Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa
File:                     fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa (raw, json)
Hash identifier:          ErcgCKC5f+cm4CV2d8xn/fZ3c/mbFBDdlm+3Q8/McwA=
Subject key identifier:   19:8E:E7:B5:3F:78:96:CA:15:57:F2:BA:49:46:BA:0D:78:6C:C1:73
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F432858485B6AF2C7C59A94F63A6EB680
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2606:9c40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:f2:c7:c5:9a:94:f6:3a:6e:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=3f0a4280-c4b3-47bb-ae05-3aaef4e685fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:fd:a5:d2:c1:ff:5d:0b:a4:67:74:9e:06:
                    83:ee:ac:23:fa:14:5c:1b:40:d9:9b:69:fb:7c:17:
                    69:0e:17:7e:a7:1a:1f:46:40:0e:c4:5f:e9:5c:e5:
                    3d:d9:35:c1:9b:57:1d:06:2b:1a:04:8a:a5:a3:6b:
                    95:6b:f3:12:a8:7c:f1:20:70:b1:c2:9e:6c:76:a9:
                    f4:2a:b2:65:87:a6:f5:b5:6c:14:c7:d9:73:16:70:
                    ba:9c:a0:af:15:7e:a8:90:2c:04:f7:6f:7d:a8:b5:
                    cb:26:ec:b3:da:56:9d:59:d2:d4:ce:cd:96:b9:09:
                    7a:dd:5a:86:de:06:18:f2:34:41:b1:30:c9:da:5f:
                    6a:76:eb:33:f0:fe:30:22:41:8d:32:3e:91:29:b9:
                    ac:0e:65:fa:d0:32:f6:d5:6a:2e:4d:a1:ac:9c:2a:
                    26:96:9d:94:ac:7f:b5:9f:2f:31:8f:90:ec:c0:5f:
                    7b:ea:58:cd:20:da:40:c8:66:2e:74:eb:64:67:1e:
                    c9:43:94:bd:a3:3b:24:b9:1d:c5:ae:47:69:59:74:
                    0a:32:00:8a:6c:64:7a:6f:4a:ef:21:5c:d8:4a:a9:
                    31:70:b9:3c:a6:70:80:e1:96:f4:ba:32:63:07:ba:
                    c1:e8:2b:7d:5c:4f:4a:e7:64:8b:bd:01:6c:57:45:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8E:E7:B5:3F:78:96:CA:15:57:F2:BA:49:46:BA:0D:78:6C:C1:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:5b:77:13:67:d5:9a:bd:7e:e4:e6:6e:3e:33:d1:63:da:50:
         26:4e:4c:bb:5f:a6:e7:89:52:94:b7:b4:d6:49:87:5e:51:03:
         c0:85:00:95:42:31:50:61:a4:fe:8c:bc:5c:a5:68:a7:0d:2a:
         ac:32:46:b1:42:8c:23:2f:2f:9e:5b:9f:66:20:a2:0b:ef:5f:
         5e:c9:b1:43:09:27:8f:99:d7:27:a4:dd:2e:14:d7:55:74:a8:
         92:37:97:b8:b0:33:01:27:e8:ea:f6:08:ec:2f:82:1b:ee:bc:
         39:71:82:dd:9a:bc:b3:a6:df:fa:9b:c7:c8:e1:bb:dc:7d:a4:
         5c:e1:0f:9c:e1:ce:b1:4d:f2:b1:44:31:46:e6:c3:84:9b:88:
         ca:30:ce:97:a4:3b:d4:2c:57:91:ab:f9:04:15:c2:ea:43:6e:
         27:73:39:b9:c5:77:27:a9:9d:54:f7:26:3f:08:55:12:23:8a:
         5d:bf:7f:3a:fa:10:02:ca:57:0e:31:33:d3:3c:e4:09:c4:cb:
         44:56:26:fa:0d:e7:72:b4:a1:7a:36:c8:3a:60:75:79:95:dd:
         05:eb:93:64:02:83:48:01:1a:27:4e:08:77:82:03:6c:ce:af:
         17:05:ac:6f:21:f8:27:42:d8:58:2a:fb:32:c9:0c:eb:5a:f1:
         b9:f1:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:23 2025 by rpki-client