Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0ff47d67-feb6-3e72-bdff-b2b591682033.roa
File:                     0ff47d67-feb6-3e72-bdff-b2b591682033.roa (raw, json)
Hash identifier:          pSxcwP4aL4J9kKfGyKDeTTu5Af1h9CCly+YKOhJKp+Y=
Subject key identifier:   CE:AC:E8:E9:D2:52:AB:12:86:FE:9B:32:51:3B:BF:2B:44:38:D7:6E
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848159FDB40F7C4AF3768916D80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0ff47d67-feb6-3e72-bdff-b2b591682033.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     30133
IP address blocks:        2001:500:9a::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:db:40:f7:c4:af:37:68:91:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=1a4d9c83-b336-4503-91b2-ab810ddf4ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:79:30:9f:84:0c:6d:4a:08:38:5b:08:d0:
                    bc:d4:f5:04:1b:03:2a:75:4f:cd:69:a4:cc:33:81:
                    b5:fe:f8:d6:9b:81:8c:7f:37:fe:e9:ae:12:f0:4a:
                    8f:48:6b:10:50:75:ac:2f:2b:71:78:67:7c:ba:65:
                    e6:46:ab:a4:80:19:a7:74:bf:b6:13:0f:7e:6b:cb:
                    1b:ab:2e:ca:b5:a4:75:c8:74:97:d4:ed:97:55:ae:
                    4b:09:26:38:6e:28:aa:8d:0d:8b:fd:2e:d4:f0:d3:
                    ed:6c:49:fb:c1:aa:66:e6:64:33:ae:e5:0f:f3:01:
                    cd:5d:1e:38:cd:b8:33:44:01:31:ef:33:82:94:d9:
                    ed:ab:fb:bb:01:23:c0:0a:10:aa:04:8d:cd:5e:ad:
                    de:2d:26:f7:ab:b0:09:0e:bf:97:ef:2f:c0:cc:88:
                    b1:10:76:a2:df:09:3e:7b:b0:08:e5:27:b6:fb:48:
                    10:af:c4:ec:b4:fb:78:a3:6a:b7:d8:48:58:05:bc:
                    a3:35:8b:1f:40:c1:20:ef:26:e7:c6:27:c2:2f:7c:
                    4c:1b:46:f4:08:e2:cf:c4:0b:24:9b:76:ab:bf:ab:
                    23:0d:36:5f:31:c6:6b:ff:2c:78:96:15:5a:7d:22:
                    6a:5a:32:1b:3e:31:db:21:94:14:e0:1b:c5:78:20:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AC:E8:E9:D2:52:AB:12:86:FE:9B:32:51:3B:BF:2B:44:38:D7:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0ff47d67-feb6-3e72-bdff-b2b591682033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:9a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:20:a0:40:5b:c6:5e:83:3f:eb:fe:bc:eb:ea:d8:f1:68:53:
         78:6b:6a:da:fc:30:d9:27:15:8f:95:20:0a:aa:c4:c2:a0:37:
         80:cb:57:da:89:80:cb:50:c9:8a:b4:84:24:fb:e2:69:58:62:
         83:d9:d4:30:05:31:df:5b:82:58:af:b7:37:be:ac:49:94:a8:
         a3:4b:83:73:86:4b:6d:e1:2c:a7:63:e7:b5:fb:83:bd:43:77:
         e9:f1:a2:38:5c:8c:db:c0:ce:cf:8f:d6:45:08:7e:f9:09:31:
         e1:ef:b2:af:52:bd:1d:73:6a:e0:22:32:fd:e6:b9:01:e8:74:
         75:f0:09:97:5e:69:90:df:6c:39:ce:ef:be:4f:47:e4:73:1b:
         14:e7:d3:a5:fb:aa:df:37:18:1f:a9:46:65:7b:93:37:fd:4c:
         26:de:e3:4e:31:dc:3c:fd:bf:85:f1:d6:b4:8b:b3:41:a9:96:
         cd:81:28:de:74:92:97:ec:c0:0f:43:c9:9f:ec:c6:be:60:a2:
         ed:71:8a:5f:06:e9:04:2d:a0:b5:96:65:8b:47:84:be:59:64:
         9a:2b:8d:65:37:1b:b9:5d:03:d4:5b:ef:d5:db:d5:e3:05:77:
         3e:d5:4c:8c:a1:b9:2e:35:86:e4:d0:f5:4b:ef:5b:63:a9:d9:
         6a:a9:2c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:23 2025 by rpki-client