Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/b945615a-979a-3073-b0e8-fef7d9d7a16c.roa
File:                     b945615a-979a-3073-b0e8-fef7d9d7a16c.roa (raw, json)
Hash identifier:          Z2RWXFtcM9MtQOm0EgOG5hmJnPBGypE2IYGuv7KMIlg=
Subject key identifier:   CB:28:2B:01:FA:C5:65:DB:C7:39:3D:86:D7:96:A5:13:00:8C:97:EB
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584804DFBE6BF8DFFA788F757E80
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/b945615a-979a-3073-b0e8-fef7d9d7a16c.roa
Signing time:             Wed 27 Nov 2024 14:00:52 +0000
ROA not before:           Wed 27 Nov 2024 14:00:52 +0000
ROA not after:            Tue 25 Feb 2025 14:00:52 +0000
asID:                     14956
IP address blocks:        2605:7980::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:04:df:be:6b:f8:df:fa:78:8f:75:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Nov 27 14:00:52 2024 GMT
            Not After : Feb 25 14:00:52 2025 GMT
        Subject: CN=ed3893c5-1abb-4862-8721-a8686c28d4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:69:e7:83:08:c5:0b:4c:53:5a:99:b7:c6:
                    24:18:dc:74:64:99:40:4a:70:28:26:b2:60:49:b4:
                    ec:67:97:3c:14:1b:c2:6d:04:b1:54:f7:38:a0:ea:
                    8c:d4:84:8b:9d:03:29:38:4f:8e:f3:41:86:91:9a:
                    79:90:13:c5:a4:c3:53:e3:bd:63:ea:13:c1:94:60:
                    e5:41:72:fa:20:a4:a0:ca:9e:7f:d1:3c:4e:8e:53:
                    e9:36:a8:a4:7e:68:35:da:eb:d5:d2:ca:72:99:f4:
                    b2:0b:ec:ff:59:8f:9f:e4:8b:9f:a4:2d:95:51:08:
                    70:10:5b:86:c1:27:83:cb:36:b8:3e:4e:6f:58:02:
                    9b:f9:58:6a:ea:7c:96:55:4b:3b:d3:9a:3d:d7:be:
                    a2:50:be:d9:d4:33:ac:f3:2a:78:d4:37:52:e7:fd:
                    a4:11:cd:c1:b3:42:60:18:e9:88:72:61:d0:5d:65:
                    fa:b6:65:ee:70:65:7c:92:12:df:e8:79:a2:20:07:
                    4b:0c:fc:0e:54:2e:de:37:21:13:f8:5e:a2:58:42:
                    0e:e7:68:19:05:39:46:b8:1a:41:d5:e0:28:84:d4:
                    b0:44:ff:82:4b:24:99:4e:9c:60:48:8b:ce:d4:e9:
                    66:c2:13:56:3f:60:cc:fb:d9:68:ed:1a:06:0f:e3:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:28:2B:01:FA:C5:65:DB:C7:39:3D:86:D7:96:A5:13:00:8C:97:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/b945615a-979a-3073-b0e8-fef7d9d7a16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:9d:d4:90:31:18:09:48:b4:40:94:4c:36:a3:21:4b:49:d2:
         87:4a:0a:a6:47:a1:40:92:36:83:66:07:c2:8d:a0:12:36:c9:
         6e:30:f9:43:1d:55:02:e4:04:57:23:cf:66:ce:be:b7:ce:bd:
         c1:50:a4:e4:ee:ea:0f:8c:0a:f2:a1:16:2e:3e:47:31:b7:1e:
         e6:71:a7:3a:2f:01:fe:5f:69:04:e6:42:56:d1:5f:0c:64:9a:
         a6:d7:40:79:b0:d9:4e:c0:84:a6:cb:85:4d:b6:68:31:c9:97:
         1b:07:e2:15:e1:79:67:17:62:20:73:44:9f:ab:f7:dc:17:51:
         24:c9:81:08:12:38:09:06:40:0f:3d:32:a7:34:ec:2f:b2:c4:
         9b:52:4e:6e:e4:9b:32:b6:3e:24:f9:45:d9:1a:7f:1b:77:2c:
         37:e0:09:c1:10:bf:04:cb:e4:8e:96:30:01:de:29:1c:3e:3e:
         b1:6f:00:0a:d8:4b:82:85:36:54:b6:bc:6b:12:fa:61:b6:04:
         06:3b:72:73:9f:f4:fe:f9:ca:a5:d1:83:ae:7e:8c:8f:27:d4:
         63:16:d5:b9:25:a7:41:31:72:6d:01:5c:84:59:26:be:80:81:
         8e:5e:d8:b7:2c:7e:e3:da:f0:74:67:ed:5b:41:a9:31:8d:8a:
         3b:ca:f3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:51 2025 by rpki-client