Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa
File:                     19de2498-405e-3610-ad8d-53af4f1172c7.roa (raw, json)
Hash identifier:          CIAEsk/x0rVGG5tltlXfrj0wl9zNJFrTeJrz7Ic+iN0=
Subject key identifier:   C9:F4:19:3F:9A:3C:15:30:80:53:50:54:EB:FA:6D:C3:B0:91:71:4B
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584851A57F12801FFCABEB45B912
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     12189
IP address blocks:        2607:6000:f00::/40 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:7f:12:80:1f:fc:ab:eb:45:b9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=c25197c9-8d28-4467-b7f0-3366af324159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:f8:8d:b6:04:9c:41:c7:5e:97:73:03:45:
                    1e:c3:6b:18:68:6d:d4:c7:52:ef:de:ca:e1:32:03:
                    6b:ae:fd:dd:25:c1:ed:37:cd:c5:d8:9a:f8:97:95:
                    28:c5:22:47:c4:47:09:c9:c9:ee:01:27:11:75:7c:
                    f8:19:05:6c:73:67:5e:2c:aa:45:70:3b:d7:91:9f:
                    df:08:67:c7:fb:c6:dd:fe:df:d4:70:6d:80:d5:c4:
                    54:0c:77:3b:ff:b9:58:45:c9:6e:ec:75:84:b0:e6:
                    78:8a:2d:80:92:0a:45:da:2c:f0:e0:11:16:6a:88:
                    c4:6d:c2:fc:43:61:f2:4f:fb:78:3e:f7:a6:b3:fa:
                    f7:0d:ec:af:33:49:f5:63:fb:56:59:c3:cc:ad:08:
                    8d:fe:ac:a4:7e:57:53:7e:05:fb:85:01:2c:e8:32:
                    90:e3:97:93:22:92:ff:33:43:7d:bd:2d:90:3c:41:
                    52:25:ab:31:6a:c5:77:2c:f4:00:9e:8e:cf:cc:43:
                    0b:e4:64:df:ec:28:b7:ee:71:91:65:15:2e:32:ec:
                    c3:f1:06:70:53:29:5b:5b:b5:55:12:ef:2a:e0:9d:
                    2b:19:1b:d2:84:40:d0:f7:6d:79:b2:5d:98:e3:36:
                    f3:65:de:cb:c3:c1:2d:b6:6f:3b:b0:4e:2a:73:25:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F4:19:3F:9A:3C:15:30:80:53:50:54:EB:FA:6D:C3:B0:91:71:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:dd:68:b5:c0:8a:71:c4:dc:9e:fc:0a:96:84:89:41:57:5b:
         53:a5:8e:4f:78:40:0e:6d:35:da:cf:0a:db:30:fb:d1:45:2b:
         0f:c9:55:fa:da:f8:c6:0f:23:6a:93:70:cb:f8:da:34:4e:02:
         58:86:50:90:dc:c2:2f:02:28:72:bd:66:34:87:cc:c4:56:8e:
         f7:0d:c7:a4:ec:9c:ff:08:3b:a6:d1:24:fc:da:af:91:bc:d0:
         50:f9:6e:3c:26:f0:12:46:bc:b3:f8:96:54:15:4e:91:f1:f5:
         03:83:c2:4f:61:9c:09:cd:32:f7:a6:e2:ef:73:14:76:01:32:
         40:62:29:22:d6:fa:2b:70:f6:5c:e4:3a:1d:65:2d:35:09:48:
         01:34:ce:a9:6f:a6:30:14:64:44:a1:5e:45:88:8b:2b:9d:33:
         c1:0d:6e:58:05:28:e1:89:69:00:3d:02:e3:4b:04:61:46:4e:
         9d:fd:cb:07:08:15:db:04:5e:30:e4:a5:5f:0f:80:6c:e0:35:
         4a:0c:34:49:a4:af:5f:c7:94:2e:ae:70:9e:1e:e4:eb:94:10:
         f2:9b:a7:fd:f1:10:71:d9:5b:96:c3:74:53:7f:6f:c5:ae:5f:
         0f:1b:23:46:bd:c1:d1:ca:73:3c:02:83:9f:ca:fd:56:8d:16:
         50:ed:b3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:15 2025 by rpki-client