Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa
File:                     890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa (raw, json)
Hash identifier:          Dh0SomAzsq2fK/+fk7h67/zduTq2RSx5GCNm0PY2pEM=
Subject key identifier:   5A:F6:C8:19:AC:B4:22:73:76:4F:DF:5C:E2:47:51:D3:1B:05:38:C8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFF356C57CD83C1CF371A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397230
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:f3:56:c5:7c:d8:3c:1c:f3:71:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=3076595a-73d5-49b3-912d-04c3e4cab86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:76:b4:07:d0:b8:31:e2:e8:cc:4f:16:93:5a:
                    da:a5:2a:84:2f:f4:45:a2:a3:ad:37:49:a6:5e:3f:
                    13:5d:6d:46:01:23:cb:f7:ad:08:7a:4a:34:b3:0b:
                    fd:94:33:1d:51:33:34:79:37:8a:44:00:83:c4:17:
                    ec:60:c4:7b:09:f6:d9:81:36:05:01:4a:a9:9f:03:
                    a0:de:b6:d9:d7:d1:ea:0a:01:9b:de:ae:c7:81:3a:
                    f8:36:93:1f:dc:c5:27:cb:c8:72:16:2f:92:55:ef:
                    98:4e:ad:f9:d5:d1:cd:4e:7a:bc:24:39:a4:51:c0:
                    ee:a8:ba:a3:af:1c:9c:ad:f9:e4:b4:c6:56:72:b3:
                    42:64:81:27:5c:2c:12:b1:3b:92:d6:00:93:c8:9c:
                    ac:3a:5e:73:ac:64:23:ae:8b:9d:9d:5f:97:91:fc:
                    8e:51:d5:ee:df:05:a1:3c:4e:2c:59:36:7d:c8:42:
                    ba:52:95:68:2c:ff:f1:fe:e6:95:75:56:bf:d0:d7:
                    f9:5b:ca:90:e4:a2:7a:7b:8b:96:5f:1f:3a:13:11:
                    25:94:47:81:1e:7f:9d:8f:0d:a2:e6:65:b3:a7:c7:
                    41:ec:45:7b:43:3f:0f:9e:a1:f8:76:83:8b:af:e3:
                    36:0b:f7:0e:d9:cd:26:1b:d6:fb:5f:de:cd:50:73:
                    4d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F6:C8:19:AC:B4:22:73:76:4F:DF:5C:E2:47:51:D3:1B:05:38:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8a:7d:12:3d:98:5e:85:f8:72:cf:be:28:20:f8:3f:5c:5f:
         0a:2f:71:0e:bb:a8:8c:e6:8c:bb:ac:38:c4:e4:01:6b:73:72:
         17:5c:f7:f6:9e:41:ef:16:c0:33:a6:dc:60:18:7d:96:d0:11:
         40:6c:5b:c0:7f:bc:ab:86:76:12:91:98:2e:5f:59:d4:cf:3a:
         92:78:a4:f1:91:e5:2c:dd:0b:e8:90:4c:7e:1b:44:21:2f:6f:
         d9:4b:74:6a:c9:97:b4:a3:15:9b:41:93:af:5d:69:d1:be:a0:
         25:47:a7:ed:bb:06:e2:14:01:fc:59:aa:8b:e1:35:66:b5:f2:
         c6:ed:a3:bd:87:e6:c0:76:e0:07:35:82:4c:f9:4d:d2:8f:62:
         71:27:4f:68:b1:be:39:61:69:38:be:2a:12:a6:86:8b:e8:1c:
         10:92:f6:4a:a3:8d:c8:86:21:82:41:59:45:6a:26:f0:9f:e7:
         f6:f1:10:5c:c3:9c:25:cf:c7:1f:8a:81:c6:5e:f2:a5:1a:35:
         b4:b2:32:54:f3:96:75:77:e6:34:ff:60:9e:29:1e:1b:a6:82:
         9f:88:9a:ea:8d:02:8b:eb:b9:3d:3d:4e:67:05:50:23:7b:67:
         48:8f:a2:28:0b:e5:ba:64:cf:9b:4d:65:2a:af:be:65:a8:57:
         54:31:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:18 2025 by rpki-client