Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/781e4aa8-9463-363e-b186-e3ed45e44d47.roa
File:                     781e4aa8-9463-363e-b186-e3ed45e44d47.roa (raw, json)
Hash identifier:          CMMuQGSj7ZOOOuI36d7AOT52zPeLcZJYkKpNnBWoDjk=
Subject key identifier:   7A:3D:8E:D8:73:46:A6:FB:BE:80:76:6E:8F:7B:75:E4:D8:5F:56:17
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFFB7C4799488A14B95A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/781e4aa8-9463-363e-b186-e3ed45e44d47.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397228
IP address blocks:        2001:502:f3ff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:fb:7c:47:99:48:8a:14:b9:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=dc7bf042-bcd2-4bbd-8e6c-f832414dd0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:ca:7d:3f:bf:31:04:61:d5:19:1b:38:8b:
                    88:e1:0a:2d:e1:19:85:a0:68:4f:58:c5:1d:a5:96:
                    65:68:a0:01:46:05:fc:2d:da:1e:9d:a3:e7:09:d2:
                    bd:ab:07:ee:70:c6:80:46:cb:1f:d0:d5:2d:6c:9c:
                    c8:e6:7c:18:fc:26:02:eb:59:c4:a4:2d:8f:c1:cb:
                    c5:58:16:3d:7f:51:ab:46:5f:89:13:9f:09:8c:27:
                    d1:97:30:10:5b:6d:9d:76:c5:cc:43:5c:74:62:a1:
                    02:0d:58:f8:a7:ef:d4:e3:12:d5:f4:aa:8c:9b:fb:
                    ae:7a:7b:d1:2b:78:9c:c8:7d:80:43:db:fa:d6:76:
                    e2:06:64:2c:30:75:f6:99:e3:42:db:22:13:15:e6:
                    ea:bd:b0:c8:5e:14:a2:f4:04:07:db:87:13:e4:37:
                    74:21:a8:98:b6:29:0c:77:c6:ff:fc:38:2f:63:0c:
                    ef:52:d7:72:80:8a:25:4d:f4:da:8d:ed:cb:d7:7b:
                    c4:fc:be:17:96:1b:e1:ba:13:71:d3:83:27:45:9b:
                    89:41:b0:60:00:0b:f1:fc:a0:56:56:f9:59:bb:59:
                    9a:51:80:1b:96:6c:b0:ea:f6:a2:67:2c:df:e7:25:
                    b1:03:e1:c1:20:e7:e4:fe:e1:77:fa:58:08:a4:c3:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3D:8E:D8:73:46:A6:FB:BE:80:76:6E:8F:7B:75:E4:D8:5F:56:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/781e4aa8-9463-363e-b186-e3ed45e44d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:f3ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:d2:c0:5b:dc:0e:c1:e6:57:06:18:97:ad:96:d1:43:b6:
         9d:38:ea:2a:0e:64:ba:40:1d:fc:4d:6f:c9:5a:e2:96:2a:de:
         af:ea:49:45:6f:e2:df:b2:4f:ac:6d:fc:35:3b:c9:a5:89:92:
         33:80:ab:79:b3:29:f2:10:82:ec:e2:03:cf:bb:81:eb:84:28:
         f5:ca:de:f5:17:43:49:ef:c3:50:03:e4:51:4f:82:b8:08:c4:
         79:37:27:90:30:04:1a:c1:9d:2a:f4:4e:8f:ba:8d:35:35:d5:
         24:4e:a9:78:0b:7d:4c:e5:e8:95:08:c1:b3:cf:23:d0:f4:e3:
         05:64:9f:7c:8c:da:9c:78:aa:b2:24:29:45:bd:71:19:12:c7:
         12:a2:8b:7c:91:12:89:80:59:58:bd:53:be:f1:3d:8f:5d:a3:
         b7:05:5e:6b:fa:f3:18:b5:d1:02:98:c7:4b:ab:d6:c6:a4:ed:
         de:44:0f:e2:7a:0e:97:cb:3d:60:a2:d3:2a:46:b1:cb:0d:f5:
         bd:25:71:3d:07:25:ef:c3:03:d9:c9:d5:36:38:e8:c4:63:06:
         98:b3:fc:f7:68:79:6d:45:c2:14:4d:0f:69:ca:e0:57:46:36:
         4c:4f:17:00:4b:f2:9a:22:75:6a:7d:ba:7e:3c:49:8f:ba:a6:
         98:c2:ac:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:09:52 2025 by rpki-client