Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/ed0f44e6-7923-3a7f-97f3-d38dab75644e.roa
File:                     ed0f44e6-7923-3a7f-97f3-d38dab75644e.roa (raw, json)
Hash identifier:          VxHpnkOcdIPlrCte2PpcQH0Pz7sdL88wQLjGKTBS/4w=
Subject key identifier:   CB:09:7A:1D:37:F4:BA:05:CC:D7:71:9F:69:49:BB:15:DD:DB:B6:13
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F432858484C10390B9AA20F8EE2772E80
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/ed0f44e6-7923-3a7f-97f3-d38dab75644e.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     14340
IP address blocks:        2600:e807:11f1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:39:0b:9a:a2:0f:8e:e2:77:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=5a36a693-dd32-4689-88c1-6fb11ab2e863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:dc:5d:49:4d:97:62:16:33:76:40:7b:ff:
                    9a:5d:90:f3:c7:79:ae:95:03:83:f9:07:84:a8:6e:
                    3d:43:8f:7a:b5:f3:03:8b:6c:e5:39:f2:06:5f:4d:
                    3d:7e:6f:00:02:75:ec:2a:5b:50:d2:74:41:95:72:
                    7c:b5:bd:21:91:e1:2a:9a:de:ed:06:cd:31:4f:c7:
                    ca:72:2e:51:9d:29:74:79:37:1f:59:fa:2f:5d:e1:
                    11:be:3f:9e:e0:48:de:dd:bc:19:aa:a0:b9:58:a9:
                    1f:63:7a:48:37:68:56:a3:29:9f:df:99:28:04:ce:
                    17:2b:d7:b1:eb:ce:69:f5:e4:73:46:ec:45:77:34:
                    03:49:00:3f:94:31:95:be:94:af:4c:3b:8a:34:aa:
                    28:e1:02:b1:18:40:c4:18:29:43:92:ea:51:7a:65:
                    6f:bd:c6:36:35:37:99:f3:ee:0b:93:c6:b2:46:2d:
                    0d:2a:d2:68:49:aa:99:40:0d:7d:23:ce:75:a4:64:
                    8c:2c:05:8b:25:31:bb:55:9f:17:52:4b:4e:14:65:
                    5a:47:88:c1:9c:5b:2c:d8:a0:b8:a9:0b:b9:d8:9d:
                    df:1c:7a:d7:82:12:42:9b:af:d1:dd:3d:c3:1f:ae:
                    21:65:9c:f3:30:2d:b3:21:0a:9d:ec:b1:ef:17:bd:
                    a4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:09:7A:1D:37:F4:BA:05:CC:D7:71:9F:69:49:BB:15:DD:DB:B6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/ed0f44e6-7923-3a7f-97f3-d38dab75644e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:e807:11f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2b:69:f9:5c:c7:c6:b0:7f:b3:05:1f:a2:50:52:fa:95:78:
         5b:7d:9a:d9:0b:7e:c9:89:f3:44:6e:a8:d8:ee:8b:2d:f9:f3:
         a7:4c:06:8f:ee:b5:be:c7:95:12:f5:fc:d2:c9:97:ea:97:27:
         53:d0:35:68:5d:5a:98:1a:d7:34:fa:d1:fa:a7:38:b0:a7:c6:
         5c:68:57:af:da:63:3d:ea:1e:1e:b1:e9:f8:66:e4:69:cf:8b:
         02:23:75:3b:3d:aa:4f:25:20:fb:f3:83:57:93:31:8e:e1:62:
         af:b9:d5:ee:55:37:14:fc:00:8c:ed:6c:4e:6d:43:4b:0a:29:
         fa:e3:80:40:a1:90:9c:e4:a6:3c:3c:bc:c7:79:b1:10:58:3c:
         a0:f6:6a:74:ec:3a:14:50:59:a6:f9:d8:fa:42:e0:77:b8:88:
         28:69:6c:c5:9f:57:50:1d:5e:58:34:2f:e4:d7:37:5f:79:37:
         01:de:37:09:77:34:07:5c:a6:4a:07:e0:bb:5d:d9:99:e6:a0:
         81:f8:70:d8:38:cb:13:86:82:cf:b1:b1:82:02:d0:2d:d9:6c:
         fa:e6:62:b2:5b:60:aa:36:42:40:12:51:7a:ac:2f:27:39:10:
         84:00:bd:1b:78:c0:7e:ff:f7:4d:62:b3:47:c5:1f:35:2e:b6:
         6d:7d:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:36 2025 by rpki-client