Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/efd98447-5843-338f-8753-51c423c41f71.roa
File:                     efd98447-5843-338f-8753-51c423c41f71.roa (raw, json)
Hash identifier:          X/tI+mUAPuZSMMXeLpqw9jFWKZ3c6qBWF3taKGWEQXs=
Subject key identifier:   F9:CB:86:9A:73:A9:15:69:DD:4C:98:C3:D0:45:AA:C2:8E:BD:33:4D
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584823954E095F64CA37F8741B80
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/efd98447-5843-338f-8753-51c423c41f71.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     16509
IP address blocks:        2606:9680:20a3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:4e:09:5f:64:ca:37:f8:74:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=a491d1b1-cedf-4883-844d-7ada122e1615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7f:d0:c6:a8:e5:f9:24:6b:fc:c7:33:b3:7d:
                    4a:0c:b8:5d:7b:99:b8:c7:bd:e3:d3:ab:17:04:40:
                    27:a4:a6:2f:31:35:44:62:0e:2a:10:cd:ef:9d:12:
                    23:8c:f0:28:50:b8:ed:0c:bd:22:72:98:f4:8d:e1:
                    ff:ea:23:77:d3:54:41:e6:19:c9:46:a0:14:ae:86:
                    77:91:1f:08:13:25:33:55:34:d0:58:19:cb:cd:8d:
                    27:30:37:b2:fc:6c:51:1b:33:b1:8a:f9:d5:3d:89:
                    d3:b0:dc:79:6b:cf:75:4e:a4:56:af:af:37:38:6d:
                    0e:36:af:11:e1:7b:7b:a6:0d:65:d9:33:d5:0c:2b:
                    35:1f:47:c0:62:63:83:39:3a:fb:c3:0b:d6:2e:8c:
                    64:c7:4d:12:65:e3:71:13:78:6e:a3:47:a5:23:93:
                    8c:10:8a:4d:85:2c:bc:4a:9d:79:3a:49:91:30:86:
                    41:44:d0:40:6f:b5:97:b7:aa:42:95:20:60:cd:99:
                    b0:d3:a8:66:16:46:4a:19:a3:eb:eb:72:d0:96:6f:
                    23:c2:74:eb:e6:9c:2b:5f:b6:d3:4f:2d:59:be:01:
                    0e:79:51:d8:f0:22:2f:d6:24:93:dd:f6:52:e0:1c:
                    72:c1:59:d5:d1:06:f7:e4:21:40:b5:72:03:7a:0c:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CB:86:9A:73:A9:15:69:DD:4C:98:C3:D0:45:AA:C2:8E:BD:33:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/efd98447-5843-338f-8753-51c423c41f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9680:20a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:7e:2e:2b:06:f3:b0:35:e9:1f:a1:e6:7f:29:08:7c:8e:a5:
         de:d3:37:d3:2e:88:c6:84:45:71:5d:0e:71:74:96:b2:b8:1d:
         6b:e0:8a:ac:d2:0c:28:20:44:99:39:72:d9:77:63:bf:24:62:
         0e:f7:7b:cd:57:d8:d5:dd:fd:3a:6d:f8:d7:a2:e1:b5:b2:b6:
         ad:83:11:0c:7d:95:01:9c:b8:f3:74:fb:f6:4d:e0:a3:87:9a:
         f3:72:ea:bb:80:40:55:59:8d:fd:62:a7:b6:64:55:9b:28:28:
         b8:8e:93:43:2d:7f:5a:f1:91:90:f2:54:88:5a:3f:33:62:e2:
         2d:96:bd:e2:eb:7f:77:d7:51:6a:cd:a0:c5:3c:50:16:16:de:
         27:93:3d:fc:33:82:f0:ab:a8:37:e0:41:86:97:26:3c:12:65:
         55:27:e8:7b:e7:9f:43:96:2d:9c:1b:b3:82:5b:b9:dc:97:e6:
         9b:69:9e:11:a1:9d:1b:6a:8f:e0:20:e4:e6:ae:64:2d:b2:03:
         33:26:a1:00:f6:6f:38:56:26:cc:6e:e9:7c:f9:f3:61:61:d3:
         f6:41:6f:60:e2:02:4f:f4:f1:7b:fa:34:c5:23:15:d7:37:57:
         66:fe:35:d9:70:9a:33:87:22:da:89:8a:c7:41:e0:80:ba:5c:
         58:c9:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:48 2025 by rpki-client