Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa
File:                     7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa (raw, json)
Hash identifier:          Hze2RN98hrTRh/l4AHFNKZ40Y39GAYcvC72LFTx24k8=
Subject key identifier:   B2:70:9D:61:20:81:A7:7D:AC:42:C5:61:EC:D7:6A:2E:1A:E8:65:76
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848C580F422BC1CAD0402FA28C0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     2734
IP address blocks:        2605:6c00:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:f4:22:bc:1c:ad:04:02:fa:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=bb61bf56-3e9a-435f-b66d-0d89c65a3062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:20:81:ce:49:99:6e:f5:f7:44:59:0f:88:
                    c0:d6:1a:f0:b6:b0:2c:c8:80:d3:6e:fb:62:25:62:
                    1a:e8:0c:25:31:06:41:e0:fe:55:4d:ae:af:da:f5:
                    64:5c:3e:9c:bd:9c:f9:58:70:d5:20:67:dc:93:f3:
                    fe:94:f2:fa:c2:61:88:28:c3:e0:84:29:96:52:82:
                    5d:50:f2:45:cd:69:c9:18:38:1b:5e:c6:7e:55:d8:
                    f9:d8:65:12:f7:34:a3:31:bb:59:24:1a:c7:0e:20:
                    28:66:0e:75:e6:6b:5a:b3:6b:4a:d2:72:3b:07:39:
                    b4:c3:fb:85:3b:29:38:44:90:40:23:fb:51:94:88:
                    f8:10:02:01:a7:58:02:e8:fb:06:a5:f2:28:57:89:
                    63:c4:0f:c1:1d:a5:c4:85:16:7f:54:c0:65:cc:c6:
                    c5:ce:88:71:ec:98:e6:f2:56:9e:92:cd:48:b7:29:
                    f2:86:ae:ec:1c:65:0d:aa:92:94:1f:25:7e:e7:cd:
                    83:74:ba:05:17:a4:b8:1d:b9:db:8f:2c:93:f2:c7:
                    73:de:ba:6a:4b:97:57:80:32:c9:98:b7:47:69:c5:
                    05:7f:39:e4:09:17:86:e4:48:66:d7:90:df:99:0e:
                    0e:99:53:26:ea:c4:50:e3:f7:30:bb:ae:55:cf:ec:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:70:9D:61:20:81:A7:7D:AC:42:C5:61:EC:D7:6A:2E:1A:E8:65:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:d7:c0:3f:af:ee:46:36:f2:59:55:98:60:1d:0f:c2:14:
         43:2f:cd:31:c7:ea:af:90:0e:21:0e:df:b1:81:77:32:e7:72:
         97:a3:fc:af:5f:7d:21:0a:9f:93:69:0e:f7:61:7f:1c:37:60:
         38:46:f1:7d:c5:4c:f6:24:72:40:94:d8:65:7c:6e:91:3d:1a:
         93:42:12:83:69:26:87:7a:b3:5d:91:bb:8c:a9:d1:d0:c5:6f:
         1d:85:78:15:99:67:8f:9f:05:2b:f1:df:74:65:eb:19:ce:6c:
         1d:0a:ed:2d:a9:b2:9e:9e:62:b0:e9:51:66:a1:7c:7f:09:73:
         59:13:ce:02:73:3c:57:ce:63:42:3a:6e:5b:fa:c5:5f:00:bf:
         e2:12:6c:9b:b0:1c:f4:34:c7:cc:ca:83:f6:2e:6d:d6:f1:d4:
         c8:64:70:55:68:00:35:9c:7c:23:28:8d:5b:59:d0:de:cf:06:
         f2:0f:83:43:c6:95:0f:df:2e:d7:18:eb:ec:a1:5c:9f:26:15:
         da:3b:f7:ed:65:37:a1:ae:00:00:d9:c0:71:5d:99:40:a7:dc:
         72:49:8d:4a:fc:53:a9:f0:85:97:cf:42:91:49:1e:9f:a9:96:
         3d:e7:0c:ee:1c:58:58:dc:db:db:e6:01:16:ee:2b:cd:fb:48:
         27:b8:67:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:46 2025 by rpki-client