Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa
File:                     8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa (raw, json)
Hash identifier:          97wMG94j5/G8H/eyDf4oH5cL56jFAtLJZKg2LMjLGzg=
Subject key identifier:   03:0A:60:8C:A8:D6:2F:DA:19:58:13:80:2E:D0:27:A1:6F:DB:B9:26
Certificate issuer:       /CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
Certificate serial:       010D0C9F4328584800AF7ECD021920D91CA80780
Authority key identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     23077
IP address blocks:        2602:f9aa::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:7e:cd:02:19:20:d9:1c:a8:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=2960b0a8-2c90-42dd-9acd-5304efec6aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b9:a5:04:ad:d9:85:f9:3e:d5:f7:13:7a:e8:
                    e4:4a:bd:61:8c:93:c3:81:30:c1:09:8b:5e:86:88:
                    ed:7d:fa:c4:af:a8:08:a0:da:0b:99:ee:00:77:19:
                    86:2c:98:8f:97:d8:60:56:5c:76:7c:5a:3b:e0:91:
                    59:9b:15:11:0a:6c:ab:65:40:2d:97:68:e5:9c:3b:
                    e4:5d:0a:6c:c0:82:86:26:33:59:72:dc:e1:a1:f1:
                    45:65:74:a9:20:51:cb:1b:ed:0c:ac:d9:16:12:31:
                    1f:f9:35:18:8a:4b:07:07:2b:68:d8:a4:91:ff:62:
                    01:f5:bf:e8:7a:9a:b1:bd:0d:1e:33:23:dc:f5:62:
                    81:f5:a3:70:07:e3:ac:9b:fb:40:62:0d:45:7b:78:
                    8d:d3:e1:0c:f7:2a:2b:d5:63:fa:7e:a4:9e:d1:ac:
                    41:6e:5c:fb:d0:64:12:fe:69:ca:15:6e:45:db:8f:
                    5a:17:2d:20:10:ca:bf:9f:e0:fd:a2:91:ec:24:d3:
                    2f:29:a7:9f:d3:90:76:49:44:91:7f:ae:41:13:0a:
                    55:56:73:d2:a4:c1:56:d7:7d:dd:74:db:ef:27:6c:
                    88:b7:97:07:26:c6:9b:23:35:d7:26:c0:29:a5:35:
                    81:b1:30:b6:88:a7:56:27:7f:01:2c:78:c4:b8:f9:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0A:60:8C:A8:D6:2F:DA:19:58:13:80:2E:D0:27:A1:6F:DB:B9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl

            X509v3 Authority Key Identifier:
                keyid:0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9aa::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:6d:2d:0c:44:25:37:27:10:09:74:16:ae:90:5f:a4:f9:
         31:dd:d3:08:24:56:41:45:1a:31:30:b8:31:e8:6d:60:ec:49:
         fb:c0:e5:5c:c3:be:fc:8e:92:1d:fd:c1:ed:9f:aa:13:dc:db:
         af:fb:7f:b2:55:30:f5:4f:21:89:ab:c6:d4:aa:cc:66:b3:43:
         fd:38:ea:ee:5e:69:bc:98:32:a7:a1:24:18:b4:c6:f3:4d:34:
         4a:23:58:37:b9:d1:3b:3b:04:c3:d3:3f:60:eb:9f:04:6d:a1:
         f8:7a:12:93:53:17:51:ec:ff:9e:44:7e:47:fa:b4:ee:e2:6a:
         95:2f:4d:1e:75:89:39:82:7f:ef:df:b1:5f:73:0e:cb:e2:99:
         20:93:6a:b8:68:4c:ed:ae:89:ca:aa:ad:0a:22:7a:40:da:7c:
         16:72:3a:30:21:8c:2a:96:56:81:0a:84:fd:90:73:bd:c1:cc:
         51:8f:9a:6e:d3:66:9c:a9:c0:aa:18:4a:81:1e:29:9a:77:48:
         ac:0f:3f:86:9d:2c:13:e7:e7:24:77:26:35:e4:ee:47:bd:9e:
         a5:90:0e:f7:d5:0d:47:4e:5b:48:54:8d:fa:c9:33:2a:30:bd:
         95:46:ff:a6:9d:6d:0e:a7:eb:45:c9:f2:7a:6e:02:97:15:69:
         7b:fb:f3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:49:58 2025 by rpki-client