Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa
File:                     0bec5560-5f61-3939-92dc-d3500f8e8095.roa (raw, json)
Hash identifier:          Oq5fk3ScJAa2bTt42QtbgX6aDnMe/Wgnlj5ZN4HLygI=
Subject key identifier:   63:22:AA:4D:83:EB:EC:47:72:20:2A:73:C1:EE:EE:C6:61:AF:6C:20
Certificate issuer:       /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial:       010D0C9F432858487325AD048C82B092571C2D80
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        2602:fc8b:aa::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:ad:04:8c:82:b0:92:57:1c:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=e9dd9c25-f3fa-4558-849a-83e223c651f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:6e:7b:e2:1f:7d:6e:fc:97:12:24:1b:f6:
                    38:56:5d:16:35:15:a1:e7:13:8f:cb:5c:6d:85:7f:
                    6b:cd:e5:7b:64:5d:ef:0a:6b:76:38:b4:4d:ef:b3:
                    27:94:9d:0f:e8:ed:5c:50:58:a5:f9:19:4a:20:71:
                    10:23:7a:ad:ea:5d:76:e9:c6:0e:d1:1c:44:df:d9:
                    b0:5a:25:ee:b2:d0:7a:1f:96:2f:cb:71:2a:42:1c:
                    f6:4c:a7:f4:18:bd:d1:83:99:4c:03:3d:ce:c9:4c:
                    4f:b3:73:1d:a0:85:c4:84:ac:c4:94:e5:84:1a:d5:
                    e9:49:76:27:e6:8b:06:1d:d9:81:04:f6:75:83:89:
                    06:dd:07:4b:e6:48:10:3e:94:f4:93:ff:42:3e:a3:
                    83:f7:7e:74:52:a3:32:aa:39:78:91:94:e8:2f:a8:
                    7f:97:21:ab:bd:30:e9:af:1a:1d:49:f7:bb:24:ff:
                    1c:09:54:9d:0f:63:1d:af:3c:cf:e2:c9:18:24:4f:
                    5c:a7:3b:87:bc:63:4a:a4:de:f8:40:0f:4f:0f:83:
                    a0:19:45:4e:d1:68:c0:4c:44:0e:7a:ff:ea:f1:52:
                    64:d5:3b:26:ff:6a:a4:98:12:9d:0c:e4:00:a1:f7:
                    cd:81:97:af:5e:9b:d6:8f:a3:6f:33:82:48:7d:58:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:22:AA:4D:83:EB:EC:47:72:20:2A:73:C1:EE:EE:C6:61:AF:6C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc8b:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7a:d9:5a:a1:67:15:5b:65:18:92:fb:fb:98:ba:db:e8:0e:
         ea:4b:c7:98:d7:6a:ce:11:38:24:27:6d:70:2e:f9:3b:a3:4d:
         ea:c7:93:55:7d:93:97:ca:12:ad:97:b7:50:8c:ba:10:da:96:
         b6:05:b3:27:c4:6e:1d:6f:45:97:79:2b:8b:7d:99:61:0a:db:
         f9:a3:02:51:05:d4:35:f1:39:01:b1:e5:f7:17:f4:7d:6a:db:
         5f:6d:2b:94:ab:11:2a:04:7c:30:97:d1:1e:d5:0c:01:a0:13:
         af:5e:0e:13:b3:6e:ae:f4:cf:a9:7a:ed:1d:04:a9:41:30:b2:
         ee:4d:27:b6:30:d1:bf:8e:03:e9:d2:ad:45:81:c5:5a:d6:99:
         c0:10:40:13:69:fa:dc:f7:21:7a:51:48:b0:a4:08:42:8a:0e:
         c7:55:8a:72:b0:4a:f7:22:ec:9a:d5:29:0a:0c:bb:c9:49:c0:
         a1:d2:74:4e:6b:bf:ac:48:12:55:35:4c:c2:fc:92:86:1b:8a:
         40:15:1f:48:0c:84:2f:9e:07:af:2c:c8:6e:7d:83:ed:e4:79:
         b9:bf:d7:ed:c4:d0:0f:17:7e:05:51:e5:bb:5d:7b:1c:e3:79:
         70:34:37:45:bf:bf:df:4e:c0:68:2e:a4:d7:e2:3c:2d:b2:93:
         90:b0:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:27:22 2025 by rpki-client