Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa
File:                     cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa (raw, json)
Hash identifier:          wZICqNROAsHjocHnAb+HFrNBCMJtbiseM/QrFLGKgcs=
Subject key identifier:   CA:DF:4B:B9:94:F5:F7:3F:E3:3E:24:B7:B1:D0:70:89:57:3A:1C:01
Certificate issuer:       /CN=b927dc15-9316-467a-b50d-d6b361478436
Certificate serial:       010D0C9F432858484D757DD8096F5B1A4DBAD700
Authority key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     2901
IP address blocks:        2605:800::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:7d:d8:09:6f:5b:1a:4d:ba:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b927dc15-9316-467a-b50d-d6b361478436
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=e89df54d-aa59-4c38-bac9-95e0b140db6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:96:a5:03:54:b9:f7:62:25:07:e8:5b:09:
                    9b:2c:39:64:11:51:33:53:44:c3:aa:d0:6e:ab:62:
                    b4:bc:bd:e9:69:f3:22:a3:a1:4d:74:ec:cb:a0:a2:
                    0b:b4:48:3d:98:31:d2:c9:cd:49:31:bc:a7:0d:bd:
                    86:02:c8:23:1d:75:ab:8b:18:58:3f:ea:98:f6:d4:
                    60:36:e8:7f:86:a3:70:e6:5a:4e:cc:8b:74:b4:ad:
                    34:91:61:75:ca:53:76:6c:9a:99:81:e3:82:10:46:
                    8d:ad:17:c1:54:2a:c3:2d:5b:f7:b2:42:87:c4:2c:
                    ef:6d:56:91:81:8d:ba:fd:9b:69:b2:62:1c:d5:c0:
                    ab:d0:f1:8c:b5:dc:a5:d4:e7:70:47:d1:05:08:00:
                    02:e2:7d:0c:9f:a7:b5:9e:6c:23:c0:b8:2b:1e:19:
                    fd:a1:22:e8:c4:e1:2a:80:4a:fc:d2:b4:a2:d4:a2:
                    e7:ac:39:92:73:7a:ae:4e:a1:e1:41:77:84:2c:2b:
                    10:27:3d:d0:f5:e6:40:26:f0:e2:84:14:dd:27:cf:
                    ff:99:ba:f3:83:e2:af:5e:b1:4f:61:c9:a7:9f:b1:
                    56:27:e6:e7:24:49:d4:e5:02:6c:31:38:82:85:5c:
                    7b:8f:a8:dc:2e:b5:90:0e:38:92:a5:c4:bc:16:33:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DF:4B:B9:94:F5:F7:3F:E3:3E:24:B7:B1:D0:70:89:57:3A:1C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4d:48:1b:48:5d:f4:c2:c4:21:aa:2f:6c:1b:b5:9f:71:c4:
         7d:c4:48:80:75:13:23:37:67:96:3e:5b:e3:da:84:4e:79:d1:
         fa:50:21:23:b8:f6:10:3f:f7:f2:1e:a7:94:4d:a3:ae:b0:ff:
         8a:f3:cc:3c:75:63:9b:1f:1e:8f:95:a5:09:37:7f:78:da:17:
         12:68:3a:ac:d5:c0:aa:cc:7a:59:40:2b:7a:a0:28:eb:78:b4:
         d7:78:36:8c:f4:5b:1b:14:8f:28:87:41:d8:1b:0c:d9:52:1c:
         e5:ee:34:41:69:70:5c:56:b3:f0:98:aa:8f:16:a7:f5:e9:e3:
         65:48:b2:ad:d1:46:09:ce:91:b5:c7:c4:f0:b2:d6:79:47:54:
         ba:54:49:c6:d7:56:fa:81:2d:69:10:f4:f6:59:32:d7:73:28:
         fc:0a:d5:fa:e6:41:aa:e6:c8:0e:72:22:af:98:77:76:9a:0c:
         16:45:dc:a7:fa:e4:95:47:2d:16:63:bd:04:7a:59:f8:88:58:
         a6:f0:61:e5:1b:3f:47:22:91:01:90:74:cc:b4:2a:70:74:1b:
         6a:48:35:b6:8a:97:f9:e4:67:fe:f7:a5:f2:d0:14:b5:21:05:
         df:73:bd:f2:0c:59:59:0b:ec:ba:6a:32:a1:b3:88:b0:9c:47:
         2c:cc:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:04:28 2025 by rpki-client