Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/397fc92f-aab3-36ef-b1ea-7231ca8de11f.roa
File:                     397fc92f-aab3-36ef-b1ea-7231ca8de11f.roa (raw, json)
Hash identifier:          Dxr2I1oTE+XsGIMvVLr1BydU1h/RoJ5E4jf5skhGfYQ=
Subject key identifier:   8E:8D:FE:D6:07:7E:BD:71:16:E1:3E:E3:3C:DC:AD:86:AA:C0:3F:36
Certificate issuer:       /CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25
Certificate serial:       010D0C9F4328584FC5CBCCBC137F107A3E171780
Authority key identifier: F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/397fc92f-aab3-36ef-b1ea-7231ca8de11f.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     396982
IP address blocks:        2601:1708::/32 maxlen: 32
                          2601:1708:100::/40 maxlen: 40
                          2601:1708:101::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:cc:bc:13:7f:10:7a:3e:17:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=7598d05f-39ed-46e5-957c-14242d0048a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:22:21:ff:4f:15:f6:7a:42:dd:69:0e:58:
                    e2:84:0c:33:a0:89:56:53:e8:40:3e:3f:e6:5a:42:
                    79:70:a7:1d:1b:a4:51:bb:17:61:95:22:67:39:02:
                    16:95:94:0b:30:9c:93:54:1e:15:07:98:b1:be:7a:
                    ea:46:f4:9a:84:51:1b:6e:a4:37:f6:4c:83:b3:08:
                    89:a5:9a:ed:35:88:d6:3b:90:ad:d0:53:13:eb:8c:
                    aa:17:f1:01:d0:f6:c1:d3:d5:da:ef:79:d6:75:68:
                    45:84:9c:79:28:87:10:ee:42:a6:5f:34:b2:f9:b7:
                    4e:96:90:b5:a5:99:8f:a3:0e:e6:99:bc:c6:63:a8:
                    e5:70:3a:66:da:d8:1a:26:b0:b9:e4:20:8b:03:c1:
                    69:8a:58:68:58:1a:2c:b4:43:06:34:22:71:3a:61:
                    e3:83:f6:99:b2:ce:ee:3b:0c:13:7e:91:74:6a:40:
                    2f:cd:3d:19:41:55:09:7c:e3:f1:a3:2d:7b:43:4d:
                    cc:37:33:13:58:36:47:1f:7c:29:01:e5:e6:d7:cb:
                    53:7c:50:8b:27:9d:2f:fa:7a:f0:fb:ce:5c:6c:23:
                    8d:f9:cc:2e:96:0c:42:08:44:31:ba:7d:f0:4b:96:
                    f7:07:b2:31:db:cc:1e:0e:13:9a:27:03:b9:d2:a5:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:FE:D6:07:7E:BD:71:16:E1:3E:E3:3C:DC:AD:86:AA:C0:3F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/397fc92f-aab3-36ef-b1ea-7231ca8de11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl

            X509v3 Authority Key Identifier:
                keyid:F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1708::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:72:14:de:b9:d9:c7:a4:77:8d:99:a4:a9:2a:63:20:09:
         7e:40:16:36:e8:32:84:7c:93:9f:9e:b9:1f:9c:8d:e4:da:89:
         ef:17:0a:4e:74:78:e2:de:19:6b:cc:76:26:56:37:af:83:d7:
         d0:e9:3b:a3:56:65:b3:78:74:88:26:6e:72:aa:12:b9:93:bd:
         8b:17:29:a2:6d:6e:2b:c6:c7:ab:d4:ae:ae:ef:de:06:03:8a:
         75:5b:51:66:7d:bd:bc:7e:de:90:24:0a:b5:c9:20:5a:7e:a0:
         85:8a:1f:99:fd:8b:a4:39:72:40:c7:79:bd:45:a7:50:b6:82:
         ed:0a:6b:b1:e4:07:0e:56:47:97:e6:99:4e:c6:26:74:cf:62:
         03:36:41:48:ec:24:90:90:13:70:ce:2c:75:5c:ef:5f:9f:fd:
         f3:2c:59:18:ff:9f:3c:24:36:3d:57:c6:e9:d9:af:81:2b:2b:
         07:a3:91:e2:dd:86:7e:75:1d:94:5b:28:c8:a6:d9:34:d9:c6:
         92:16:f2:26:19:73:4a:9e:90:4a:bf:fb:44:de:43:83:59:d9:
         35:ab:e8:08:9b:97:d6:24:ae:32:31:54:25:86:ec:e8:7a:af:
         4f:de:ed:fc:61:e1:a3:86:4a:b5:87:0b:d8:55:39:ee:bb:bb:
         1e:23:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----