Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa
File:                     c733dc09-d02d-3a61-84c0-81f6e8142032.roa (raw, json)
Hash identifier:          Wc/g5NXRn+g/X1dnSStmcEnahl+fg3j7L/y+oMlM87A=
Subject key identifier:   C0:15:47:40:EA:97:74:E7:AE:49:C6:DF:51:E6:65:5C:E3:DA:EA:92
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584863CB0E1426EEBA1CB8B7D600
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        2602:277:3ee::/48 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:0e:14:26:ee:ba:1c:b8:b7:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=8b8512a6-c912-4f85-a224-f28ca0b371ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:91:41:bf:b6:c7:91:e2:a4:0d:50:a1:a8:
                    ce:27:70:59:80:e2:a1:59:ef:3d:ab:37:d1:72:35:
                    9e:58:ad:4d:b7:32:00:1b:03:ff:ae:5a:8a:fa:56:
                    00:17:8d:64:1a:a7:15:7e:7f:e9:c3:32:33:75:e3:
                    61:10:9d:52:b5:15:38:a4:30:a2:83:ae:f9:2a:fa:
                    00:ef:f5:a9:b7:1f:19:c4:6b:7c:09:9d:83:a3:07:
                    b1:4d:e1:ed:7b:ed:3a:ea:44:a8:e0:5a:e6:c4:6e:
                    72:91:23:2b:41:9d:aa:64:a8:0b:8d:08:7b:fd:d5:
                    ad:dc:9a:a4:fc:67:7b:bd:c9:4e:63:0a:08:af:b8:
                    f2:22:b4:c6:b5:06:23:ec:0d:b2:de:50:6c:00:5c:
                    1f:65:c9:30:6e:d6:df:fc:35:97:90:d0:4d:13:80:
                    36:af:0d:e0:5d:9b:af:aa:49:0a:6b:8c:1c:99:2a:
                    e9:a6:a8:a6:ca:57:7f:ea:12:bd:c8:e7:29:e8:e1:
                    70:b1:d3:a1:3e:cf:87:a2:6c:ed:d4:c4:cf:c3:67:
                    35:8c:34:13:55:c6:7a:2f:f2:7c:76:dd:11:0c:7b:
                    03:c9:d9:55:68:87:a4:86:7d:1d:70:a8:15:cf:6e:
                    c0:3c:cf:9f:e4:06:de:e8:80:61:12:e4:de:29:4e:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:15:47:40:EA:97:74:E7:AE:49:C6:DF:51:E6:65:5C:E3:DA:EA:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:3ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:7a:e8:6e:da:51:de:d4:ef:28:bd:6f:20:0f:60:55:d1:56:
         86:d9:a9:ab:07:c0:e2:36:cc:17:51:de:b3:b3:9d:3f:b7:25:
         16:74:f4:0c:a9:d7:9c:d6:88:a7:5c:bc:05:5e:b6:4a:b6:ac:
         f8:f2:7f:d0:34:0e:24:4d:6a:dd:83:af:e7:ac:54:e0:e1:47:
         1f:04:7b:1c:48:ab:45:22:12:a0:88:f8:80:a4:f8:58:ef:d3:
         3d:44:9c:fc:39:a6:ab:41:41:4b:e3:00:98:ed:db:e2:48:bc:
         81:14:64:84:ec:b0:d8:f5:ad:9c:06:41:e6:2d:50:6b:2a:39:
         f1:dd:02:1a:12:f2:9c:a3:fd:54:8e:22:24:7e:ed:a1:9b:15:
         81:f2:e8:2a:0b:3f:9e:70:36:1d:ab:13:92:f8:b1:38:a3:8a:
         1c:b8:63:df:e6:4e:5e:84:07:89:ae:42:2b:0c:9e:f1:b9:46:
         22:69:43:11:13:a0:57:68:53:28:96:25:20:ac:73:68:13:25:
         5f:f8:6e:c6:fe:81:64:ae:ef:c5:5b:8f:f7:66:2f:92:3c:ef:
         b5:38:3c:dd:4c:0b:e8:a3:1a:61:b4:c1:59:08:45:0a:33:72:
         1c:6f:cb:6c:ce:1e:64:02:6b:51:03:78:1f:42:46:35:94:c6:
         15:19:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:03 2025 by rpki-client