Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/734543ed-2724-3cf8-8333-8f4450fdfe75.roa
File:                     734543ed-2724-3cf8-8333-8f4450fdfe75.roa (raw, json)
Hash identifier:          BxhyNRDsN1sDFsOKJxxH8KTXOg3GfgFVCvdzlvRc7CQ=
Subject key identifier:   A2:F8:95:F3:AB:47:E0:01:1B:1F:9A:A4:E3:11:E1:E3:FF:78:78:3B
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F432858482BF54B542E6342D76A9F0D00
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/734543ed-2724-3cf8-8333-8f4450fdfe75.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     22147
IP address blocks:        2001:4830:c150::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:4b:54:2e:63:42:d7:6a:9f:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=30e38c1a-53a8-43d3-a9c7-51b0c869b6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:51:a3:fb:b0:ea:9d:5b:87:67:e8:79:6a:42:
                    84:49:23:40:e0:d4:68:50:8d:1c:e3:81:ff:a9:b4:
                    7d:40:29:96:66:8e:33:73:46:a7:40:47:1a:c8:99:
                    1d:e5:24:70:70:8c:aa:76:36:c7:49:5e:56:38:ea:
                    f8:2e:16:86:6c:b0:fe:ec:63:6b:45:a7:b4:fd:04:
                    fb:7a:85:2c:12:9c:ed:bc:19:12:0d:0a:a5:c3:fb:
                    00:ae:5a:17:07:90:6b:5a:18:13:e3:19:44:2a:c2:
                    c9:79:90:79:11:ec:dd:e1:4a:06:97:53:c0:59:22:
                    0d:17:10:32:08:f8:14:9c:f0:09:29:1c:36:ab:cb:
                    b0:e6:d6:b6:7f:1b:21:a1:bf:14:e9:26:69:8e:5e:
                    18:2c:cf:e9:d5:95:3d:04:b7:a1:40:d8:73:60:71:
                    78:6d:26:a5:c3:b8:88:8a:e2:68:18:e1:b1:49:b7:
                    03:c0:2e:28:4b:e7:48:ae:58:63:33:19:e7:03:d7:
                    0a:35:6a:86:ef:c2:35:ac:50:2d:cb:b0:18:a0:b3:
                    14:ec:16:06:c4:f1:bf:95:98:c1:df:97:ba:0d:e1:
                    5f:91:b4:8b:2f:2d:56:d7:6c:1b:e6:ce:f9:d1:a4:
                    3c:b8:32:f7:1f:b2:68:8f:2c:6d:d3:ff:91:a9:52:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:95:F3:AB:47:E0:01:1B:1F:9A:A4:E3:11:E1:E3:FF:78:78:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/734543ed-2724-3cf8-8333-8f4450fdfe75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:52:39:a8:a7:a1:33:3f:92:85:e7:d6:02:b5:5e:4b:f1:81:
         2c:9a:21:d7:85:5f:2d:a1:e2:2e:27:0f:85:74:07:3d:c1:75:
         2a:56:73:7b:10:9d:8f:13:b3:76:a6:0d:13:f7:3d:e8:2b:66:
         f9:27:a2:ee:82:78:c4:45:76:83:ac:5b:77:d5:1e:f5:33:4e:
         c7:52:ac:71:69:a0:c0:b2:5d:8b:4f:eb:9d:9a:c8:09:05:b7:
         e7:23:a5:7d:88:4c:1d:bf:ee:11:6f:74:34:89:5f:d1:5b:79:
         d8:6d:00:52:a6:d2:a7:4d:ef:02:a1:59:51:1f:f3:f7:cd:9f:
         1b:2a:11:88:32:e6:ff:9f:20:d3:91:16:f7:c3:6e:60:b7:1e:
         27:d0:58:4a:35:22:35:15:b7:3b:2c:3d:66:6c:08:37:7d:68:
         ae:8f:70:b5:a7:79:5c:b2:76:f5:a1:57:41:16:cf:ef:a7:26:
         69:f0:69:00:e0:09:3c:a2:32:fb:69:cb:25:a5:63:12:cd:68:
         a5:3d:3b:9c:0b:1d:2b:8a:cc:3a:56:1a:29:3c:af:21:3e:3b:
         1c:1f:ff:0c:b9:df:e9:a0:90:d3:55:38:e7:34:c0:8a:c9:c2:
         c3:72:6c:9f:79:70:a7:96:01:64:0a:cc:5f:45:d2:f9:20:ac:
         5f:67:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:31 2025 by rpki-client