Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/d7406b37-06c9-307c-a254-f9fd323a4884.roa
File:                     d7406b37-06c9-307c-a254-f9fd323a4884.roa (raw, json)
Hash identifier:          IY+z5D7ZlKncftF/Y6Uw3oR7UViEB7z9PFe5wacFouY=
Subject key identifier:   3F:BE:77:0D:CA:EA:5E:9C:20:5C:50:C1:9D:AA:F3:60:82:9A:13:CD
Certificate issuer:       /CN=e3bd1f87-8818-4b01-a7e8-514858edd50e
Certificate serial:       010D0C9F43285847EFEF8B7FB2B75429D351D280
Authority key identifier: 2D:95:2F:80:9F:58:C0:47:70:47:3E:79:F1:B9:A8:93:FB:D1:B4:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/d7406b37-06c9-307c-a254-f9fd323a4884.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        2602:817::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8b:7f:b2:b7:54:29:d3:51:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd1f87-8818-4b01-a7e8-514858edd50e
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=b99d2304-7b64-40c5-837e-d4f1b9889b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:1f:9e:49:e2:c4:69:7f:ee:4d:f4:b5:d5:
                    17:80:70:09:ea:72:8b:f6:76:24:3c:9a:7c:15:94:
                    63:aa:0d:7c:b8:ba:00:cf:dd:a3:a3:c5:8a:21:43:
                    6f:5a:71:eb:b9:f4:53:2c:ee:35:fe:ac:4b:6b:e5:
                    a1:03:3d:69:b1:fe:d3:1f:03:db:85:33:d3:91:4e:
                    58:dd:72:ab:0e:72:45:37:5a:ab:a3:07:ef:40:44:
                    05:10:12:2a:a8:7b:ea:4b:71:54:5b:bc:a5:aa:90:
                    4b:03:e2:58:6e:fa:da:07:0c:e2:79:e2:b4:b1:f1:
                    b6:b0:f1:a7:65:c2:dc:98:83:bb:33:d9:8f:7b:89:
                    2f:60:c8:e6:13:ca:21:a5:22:85:e8:8e:d4:66:62:
                    f3:07:9d:b2:72:e3:9c:40:4f:a7:41:8d:90:4f:13:
                    76:c4:b3:00:16:dc:05:d3:52:34:95:16:76:3b:7d:
                    09:fb:69:b3:b1:dd:d8:76:d7:a8:e2:57:a6:63:da:
                    0a:fc:45:40:91:48:fb:a9:7f:62:6a:6b:ad:c2:86:
                    30:43:4d:4c:7e:0d:8f:c3:43:15:00:5b:35:27:70:
                    19:5b:e9:37:22:98:20:de:5c:74:5e:2c:09:44:d5:
                    33:fe:74:3c:7d:b5:14:c8:b6:91:0a:08:99:e0:97:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BE:77:0D:CA:EA:5E:9C:20:5C:50:C1:9D:AA:F3:60:82:9A:13:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/d7406b37-06c9-307c-a254-f9fd323a4884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:95:2F:80:9F:58:C0:47:70:47:3E:79:F1:B9:A8:93:FB:D1:B4:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:c0:bb:f8:63:00:59:5a:0a:a7:8b:00:c4:0b:2f:87:3b:ab:
         c1:da:69:b3:56:d2:4d:a3:fb:05:4d:36:ea:cc:cd:72:d9:c6:
         ec:03:76:c4:95:35:e3:b2:af:bd:15:bb:07:77:c1:9e:6a:5c:
         36:d3:15:c3:0e:3f:1f:99:74:4d:27:e5:1f:9f:04:ea:23:9b:
         d4:43:98:86:c6:ec:69:ed:19:14:29:02:5b:db:a4:5b:0a:16:
         5b:5b:05:c2:23:cc:5b:05:9b:c3:06:f3:ee:f7:d8:94:a1:42:
         10:70:f8:2d:8b:17:56:31:fd:b5:e4:34:1e:75:4d:2e:78:e9:
         e4:34:95:ca:26:d2:8a:e7:9e:af:50:69:e0:e1:0b:aa:e8:a0:
         ad:16:c4:e4:4c:8d:20:a9:23:2c:f8:74:0d:9d:b8:c3:af:ab:
         81:0d:7a:0e:ff:55:e3:88:67:6d:0b:4d:7f:31:0e:f4:68:0b:
         24:2b:9e:d8:06:83:47:a8:33:ea:ac:46:4f:2d:2f:29:c4:31:
         7f:71:3d:5f:1c:90:28:57:24:22:7e:00:49:84:bf:5d:81:0b:
         85:c4:b5:6a:97:7b:9d:86:42:e8:c2:be:76:68:bc:c4:e8:ea:
         69:a0:61:77:45:49:83:a4:72:ec:0d:62:f3:da:bb:1b:b0:d6:
         0d:4e:83:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:34 2025 by rpki-client