Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e5634633-ffc6-3650-92fd-82fb376ae8d9.roa
File:                     e5634633-ffc6-3650-92fd-82fb376ae8d9.roa (raw, json)
Hash identifier:          nGqCDzr5YJe/C3xocSS3X7hTZttGu62jOTMrzmkfXmo=
Subject key identifier:   A7:09:74:FE:EC:9F:79:C7:59:03:44:5F:30:C9:40:9C:23:F5:A4:6B
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848143A7924394F39C91F45F380
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e5634633-ffc6-3650-92fd-82fb376ae8d9.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     30132
IP address blocks:        2001:500:60::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:79:24:39:4f:39:c9:1f:45:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=77efee82-f558-48ab-8a0c-218d0042ecac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:2e:74:0e:e2:9e:1d:80:b8:25:70:dd:55:
                    d4:d1:78:40:88:95:97:38:04:e3:38:3b:c8:f2:2d:
                    ad:12:f7:af:9a:f4:25:95:06:c4:65:fd:6f:67:06:
                    1b:81:0e:8f:20:bc:36:f9:29:e5:9c:ed:cf:a6:59:
                    c5:0d:ff:24:43:c6:18:29:42:4a:9d:86:ab:f8:a9:
                    0c:9a:c9:5e:27:13:90:15:a5:c2:09:2a:a8:24:f4:
                    ff:2c:15:c8:bc:2a:a7:af:e6:70:b1:d0:53:a8:1a:
                    90:26:2d:15:df:35:6a:d7:ac:11:36:27:73:ad:b8:
                    ab:cc:37:4d:de:fb:8f:1a:45:27:0a:60:b1:de:d7:
                    5f:ba:cd:fa:40:c1:58:44:62:28:5d:87:87:50:6a:
                    7e:36:bb:30:2b:c2:e0:21:52:27:79:56:52:cd:a8:
                    30:b4:e7:a8:ad:a2:cd:f1:ec:ec:81:45:db:ab:10:
                    6c:0e:0d:d2:e8:cb:0e:95:96:4c:4d:30:65:f0:3d:
                    7b:f7:56:c0:58:c5:96:45:67:db:5f:3e:b8:79:10:
                    e3:99:81:71:7a:cd:ae:8c:f3:c5:a6:c3:c8:66:bd:
                    ae:32:db:d0:d6:f0:ce:26:bb:4c:e5:92:a8:2c:31:
                    12:6d:be:46:70:44:26:b8:9b:ca:24:4d:e6:f8:5b:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:09:74:FE:EC:9F:79:C7:59:03:44:5F:30:C9:40:9C:23:F5:A4:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e5634633-ffc6-3650-92fd-82fb376ae8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:60::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:48:39:76:bc:0d:ee:8a:2f:af:15:88:1e:87:33:2d:36:
         2d:27:34:e7:e3:0e:42:ab:fa:54:b1:ed:a5:b1:b2:3e:c2:4f:
         86:48:27:98:b0:4d:39:79:7a:6c:90:c4:53:b7:70:f7:1d:c9:
         03:35:98:03:27:d4:b2:a9:0b:40:84:f9:a7:6a:91:c8:a0:97:
         7e:9c:e3:7f:da:49:b3:ee:eb:0e:5d:6c:fa:53:19:8c:20:86:
         17:41:79:65:bb:ce:94:d7:3b:86:df:44:dd:85:c2:fa:f6:ce:
         ac:ef:75:50:df:24:8e:4a:ed:f1:e6:98:dc:7d:e5:b5:d4:94:
         96:40:29:5c:55:05:18:6f:cd:9c:a6:fb:c6:4a:84:bd:67:95:
         5a:45:c0:d3:3e:e1:c9:f7:7b:f9:65:d5:21:85:8c:a1:b4:71:
         b4:c1:ae:07:aa:a6:46:fb:3b:51:40:a9:37:f0:97:c8:fa:12:
         01:f6:26:cb:0d:5a:ba:d8:2b:2b:f5:2c:88:a9:a5:50:05:a5:
         2b:37:9c:4c:3e:c8:69:ec:7a:5d:91:af:54:12:dc:18:7f:fa:
         8c:f5:05:4d:0c:c1:d6:1c:e8:ac:e1:a8:23:f1:1a:3a:c8:54:
         de:f4:41:89:4d:e7:11:c2:1d:63:f5:d0:40:81:07:dd:9c:87:
         a5:88:f5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:36:47 2025 by rpki-client