Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa
File:                     02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa (raw, json)
Hash identifier:          JWD6lSYREYFCGQbSvD6+Ip69ks7OmXjQEPU0izRfNlY=
Subject key identifier:   40:4D:D4:7A:17:0F:07:7D:5B:69:7E:43:56:D0:A6:B7:C6:CA:A4:26
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584878BB032C1C161097A3412030
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     31898
IP address blocks:        2602:277:7c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:03:2c:1c:16:10:97:a3:41:20:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=b421a587-a246-4a39-95a1-8a190ba5ec3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:d5:64:ca:ea:71:af:23:a7:8e:c2:d0:d7:
                    ae:fd:31:f2:13:ce:8f:1c:79:42:7d:48:63:90:37:
                    0a:1e:9f:92:29:dd:2b:05:56:fd:13:ec:2f:da:8c:
                    56:b3:46:6a:1b:ac:d4:80:bc:e5:4e:87:73:38:b2:
                    92:5a:c3:f5:02:60:cb:32:a9:e0:24:58:ce:72:aa:
                    6d:88:83:0f:7e:cc:bd:99:94:06:a5:78:53:20:71:
                    2f:79:96:5c:7f:52:26:d2:0a:31:aa:fc:0e:74:e5:
                    9c:b1:2e:40:a1:23:e4:86:01:19:d4:4b:cb:1e:b5:
                    04:e5:af:d1:ba:9d:90:10:da:3d:91:47:28:e5:c9:
                    8c:83:5f:96:9f:1c:55:86:84:35:ce:11:02:64:ed:
                    8a:67:63:2c:dc:14:e8:dd:08:c8:d1:18:65:70:24:
                    88:72:4a:43:69:c6:55:08:51:fc:95:cc:43:49:f7:
                    fe:ad:ec:e0:e5:c6:14:42:16:47:42:a7:bc:7a:5b:
                    8a:76:fc:c2:e8:bf:6b:bf:a2:10:f3:3f:2e:c4:67:
                    df:b5:b4:d9:02:60:a9:fd:87:66:c8:02:38:ad:45:
                    cf:51:50:b0:e1:22:84:5e:c9:9b:d3:ee:61:b2:8a:
                    5a:bc:5b:4b:6e:f1:3b:0c:30:dc:af:3c:0b:df:cd:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4D:D4:7A:17:0F:07:7D:5B:69:7E:43:56:D0:A6:B7:C6:CA:A4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:7c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:c6:f5:04:2e:a9:cc:ec:5f:9a:c2:0e:a5:26:a9:75:d7:83:
         8b:cf:2a:9c:02:21:94:72:05:c5:84:a0:92:3e:1a:71:d3:76:
         7b:d6:39:cc:5c:41:d5:02:9f:a2:c0:46:4d:53:e7:52:f7:c3:
         23:6c:db:c3:09:9a:81:41:23:87:d7:05:00:b3:39:59:c2:64:
         1f:1d:b0:4c:d3:d4:df:13:39:0a:9a:af:fa:b9:70:51:68:f7:
         d0:28:42:df:a9:d9:d8:e5:87:82:ab:bc:4f:69:3b:ab:f7:73:
         e6:41:d2:44:84:a8:1d:1a:ae:10:dd:7a:35:13:60:71:f0:2d:
         9d:c4:94:e7:81:8b:e4:63:b5:3d:f2:3a:10:01:87:79:06:95:
         ed:a5:5f:b8:84:94:12:60:80:56:72:15:43:ea:f1:b5:36:44:
         3b:95:54:44:65:c6:1f:b9:78:68:63:76:ee:39:58:ab:2e:1f:
         98:ba:c0:d8:d6:50:c9:1d:07:23:d8:5e:ff:80:0f:d7:8f:6e:
         90:8d:68:de:0e:0f:d1:64:c5:ea:96:4e:39:a5:76:14:60:9e:
         1d:c6:87:4f:41:7d:ba:12:fb:15:ec:87:49:41:38:9b:3b:bb:
         49:5d:41:a3:7b:86:ca:7a:6c:66:e8:bf:31:ee:54:9e:be:c2:
         43:c0:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:13 2025 by rpki-client