Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa
File:                     be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa (raw, json)
Hash identifier:          G+bVOWED+mcO+HuQiH1+W6X2GAiXJ95N863UmA1Nt2g=
Subject key identifier:   2B:8F:6E:12:18:4D:14:BB:03:77:55:E2:EC:E2:65:5B:BD:02:26:7D
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F432858481C9A7B4A033C2B843AB64F0C
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     18875
IP address blocks:        2607:d880::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:7b:4a:03:3c:2b:84:3a:b6:4f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=ca5f5f89-a184-4b65-84f7-95246e471479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e3:ab:7a:c4:6c:24:bc:5b:fc:ca:c4:c0:66:
                    fb:33:6e:b4:1b:07:09:0f:1e:1e:94:f0:d4:74:a0:
                    c2:b4:3a:51:b3:fa:c0:05:25:ad:01:7c:51:d9:1b:
                    d4:b2:97:a5:2b:9a:6b:9a:3b:23:51:29:5d:8c:53:
                    88:bd:1c:27:0e:da:01:aa:d7:8e:d9:08:cf:58:78:
                    d0:a1:90:66:54:bf:47:b5:d4:59:7f:69:1a:62:91:
                    28:26:3a:e5:2c:75:87:31:2c:19:37:9d:fc:6b:48:
                    36:ce:6c:5f:86:c7:44:6f:89:51:d6:8b:c6:19:ef:
                    3d:a9:3e:87:46:4e:7d:3b:75:1d:58:cb:f1:a6:97:
                    57:c8:ac:e3:5c:8f:49:35:d3:a1:1f:c3:94:bc:36:
                    70:e3:7f:43:3e:60:00:38:b4:08:7b:eb:a0:e5:30:
                    e0:d1:97:07:5f:fd:4e:cd:18:65:93:c4:9f:ff:7d:
                    64:ec:46:4e:d6:a8:bf:0e:2b:56:a0:d4:21:ed:30:
                    e0:f8:f8:55:ff:a2:90:68:f1:2a:ff:87:8b:cd:77:
                    df:de:1e:fa:b1:0b:0f:11:9a:51:36:80:1c:5f:89:
                    34:fa:e7:91:f4:96:21:85:2f:06:9c:8d:5f:bf:96:
                    8f:00:46:21:d5:23:4a:d0:c1:7e:24:5a:c3:02:f9:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8F:6E:12:18:4D:14:BB:03:77:55:E2:EC:E2:65:5B:BD:02:26:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ae:c6:76:35:5e:41:96:fc:d1:7e:da:e0:ef:f4:7e:34:bb:
         a6:62:1a:b5:f4:88:5e:10:17:0f:69:c6:2a:d7:b9:3b:12:2e:
         2b:a6:2c:12:5d:a7:cc:c9:79:6e:83:4a:42:e3:39:75:0c:f8:
         12:b3:8c:0b:54:00:f1:75:0c:d1:6a:0d:b5:6d:93:af:e8:4a:
         e6:0a:21:34:5a:4e:e9:a9:1e:df:6d:f1:44:fc:b8:d4:58:50:
         62:7f:5c:43:2b:2b:c0:2c:e8:cf:63:81:c2:1b:2c:b4:f2:3c:
         0e:2c:bd:a6:c9:27:16:bb:7d:45:41:74:c5:96:5f:61:2a:1b:
         20:86:97:61:83:3f:28:de:99:7b:d3:19:84:f8:22:00:ec:08:
         55:d5:d5:02:13:b0:0a:e4:16:c9:fa:cf:1e:bc:bc:4d:51:af:
         0b:1c:c0:2f:3a:9c:09:a7:89:b8:a5:8d:6c:a1:3a:b3:66:1f:
         fd:d5:34:11:34:b3:9a:bd:78:10:0c:ca:0e:aa:b2:b2:d8:54:
         c8:63:1b:0b:bd:82:71:a4:3f:63:b7:e1:d5:51:be:e0:a4:73:
         f3:60:47:38:2f:e7:8f:54:b6:b6:0d:a6:08:fe:27:ff:a2:84:
         83:3e:f2:2f:f7:60:d3:37:af:9a:b6:73:f3:34:ac:b8:84:49:
         db:b4:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:25 2025 by rpki-client