f1:c9:56:08:e9:2e:a4:49:f7:a4:5d:ea:a6:ff:97:bb:
         be:db:7e:1f:5c:7f:f2:22:60:5c:80:da:47:88:ea:f3:b6:84:
         c4:4e:22:a3:f5:16:f3:68:e1:84:c9:24:e4:2d:3f:dc:ea:a0:
         e5:02:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:42:02 2025 by rpki-client