Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/714c4c2a-3556-3855-9280-6a26c1102030.roa
File:                     714c4c2a-3556-3855-9280-6a26c1102030.roa (raw, json)
Hash identifier:          4QrNOx9blndvoDVck4gio+FYT9dZI2sCXoC5jBALa7A=
Subject key identifier:   11:5E:E3:1E:50:94:EC:6F:21:F3:01:1D:44:A6:C7:D8:BF:5E:F4:06
Certificate issuer:       /CN=0002cb20-026c-453e-a998-7e9db1f7f47f
Certificate serial:       010D0C9F43285847FDE4D6E724FBD9C2B387D5C0
Authority key identifier: DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/714c4c2a-3556-3855-9280-6a26c1102030.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     19762
IP address blocks:        2602:f9fe::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:d6:e7:24:fb:d9:c2:b3:87:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0002cb20-026c-453e-a998-7e9db1f7f47f
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=40189a9c-1d41-401a-95c5-7d53080df0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:d3:3b:11:9b:7c:73:db:d1:15:0a:5c:fd:
                    f6:e7:b6:be:3a:cf:3b:95:a1:54:94:cb:f7:db:50:
                    2d:47:8d:73:38:6f:4e:a6:4b:c6:77:d9:e4:ac:78:
                    a2:8f:03:c4:60:06:48:93:dd:01:0c:7d:b9:1a:44:
                    c7:87:5b:d1:0a:e3:53:16:f6:a4:19:76:5b:99:3b:
                    65:f0:4a:10:ba:0d:1b:d5:73:fb:ef:4e:08:03:1c:
                    24:ec:c8:13:7d:84:d5:6a:c6:78:2c:88:47:c3:98:
                    c5:d2:20:4a:4c:90:86:4c:45:fb:79:04:e3:7b:f9:
                    fc:45:b8:71:70:0e:4d:0a:ef:72:fa:99:d5:a5:b1:
                    24:be:60:1f:1e:11:95:02:28:2e:91:9f:bd:9e:7a:
                    88:bc:a0:b8:ad:fb:78:6f:6d:5e:4a:2b:7c:b6:2a:
                    b2:84:43:fe:eb:d1:08:f1:a5:6b:c9:2a:e7:44:6e:
                    92:78:be:b9:f6:7e:27:77:cf:d5:ea:df:83:c7:40:
                    31:e3:c8:df:b8:ff:87:de:f4:a0:ee:8e:c3:2c:18:
                    2b:c4:58:aa:fd:34:80:30:d1:fc:5c:a0:48:76:32:
                    3b:5b:3b:41:40:34:ce:28:63:02:97:5f:df:25:d4:
                    e4:d1:a7:cd:c5:d0:dd:18:89:ba:92:13:c8:0e:1b:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5E:E3:1E:50:94:EC:6F:21:F3:01:1D:44:A6:C7:D8:BF:5E:F4:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/714c4c2a-3556-3855-9280-6a26c1102030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl

            X509v3 Authority Key Identifier:
                keyid:DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9fe::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:68:d9:2d:0e:ff:f7:97:71:61:fc:9f:a7:b0:fb:f4:fd:
         88:a3:0b:90:11:a6:7d:2e:5c:a1:09:e1:98:82:6a:18:c2:c4:
         1a:f7:a9:ba:57:a0:7f:68:78:09:ec:c3:01:a6:f9:e7:1d:ea:
         7c:b4:d3:77:74:92:ee:fb:60:07:48:93:f0:9b:de:4b:0e:16:
         13:94:98:62:0a:ea:eb:88:2b:24:38:81:36:33:2c:04:d0:02:
         b0:2f:1f:fd:a7:a8:2c:60:75:d4:e6:f4:a8:ab:d8:33:b5:bd:
         6d:b6:1a:2a:e9:18:b7:21:58:4e:ab:46:5d:26:b5:77:3a:26:
         b7:1a:8f:7d:58:ba:b4:59:ee:db:af:88:b0:12:57:31:03:f1:
         ba:b7:d6:54:c4:90:69:f8:70:26:f2:02:88:50:81:1e:46:25:
         48:b1:13:3a:eb:c6:1d:88:7f:41:9a:7d:b6:5c:3a:03:86:73:
         30:d1:2e:a4:14:dd:2c:e6:f8:cb:3a:6b:9e:9e:46:d5:4d:eb:
         41:d9:45:34:a1:ff:c2:2a:bc:4f:db:c4:f0:04:66:b4:94:e7:
         44:65:37:c8:58:12:a0:f7:f4:77:54:c1:cc:77:20:6b:25:78:
         46:14:b5:10:10:ef:92:35:e8:dc:34:fe:73:f3:86:4f:14:37:
         db:f6:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:07:11 2025 by rpki-client