Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/bbb44bae-4365-3fc0-865c-775668938f93.roa
File:                     bbb44bae-4365-3fc0-865c-775668938f93.roa (raw, json)
Hash identifier:          n8q5m/NTgLcBUZ+oDFTSDozDd6z4Jd7cR3WvtO6t0Vs=
Subject key identifier:   52:67:45:A8:71:FD:AF:68:C2:83:2E:3E:D2:71:FA:0D:13:F5:8E:2B
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584830253FCBF9AC529C2CA78380
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/bbb44bae-4365-3fc0-865c-775668938f93.roa
Signing time:             Fri 13 Dec 2024 02:00:39 +0000
ROA not before:           Fri 13 Dec 2024 02:00:39 +0000
ROA not after:            Thu 13 Mar 2025 01:00:39 +0000
asID:                     271
IP address blocks:        2607:f8f0:670::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:25:3f:cb:f9:ac:52:9c:2c:a7:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Dec 13 02:00:39 2024 GMT
            Not After : Mar 13 01:00:39 2025 GMT
        Subject: CN=b42f9212-12ab-44cc-addb-e9f795bebfba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5d:23:80:13:ba:50:53:44:fd:aa:7d:ee:46:
                    d8:52:4f:3a:46:c8:b7:e9:d2:70:ef:09:9f:bd:7d:
                    db:10:59:df:ae:24:e5:e2:bc:fd:d8:af:8e:0f:95:
                    12:b2:17:b0:10:fb:53:c8:44:9d:c6:87:82:04:f4:
                    bd:67:7e:c2:2f:ce:fe:0c:99:89:71:0d:7c:cf:04:
                    f3:29:dc:3c:31:98:9c:f0:f9:b7:f0:c9:53:b7:82:
                    01:7e:1e:1a:d9:f1:1d:2e:5d:48:97:73:93:a8:c3:
                    56:76:35:81:46:4c:89:34:f7:e2:52:a3:39:48:1b:
                    32:67:9f:3c:c6:65:5c:17:ed:2a:22:1f:d7:9b:fd:
                    db:3c:69:4d:fa:6d:a5:89:9c:28:f2:33:7b:7d:3e:
                    83:cf:c2:cf:c6:4a:3a:d0:d1:8c:84:29:89:2c:de:
                    c2:d8:9a:32:ef:72:68:04:33:6c:69:df:f0:84:5b:
                    a4:46:2e:68:cd:89:5b:65:d0:83:82:74:ed:2f:7a:
                    12:3a:99:cd:d2:c3:ba:cb:36:0d:90:42:49:db:ce:
                    39:ed:36:eb:85:25:f1:26:1d:78:32:30:fb:08:c5:
                    39:0a:94:10:7b:87:c9:a8:76:0b:6d:12:0d:f4:26:
                    85:23:6e:68:27:0a:60:7e:45:0b:cd:12:1f:1d:a6:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:67:45:A8:71:FD:AF:68:C2:83:2E:3E:D2:71:FA:0D:13:F5:8E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/bbb44bae-4365-3fc0-865c-775668938f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:670::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:56:24:98:52:1a:d4:82:12:8f:df:1c:ce:00:a5:99:34:b5:
         c2:85:be:b8:7f:10:c6:90:a7:71:b4:40:3d:cb:1e:34:35:e1:
         a2:9e:97:e3:83:51:85:84:57:f8:c7:dd:4d:22:a6:c0:20:0d:
         fd:33:9f:11:84:fc:ff:ce:d9:b4:75:1f:de:f4:df:5d:ea:e1:
         0b:46:a4:5d:3b:5b:e0:6a:4b:e8:61:c1:67:35:c0:55:fb:92:
         1a:d7:d0:73:88:ad:dc:cf:2e:e4:50:5b:98:24:a7:33:d5:cd:
         07:17:36:e9:9d:04:9c:07:1e:8d:66:c8:b8:20:53:2c:d0:7a:
         15:b3:7f:08:29:44:8e:51:33:d4:f7:a6:98:fe:a1:ba:fd:37:
         60:8c:be:55:f9:00:bf:66:7a:4b:26:70:d5:09:72:53:ea:1d:
         71:f1:85:bd:92:36:68:c3:92:19:72:4a:5e:ce:04:54:8a:28:
         00:31:a9:77:b5:84:19:cd:ec:7b:a2:c3:0f:8b:d1:fc:ba:2b:
         d6:dc:31:af:2f:ce:49:1c:3a:09:da:ba:47:dd:ea:2b:a1:1e:
         18:d3:96:3e:ec:88:8b:f6:29:ff:0b:ab:4f:db:5e:ca:6c:e4:
         a5:f6:45:bd:ea:b1:c2:0c:34:c6:a9:1f:78:ae:e9:e4:2b:ef:
         54:1f:aa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:19:35 2025 by rpki-client