Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa
File:                     2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa (raw, json)
Hash identifier:          dE9YY0LfJfqWA7gOtDOPfMpYFvMY+iTGA0ycGQNQ/QI=
Subject key identifier:   14:BD:9D:F1:27:10:6F:E3:0E:22:CA:CA:FA:B0:F2:03:F5:11:CD:AC
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584832F026ECEC7D967D91300980
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     19437
IP address blocks:        2607:6002:300::/40 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:26:ec:ec:7d:96:7d:91:30:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=7c3cf1a8-ccab-4401-be63-3a7b33215da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:bf:6c:37:47:5e:78:9e:25:3d:2f:f6:6a:
                    ab:2b:b7:2b:93:8b:4f:24:d5:7a:77:76:93:df:13:
                    37:35:96:f4:03:b1:43:6f:7a:68:b2:e2:e4:e2:81:
                    6e:a5:d7:e1:64:b9:d1:38:17:f7:ab:74:3f:87:c4:
                    c1:3d:b7:c8:37:b1:b6:29:0a:fa:bc:e5:25:22:d4:
                    5e:e6:c8:ae:25:54:41:b9:d0:f8:c4:33:61:3a:41:
                    bc:88:5e:b4:80:83:c1:41:70:79:9c:02:27:2f:f3:
                    b7:52:72:1c:36:f5:77:ad:03:2a:bf:98:d6:f6:b4:
                    38:97:43:94:0b:fc:c7:b6:b4:ab:43:7a:43:47:0c:
                    25:eb:ef:61:c1:24:d6:bf:1a:77:5d:c4:30:88:99:
                    d9:54:44:fc:9c:df:37:48:01:df:ee:82:49:8f:5c:
                    dd:a2:2c:5b:2d:17:44:62:90:7f:d5:c6:f1:30:af:
                    59:60:69:fc:15:2b:1f:54:1e:92:af:99:a1:6f:be:
                    d9:2a:73:63:e0:6a:c6:ee:14:0e:9f:46:42:98:a0:
                    48:9b:e1:0f:b3:ac:b9:0d:30:ac:19:8f:ec:f6:5e:
                    c2:bb:9a:9a:d3:43:66:1a:cb:c6:2f:7d:fc:3c:b2:
                    bb:c7:70:ab:6d:0c:bc:48:d4:a1:38:18:6e:96:b0:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BD:9D:F1:27:10:6F:E3:0E:22:CA:CA:FA:B0:F2:03:F5:11:CD:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d0:5a:03:35:56:99:6c:d5:4a:f5:15:2f:eb:d5:ae:00:c0:
         29:fb:a8:a0:97:2c:5b:6b:61:12:3a:69:43:24:e0:3f:3b:f0:
         48:58:7c:ec:a3:1b:15:4a:0f:eb:5a:85:0c:d2:ae:e1:40:47:
         b5:39:42:8f:48:57:66:fe:c9:27:20:8f:72:8f:27:ea:2b:31:
         60:0a:90:92:fe:dd:db:bf:e9:91:11:c4:5d:10:3e:4a:60:ed:
         67:e8:3f:43:75:04:3c:fd:b1:92:90:a0:f2:29:19:a8:f0:b7:
         97:7a:4b:91:a0:99:39:bb:5a:8d:7d:cd:4c:34:c6:f0:0c:ba:
         1d:63:9f:91:fb:98:36:ea:08:71:f1:60:42:fe:a4:0e:31:e8:
         d5:28:31:96:98:ab:8e:72:23:be:46:00:bb:64:26:dd:00:58:
         f7:f6:45:73:31:86:0c:e3:d9:14:22:0c:1e:5d:62:59:0d:df:
         be:0a:4b:08:97:02:64:6b:3a:7e:24:c3:8e:ca:b3:02:6e:f4:
         cd:b7:85:36:3f:9f:2e:91:fe:f2:01:d8:a5:78:ab:26:83:56:
         2a:99:af:0b:98:62:cd:46:5e:15:7e:3a:f5:59:b9:14:5a:19:
         f9:59:75:dd:43:92:89:40:33:33:80:33:3a:39:30:d8:69:e5:
         24:a8:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:15 2025 by rpki-client