Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38e22287-e03f-307d-bc07-65d9e6df354b.roa
File:                     38e22287-e03f-307d-bc07-65d9e6df354b.roa (raw, json)
Hash identifier:          RdqorqfgJm1Rq/EEtu25YUymzrPHPGl/r6NWwZcxnfo=
Subject key identifier:   DC:A3:8F:D3:3D:9B:13:3B:ED:ED:94:68:CC:BD:60:EC:20:6D:7A:5A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858481C9A86B731080A87212C5A68
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38e22287-e03f-307d-bc07-65d9e6df354b.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     12222
IP address blocks:        2001:4878:2246::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:86:b7:31:08:0a:87:21:2c:5a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=fbca72bf-952f-4cb1-af80-4f1112f3b4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:77:34:8b:36:11:6f:d1:2b:3a:90:1b:91:
                    d5:c1:08:f7:85:e9:ce:d6:c1:43:c5:d8:14:09:63:
                    ae:d5:71:1d:f9:dc:52:f7:08:65:44:20:e0:88:c2:
                    0b:65:17:ae:a7:31:12:62:59:6c:40:2c:56:d1:73:
                    cf:7d:f3:60:51:f3:f1:76:49:37:5d:fb:b6:e8:f1:
                    71:43:e7:4e:17:78:94:15:e5:f5:bf:16:a8:04:87:
                    04:55:91:77:5c:58:ae:71:04:a3:ef:d5:69:d6:d8:
                    61:47:2d:b5:ac:7b:78:f5:4b:d6:7e:45:6b:1d:a9:
                    ee:12:04:70:99:e8:f2:8a:c3:d9:24:c7:f4:0b:d2:
                    67:0d:c7:60:dd:ed:20:70:2b:b9:e4:03:d1:58:7c:
                    13:eb:8e:90:e1:12:2f:0d:55:be:38:b0:ab:12:55:
                    82:9f:06:a0:eb:5f:e6:0d:a6:9b:7c:99:f8:7a:3e:
                    18:61:3f:9e:2e:fe:0e:9a:cd:b1:7c:fa:57:5a:48:
                    03:d2:44:6d:05:e3:7e:2b:45:2f:4f:11:07:5b:23:
                    e6:cb:3f:96:f3:22:cc:4a:67:d7:f1:96:34:23:97:
                    e1:a1:f7:08:39:27:64:7a:ca:34:84:b9:1f:11:84:
                    90:74:9d:40:e2:f3:da:c8:b4:4b:14:9b:20:19:fe:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A3:8F:D3:3D:9B:13:3B:ED:ED:94:68:CC:BD:60:EC:20:6D:7A:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38e22287-e03f-307d-bc07-65d9e6df354b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2246::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:4e:94:74:cc:c2:f4:87:83:30:99:be:b2:bf:a1:49:19:44:
         ef:73:8c:7b:ba:05:99:56:4c:07:f5:40:ff:ab:66:f5:91:be:
         4b:c4:73:d3:d9:f0:1e:b2:c5:af:8d:03:a7:ca:20:c1:ee:21:
         5f:68:7c:c3:5d:66:5f:7a:f4:ae:3d:80:c0:4e:eb:91:e9:df:
         76:32:7d:75:72:39:60:6c:8b:9e:4d:02:f4:95:df:65:f2:cb:
         a9:ea:5e:5b:2e:cf:10:57:4d:60:35:2c:a0:c7:38:9a:c0:ae:
         71:88:0b:b9:62:d0:66:4d:40:a4:e9:b4:87:5d:c1:9b:e3:2e:
         b6:53:c9:1f:20:4e:00:7c:d6:6a:14:b0:0b:bf:4b:74:d1:4d:
         14:f9:a5:00:ce:46:0c:d9:f0:04:93:51:0d:8a:e7:58:af:a6:
         11:45:b2:d3:55:d6:40:14:fc:83:98:a8:34:46:44:b5:77:6a:
         37:29:79:46:61:1e:b2:06:fa:8e:07:26:ed:65:4d:8f:9c:99:
         a4:74:e6:5f:36:d7:72:90:ac:16:a9:19:f2:20:a3:ca:bb:06:
         55:e0:e9:53:23:8a:0b:20:bd:1e:dd:75:a1:6f:a5:f5:8f:f6:
         67:a3:b3:6d:2b:02:96:22:c7:47:9f:de:6b:1e:c2:a6:2c:f7:
         dc:18:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:48 2025 by rpki-client