Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7880a518-272e-3d8a-a2fc-5e1873b388c3.roa
File:                     7880a518-272e-3d8a-a2fc-5e1873b388c3.roa (raw, json)
Hash identifier:          lneovujB30L6w0h5l1BLt6rStMXQBzdaxvtGcYcmCls=
Subject key identifier:   D1:CB:57:1D:CF:83:3D:4A:BB:50:FE:69:B7:5A:94:69:F7:AA:EC:96
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858486EF5BC1EB8E28132945A79E0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7880a518-272e-3d8a-a2fc-5e1873b388c3.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     400672
IP address blocks:        2607:ff00:b00::/40 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:bc:1e:b8:e2:81:32:94:5a:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=0ca47d4a-a8b6-4958-8544-e04c6e5d85cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:60:35:84:78:7d:53:be:47:5b:3a:46:23:ea:
                    95:88:18:a9:92:d5:a5:92:46:03:ab:60:b0:dc:72:
                    66:56:b7:a7:22:e6:8d:d4:7f:eb:74:da:3a:9d:14:
                    aa:a6:74:32:6e:48:ca:ab:67:83:e3:81:50:3a:3f:
                    91:92:2a:80:0b:bf:65:49:2d:11:e2:db:57:e2:4c:
                    12:8d:7d:6f:8c:d6:61:06:00:d9:82:8c:aa:23:71:
                    18:16:91:b4:e7:19:71:f9:dd:d0:15:b9:eb:a3:1e:
                    d9:10:cc:c5:b0:b6:2c:0d:e7:b1:d2:87:39:33:fa:
                    1d:3c:8f:fe:aa:df:a0:b8:a2:74:fd:a0:0d:c1:a6:
                    a1:f4:9a:76:52:14:d9:e2:a6:d7:ea:07:0c:a1:3d:
                    08:64:67:59:a2:c0:45:8e:09:17:36:53:35:09:d6:
                    78:d5:7f:9c:c2:33:4d:b6:ff:4d:70:70:bd:af:75:
                    b3:d4:ed:58:30:98:e8:02:59:2d:35:33:c2:e4:26:
                    0c:50:32:88:36:05:63:17:39:e0:0e:01:ed:8c:9e:
                    bd:2a:76:89:59:91:b4:4e:e6:e1:a9:23:12:9b:9b:
                    1f:33:3a:a4:61:27:05:dc:fc:9a:25:f4:44:40:f0:
                    e0:32:31:f1:c5:ed:ef:d0:48:34:0a:27:aa:41:33:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CB:57:1D:CF:83:3D:4A:BB:50:FE:69:B7:5A:94:69:F7:AA:EC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7880a518-272e-3d8a-a2fc-5e1873b388c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:dc:3a:6e:a3:13:a9:e7:aa:27:4d:43:02:f8:2f:94:0d:
         59:df:a8:e2:6d:6b:c9:76:99:0b:a7:60:f7:81:4b:9b:59:d2:
         1a:a7:f9:32:97:6b:70:f4:50:75:64:27:71:d9:86:5a:fb:8d:
         3e:0c:6d:42:d3:75:cb:e8:22:a3:fe:24:c6:56:ad:bb:64:f6:
         2a:9c:38:09:47:b2:71:14:20:1b:90:7e:11:11:cf:13:1e:fb:
         e9:93:b8:17:7e:20:e2:b1:fe:5f:0b:cf:41:2e:b9:ab:a5:43:
         26:be:0c:3f:f0:6a:3f:8b:82:1f:c4:c6:77:1e:24:35:90:39:
         e4:fc:d1:30:9d:c7:71:76:1b:0f:4e:4b:1d:d5:72:0b:67:31:
         fc:2a:b0:46:31:92:87:94:1a:ce:5d:40:80:73:8a:40:bd:ea:
         b6:ef:fa:3e:29:59:f3:e7:ff:e6:1b:58:9d:87:b2:d9:3c:5e:
         70:e7:4f:17:3b:09:53:01:78:2d:4d:ab:80:47:9b:4b:c9:6b:
         51:b1:9e:ad:13:ac:48:62:5b:8a:9c:77:e6:f9:8c:35:81:a0:
         17:21:c0:07:ca:ac:8b:dd:79:4e:f9:d3:41:41:1a:b4:26:f0:
         15:5f:53:87:0e:2b:28:a0:8a:6c:e6:7f:e8:bc:ca:52:75:dc:
         59:b7:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:51:10 2025 by rpki-client