Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa
File:                     623eee29-c1bb-3ce9-82ac-987b2182c917.roa (raw, json)
Hash identifier:          BFg/qPq9SXReQvAA4zTgWdBB69z2TV2biaWRM3tFmnA=
Subject key identifier:   5F:AA:26:52:49:13:22:57:E9:79:C7:2E:60:73:AE:8C:62:66:22:AF
Certificate issuer:       /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial:       010D0C9F432858482EBFFDE372E450502B7F7F60
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     46208
IP address blocks:        2607:f5b8::/32 maxlen: 48
                          2607:f5b8::/33 maxlen: 48
                          2607:f5b8:8000::/33 maxlen: 48
                          2607:f5b8:8000::/34 maxlen: 48
                          2607:f5b8:c000::/34 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:fd:e3:72:e4:50:50:2b:7f:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=10cd0ffc-5970-45a2-8149-5fc7a6375fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:f7:66:9d:bd:e3:43:22:ca:37:c7:20:67:
                    62:8c:1f:91:d8:1e:f7:54:86:cf:e4:6b:b2:c7:48:
                    c9:9e:6d:94:fb:05:7f:1b:03:5f:5c:4f:6e:b7:50:
                    3d:a3:6e:b5:7f:80:51:2f:b4:c2:42:35:d4:45:7b:
                    8a:d8:9c:9a:02:61:0c:5c:45:be:75:8b:0e:43:d3:
                    12:43:42:04:2a:92:0b:4d:e1:ff:41:a7:94:66:7f:
                    fe:c7:fd:e1:ce:c3:a4:12:74:a2:88:a1:6d:67:62:
                    89:21:7f:be:3e:f0:56:71:4e:e0:72:2c:59:b0:00:
                    25:fe:ac:cb:ae:ef:ee:52:fb:f4:9b:d0:66:34:f6:
                    00:6d:55:fd:49:12:e3:ca:7a:05:30:6b:89:4e:55:
                    b1:6d:5b:f4:9b:13:2f:07:ea:43:81:c7:3c:d6:60:
                    6f:db:ae:36:af:c0:f4:7a:7e:25:03:d0:61:1e:ce:
                    6f:fa:ef:f2:bd:17:45:75:e2:29:1b:ec:ca:08:0e:
                    77:a6:83:f2:27:d0:8c:4e:9a:68:db:fe:55:a8:d9:
                    b8:8f:8c:44:7f:35:2a:e2:c1:89:98:99:0a:79:c5:
                    72:18:41:e6:53:5d:5f:30:79:fa:45:50:f8:c7:71:
                    15:8a:9b:bb:7b:3a:b8:3d:2d:94:52:39:50:30:40:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AA:26:52:49:13:22:57:E9:79:C7:2E:60:73:AE:8C:62:66:22:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4f:dc:db:ed:3b:15:37:cc:c7:4f:81:e9:ea:64:b3:a7:ee:
         a6:a9:14:93:59:0f:36:0a:44:5a:72:f2:f2:1d:32:03:c6:d5:
         08:27:3a:8b:b6:1c:3f:43:4b:5b:64:04:ea:47:c2:65:12:72:
         89:e8:44:ee:90:cd:15:ab:85:d2:51:71:f6:3c:97:fa:03:e9:
         c5:80:2f:1f:82:4b:34:ef:09:2a:6f:49:fd:a6:5b:f1:17:48:
         29:f2:58:fd:0b:c4:6b:8b:81:5c:fd:59:b8:0b:7c:be:f2:43:
         6b:9e:d0:49:8d:63:cf:a3:5b:6d:3c:6a:92:dc:30:09:cb:d5:
         bb:15:0f:f6:46:84:0e:7d:e9:b1:cf:11:1b:55:0c:4e:83:42:
         e2:e7:cf:76:00:77:97:58:89:29:dd:9e:3c:b5:e2:ef:35:f5:
         f4:35:9e:a0:26:e4:93:44:a3:94:d3:99:06:82:71:da:e6:0d:
         34:c9:91:fe:fb:03:3d:b9:40:a4:b0:84:dd:df:42:f4:7b:d5:
         cc:94:b3:c7:eb:d4:17:8b:35:73:10:29:a0:09:2b:8b:3d:5f:
         67:28:f8:44:e7:a4:bb:6d:a5:b0:c5:1d:fc:37:42:35:11:00:
         eb:0c:28:22:49:7f:03:fb:ee:72:6d:ee:89:56:f1:c0:59:2c:
         ca:62:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:31:43 2025 by rpki-client