Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fe7ed629-3e5e-37f2-87c4-31837b77e42a.roa
File:                     fe7ed629-3e5e-37f2-87c4-31837b77e42a.roa (raw, json)
Hash identifier:          Q9+PLmg3Dh1QISqNMh1oGZeKUlPhfOAdmoFJ0naGoVU=
Subject key identifier:   C0:C1:CF:12:5D:18:69:18:4C:05:4C:CD:62:6B:1D:FD:88:15:02:98
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F43285848633D065ADF54D39326070EC0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fe7ed629-3e5e-37f2-87c4-31837b77e42a.roa
Signing time:             Tue 31 Dec 2024 09:14:52 +0000
ROA not before:           Tue 31 Dec 2024 09:14:52 +0000
ROA not after:            Mon 31 Mar 2025 08:14:52 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff1f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:3d:06:5a:df:54:d3:93:26:07:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Dec 31 09:14:52 2024 GMT
            Not After : Mar 31 08:14:52 2025 GMT
        Subject: CN=53d48b67-e4a0-44a5-8359-74f47ea128cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d9:b0:a9:20:55:b8:73:90:85:aa:87:fb:5b:
                    a6:cd:93:0a:87:fb:b3:86:4c:8e:43:7f:f0:ff:4a:
                    a6:3f:62:9b:0c:2a:01:cf:30:57:2d:63:f4:2b:c9:
                    84:69:92:a7:1d:d6:d5:f0:12:8e:a8:86:42:bf:a8:
                    8a:09:fa:6b:29:a9:c5:7a:ec:5d:1e:03:a2:8c:8d:
                    19:03:dc:2c:74:24:76:73:02:42:59:e0:9e:67:fb:
                    8a:ab:dd:9e:e7:3e:f9:ed:25:f4:a4:60:76:07:18:
                    fe:f3:bd:dc:a7:8f:74:96:a4:04:62:1d:ba:ba:5e:
                    88:ae:9c:6c:29:f2:fa:e4:90:b0:d2:03:f8:eb:07:
                    9c:ff:f5:f6:86:6a:30:34:00:66:0d:c2:bc:e2:0c:
                    9e:37:61:78:f8:b2:8e:c8:88:4a:b9:d3:06:fd:bf:
                    92:7c:1f:80:d8:4b:0f:d5:39:cc:b1:2c:4c:95:f5:
                    39:80:08:5c:e2:53:e7:da:c9:6e:c9:ce:49:cc:db:
                    a7:8c:c5:51:c0:18:04:43:0a:47:2a:22:57:0a:5a:
                    3b:be:5e:0f:e9:d7:0b:17:c9:5d:60:b4:f1:6d:98:
                    55:7d:1d:26:67:7e:1a:83:d7:f0:e7:ee:9a:0f:2d:
                    d0:3d:6c:c9:d9:0e:db:48:12:bc:dd:38:eb:2c:5a:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C1:CF:12:5D:18:69:18:4C:05:4C:CD:62:6B:1D:FD:88:15:02:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fe7ed629-3e5e-37f2-87c4-31837b77e42a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:45:ed:55:db:72:c4:d9:87:5f:0e:8c:ad:59:89:de:3f:
         5c:6b:73:f0:02:78:f0:12:95:ab:b9:ad:ae:e2:5b:7b:7d:85:
         c4:95:0c:0a:34:a0:01:e9:52:13:4d:16:6c:d1:cc:05:84:cd:
         7d:d7:85:20:e6:6e:94:49:e6:5a:2f:08:c6:b2:cd:68:29:a9:
         d4:ad:44:79:76:0b:ec:d1:f5:87:6a:07:37:07:cc:f4:34:a8:
         f2:02:20:ee:01:17:62:99:0e:b3:e9:f6:a6:94:f3:e8:74:11:
         a0:f9:ab:ad:1d:1d:07:74:98:94:e3:36:9d:19:e1:c6:6b:b0:
         24:14:90:03:7d:56:ef:cd:ee:50:2d:16:1c:a5:42:e7:3a:ab:
         67:59:8b:46:5b:7e:7d:37:42:1b:c2:34:5f:3e:1c:1e:74:ca:
         df:1a:c0:9f:7e:ba:6c:b2:c5:6f:04:5e:53:5e:7a:f0:d4:96:
         b2:52:e4:93:fe:49:db:8a:d9:7a:26:dc:2d:42:db:f4:96:09:
         0f:df:52:97:b4:0d:7f:0d:58:71:1c:da:9d:87:fc:53:8d:3d:
         a5:a1:22:64:8f:b5:73:10:7c:37:0d:0c:8a:c8:10:f6:15:00:
         92:18:3e:bf:8b:f1:bf:2b:42:19:ca:5d:98:cf:e2:f2:aa:20:
         53:04:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:58 2025 by rpki-client