Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa
File:                     d12e5708-1aaf-3a48-be6d-c36976cf0409.roa (raw, json)
Hash identifier:          6DqBiU5fdXMYatvCOR3JxdGp2pUOl7ANNFX+b7Yf+Vg=
Subject key identifier:   CA:DE:30:DB:FA:24:2D:BE:BF:75:38:0C:09:AC:6E:0E:83:46:54:A3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848159FFA5FAFD0DC52C65E1A80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     396362
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:fa:5f:af:d0:dc:52:c6:5e:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=dab72163-0045-4441-bd09-12b5921378e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:2d:9b:44:e4:f4:d4:02:3f:6e:8d:95:94:
                    6b:ca:53:da:29:d3:2d:32:eb:35:21:4a:e6:a2:90:
                    cf:bb:0c:32:97:da:4e:74:a0:20:72:60:05:3d:04:
                    28:f7:11:d6:fb:24:b5:65:db:c8:5a:eb:66:df:e9:
                    37:91:f7:8a:78:64:c1:82:ed:d1:79:2a:0c:81:93:
                    bc:b1:ab:8e:ff:f8:8a:e7:7f:1c:89:db:f7:c3:eb:
                    84:c0:54:5d:81:86:dd:be:15:41:ed:26:5c:95:6d:
                    a5:b1:99:16:e2:dc:e2:6c:52:3d:8b:04:54:30:ef:
                    0f:cc:01:46:e4:64:d4:c8:2d:cf:77:1b:69:f2:01:
                    b2:ad:09:7a:75:6b:cf:8d:da:c0:a7:fc:21:72:f5:
                    05:59:2e:4c:48:86:b3:58:a9:40:ac:ce:eb:8d:ba:
                    cc:46:eb:4d:eb:8d:96:6b:f6:d5:03:3e:1c:10:c1:
                    fd:02:53:9e:5d:7d:1c:a6:02:19:8d:2a:4d:14:ce:
                    52:a6:50:01:30:62:50:ab:63:32:cb:6b:e3:2d:d9:
                    ab:89:e5:a6:14:97:db:a8:70:9a:71:ca:5b:20:39:
                    02:e4:3e:f0:b1:8c:39:70:f4:6b:e8:9c:d3:82:14:
                    69:74:53:b8:e9:94:33:13:af:48:f3:20:6b:68:c4:
                    7b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:30:DB:FA:24:2D:BE:BF:75:38:0C:09:AC:6E:0E:83:46:54:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e9:f3:38:9f:5a:5f:64:39:8f:b6:c5:c8:bc:e0:9b:92:88:
         2d:c5:36:2b:f2:a0:a2:e8:ba:c3:9b:23:b6:33:df:d4:26:48:
         8e:74:9c:63:1e:57:32:50:bb:da:3d:be:52:d8:fb:40:16:68:
         fe:df:ff:0b:d4:97:67:6e:83:ae:33:4a:e2:4c:8e:92:df:25:
         0b:8f:76:d3:2c:63:b2:18:e7:11:7f:92:41:eb:6e:54:c8:bd:
         7e:59:33:0b:23:6f:16:0e:c7:a9:77:a7:3f:18:7d:3a:77:27:
         02:6b:3f:11:04:0a:b0:f2:8e:19:ce:2e:a4:9e:cb:e1:ca:e7:
         f4:e3:39:de:82:c5:83:2c:3e:e8:9d:3e:85:8b:a2:a2:e2:8a:
         d5:2d:bf:10:fd:58:01:f6:98:0e:14:6a:70:ee:9c:1a:e1:24:
         27:2b:bd:03:75:42:e7:52:74:69:7c:2a:92:6f:8b:5f:01:e0:
         95:ab:3c:6e:1a:7e:86:3a:75:29:2c:2b:d5:3a:aa:13:f8:3f:
         03:82:70:f9:a1:b6:41:8b:6d:53:e3:33:e0:3b:2d:39:4b:0c:
         8a:e8:63:8d:07:4b:12:b3:61:1d:5c:13:0d:b6:61:30:f9:9a:
         e4:f8:59:5f:75:90:44:ca:3d:5d:f4:f3:1d:f6:ab:aa:80:a7:
         32:04:a4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:55 2025 by rpki-client