Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa
File:                     8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa (raw, json)
Hash identifier:          UnUVp7UjtPG1Mlr2InKu7K2U21poJ0u0OputEfwavd0=
Subject key identifier:   A8:36:09:AE:8E:2F:66:B7:FE:EB:8A:A8:E3:9F:E2:9E:F1:23:F8:7C
Certificate issuer:       /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial:       010D0C9F432858480BDA7603E858EC6E2DD7A0C0
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     14500
IP address blocks:        2607:72c0:100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:76:03:e8:58:ec:6e:2d:d7:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=75b82a8d-48a4-44ab-b91c-2cc7754a70ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:c6:26:60:ec:8e:37:32:8d:7a:d8:7a:3b:
                    7d:a3:c8:c5:6b:e0:81:10:5e:ec:29:a2:2f:9c:b3:
                    a0:27:8f:84:7f:b0:4c:b0:a8:94:4d:1a:97:63:0b:
                    0b:c2:b1:3f:0c:88:ae:ff:7f:c8:0d:8c:85:27:b3:
                    9d:34:2c:07:7b:9c:2e:82:47:52:f8:7d:ff:88:92:
                    d9:1c:3f:b1:36:88:40:16:b4:51:fb:05:ce:8b:3c:
                    96:a8:57:53:f7:88:f5:da:d9:73:b3:de:01:72:0a:
                    ff:81:95:a2:5c:1d:78:44:81:d8:87:fe:9a:5a:2f:
                    fb:15:b0:fc:ae:9d:02:85:5f:e9:30:dc:4d:0e:8d:
                    71:5a:32:09:35:df:a7:0e:04:86:a4:7c:22:75:46:
                    0a:6d:29:9a:d0:df:91:8c:e5:71:38:e3:c8:b6:53:
                    95:7b:45:68:5b:db:5a:a2:87:62:2f:bb:7c:7b:04:
                    49:7e:9f:f9:16:57:64:4f:20:8f:32:13:c2:9d:74:
                    06:82:27:14:f3:46:80:35:06:b1:29:d0:dd:a8:4e:
                    df:aa:44:c0:85:6f:ca:2a:5a:5d:78:76:9a:28:58:
                    c7:d8:8f:b2:ec:cd:34:78:eb:51:6f:73:1a:bc:01:
                    e4:f7:25:87:a3:f6:c2:26:41:c5:be:b2:51:5f:aa:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:36:09:AE:8E:2F:66:B7:FE:EB:8A:A8:E3:9F:E2:9E:F1:23:F8:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl

            X509v3 Authority Key Identifier:
                keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:72c0:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:53:ac:1d:a5:13:ed:38:e0:df:73:7c:55:0e:30:68:64:
         d5:e8:f5:19:a6:4f:85:87:89:20:44:83:81:b0:e4:43:58:00:
         15:b0:36:3f:49:d4:57:53:46:66:2d:32:b2:1d:36:28:de:db:
         2a:44:86:a0:76:7c:c2:a4:8b:c0:3c:51:5f:19:6a:db:af:78:
         6d:ef:9b:e4:5f:de:ab:62:8d:c8:cb:55:8c:43:72:95:76:2c:
         d4:f0:b6:44:f5:4d:55:c3:a0:3d:0b:da:13:55:a3:e6:65:13:
         67:c7:29:a8:e5:da:ca:b4:62:62:93:d6:f8:dd:8b:da:f0:08:
         9e:4b:f8:f4:63:a5:e6:65:db:82:a7:ed:1d:18:9f:df:d7:21:
         6b:b8:ac:cb:e6:3a:bd:b4:f9:4d:3b:bd:70:96:3e:43:1b:12:
         5d:71:a4:ef:64:56:f4:97:03:e9:86:eb:f8:c1:c9:a4:dc:ab:
         84:c7:94:6e:cb:ef:94:3c:01:fd:42:0d:5a:b5:26:cf:cf:52:
         32:71:e9:25:f0:99:9c:83:d5:da:37:bf:a4:fe:a8:bc:d6:23:
         03:03:8e:57:94:a0:5e:dd:e3:4e:1b:70:d4:f5:f3:9e:ee:ba:
         fe:52:2d:9d:39:4a:66:9a:15:0c:a5:33:7e:0c:08:5b:bc:e2:
         e4:79:27:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:55:26 2025 by rpki-client