Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/275ddba4-64f3-3e1c-8798-63f43743a9c7.roa
File:                     275ddba4-64f3-3e1c-8798-63f43743a9c7.roa (raw, json)
Hash identifier:          gxCaqwQAz6OesRr5x1qQmjcVM4ZzQGTl1nBKDFKGP9A=
Subject key identifier:   C1:2C:2D:C5:E0:6D:1E:5C:F8:20:0F:6C:D4:90:FC:C9:E2:B9:52:5E
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584827C533CD50CBC517AA4C0716
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/275ddba4-64f3-3e1c-8798-63f43743a9c7.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     53766
IP address blocks:        2605:a7c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:33:cd:50:cb:c5:17:aa:4c:07:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=32faae1b-ebcb-4166-b898-5b8b7f4f60b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a5:e2:63:00:1f:e9:36:cd:d5:8e:db:8b:11:
                    b2:d2:d2:9b:01:4f:5f:4d:66:b4:05:4a:5d:7d:21:
                    8a:e6:53:2f:c8:07:df:31:fb:ed:4a:fc:14:91:8d:
                    b7:bc:3b:05:d8:6f:f6:c7:1c:24:c3:52:50:bf:02:
                    b7:61:31:b2:cf:ef:b3:4a:8a:8a:ba:4e:ec:75:f5:
                    3c:59:05:aa:41:a7:3c:bc:37:c1:5a:70:64:97:91:
                    a7:1d:39:c7:f9:54:77:c4:d1:8e:0a:5e:aa:3d:c2:
                    df:2a:0f:61:ae:ea:74:bc:45:17:d6:a4:46:10:ee:
                    ec:97:49:c3:e9:86:ec:e8:23:ee:9e:76:cc:17:b6:
                    63:96:0e:f8:86:26:ce:6b:3c:ba:75:88:33:39:f7:
                    34:25:5c:d3:5b:53:e1:14:6f:82:10:bb:a6:98:2d:
                    29:f8:fa:a2:72:53:4e:1b:13:ab:d2:96:e6:d6:42:
                    98:10:1e:f0:6c:c4:b9:6b:39:15:03:18:2f:c1:99:
                    c1:cc:e2:dc:2e:5f:43:b9:38:dc:68:57:66:7e:93:
                    41:0d:b4:d6:12:6f:63:98:1f:f1:2b:57:12:df:b1:
                    cc:b6:7c:01:34:2c:c5:83:99:18:f4:02:21:28:40:
                    e9:8b:66:af:08:86:e3:c0:9e:ff:e9:c1:43:ea:2f:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2C:2D:C5:E0:6D:1E:5C:F8:20:0F:6C:D4:90:FC:C9:E2:B9:52:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/275ddba4-64f3-3e1c-8798-63f43743a9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:71:91:49:47:9e:6b:84:54:d2:7d:58:7b:1e:4d:35:0c:bb:
         e6:be:8c:84:86:c4:f5:75:a1:d7:45:97:c1:32:1f:93:c4:7d:
         fa:90:d3:aa:48:3f:20:ac:54:02:23:c7:34:3b:c9:5c:05:ca:
         eb:c7:ad:d1:b1:55:ce:21:75:b2:fe:aa:b6:0a:2c:d1:67:07:
         74:3a:e4:73:13:a4:16:7e:1f:bd:63:17:4e:98:a7:c2:51:28:
         81:f5:91:0e:4b:ab:4a:4b:ae:ae:b0:34:67:5f:6c:11:06:23:
         df:b8:5d:df:f6:86:76:9c:e3:1e:4d:1b:67:8b:cd:21:ac:7e:
         22:99:b0:ad:c4:7e:29:cf:ff:0e:76:c2:6d:45:6c:f0:be:b8:
         90:97:8e:5f:56:b0:50:8f:d0:2e:c5:79:89:d7:44:e1:a9:25:
         2f:5d:0b:8f:14:51:95:52:de:6c:49:8a:f2:ff:92:ec:23:b7:
         79:ff:89:9d:46:b5:cb:0f:b1:fb:86:51:f1:59:45:e0:12:56:
         c6:ea:da:4f:22:81:58:07:bc:d7:3e:46:44:ae:f6:20:3e:b0:
         96:e5:3b:3b:ea:d8:1a:3e:c8:66:5f:13:ee:d8:f9:5c:90:43:
         3d:77:e6:28:b2:14:9e:05:6b:9c:df:8f:23:0e:a1:40:3d:60:
         3a:ea:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:39 2025 by rpki-client