Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ba8e7c21-7a36-3236-8af9-6c5f4076d563.roa
File:                     ba8e7c21-7a36-3236-8af9-6c5f4076d563.roa (raw, json)
Hash identifier:          mcQpiZEb6EojFYwFDXHGAsqH+b43XA37t8cGshmx9Qk=
Subject key identifier:   BA:4B:0E:6C:E2:A8:D5:0C:78:C3:5B:A3:63:2D:FB:8A:37:22:C3:E7
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848C580F476BEAAB9B65990AEAA
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ba8e7c21-7a36-3236-8af9-6c5f4076d563.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     2734
IP address blocks:        2605:6c00:5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:f4:76:be:aa:b9:b6:59:90:ae:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=29c8dfc8-6a75-43dd-aaf8-439e8e5960f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:7c:89:ad:64:ad:23:ae:24:be:7e:81:c6:
                    27:6f:36:2c:b5:5e:4e:8d:82:dd:0c:1a:5c:89:42:
                    8e:85:5b:8a:08:65:24:e0:c6:99:12:12:ee:a9:fe:
                    a7:fc:32:5f:80:53:cc:70:e0:8e:fc:53:d1:8c:69:
                    88:4e:fb:56:82:b8:68:18:b9:b0:d1:5b:2e:a4:2c:
                    bf:fa:48:47:e0:ff:07:1d:01:1e:ea:f3:ad:c5:5b:
                    dd:b0:a9:43:79:ed:48:fe:e2:1b:61:3f:46:a8:41:
                    a3:30:e7:b0:d6:97:87:0e:70:3e:e8:f5:03:12:9b:
                    5a:12:2b:21:3f:6b:b0:22:f6:fb:77:c0:06:17:8d:
                    4a:76:23:3b:63:12:a3:cb:81:0a:81:f6:7a:3f:fc:
                    a8:09:08:33:48:c7:57:b4:07:53:53:2b:1b:b3:29:
                    5c:53:70:86:d5:2a:94:47:ad:bc:86:bb:c9:cf:99:
                    7f:d4:ae:1f:75:a8:d2:33:15:ac:51:d2:97:c6:83:
                    83:6a:17:27:a0:03:88:2f:d3:e9:6d:e7:a2:b0:e9:
                    11:f4:a7:c0:40:b5:96:55:65:c0:46:69:23:d9:db:
                    72:22:c2:ab:14:a5:c8:10:d7:7b:19:84:e3:5d:14:
                    bc:4c:e8:40:58:35:f7:31:f5:5f:ae:4a:91:87:0e:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4B:0E:6C:E2:A8:D5:0C:78:C3:5B:A3:63:2D:FB:8A:37:22:C3:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ba8e7c21-7a36-3236-8af9-6c5f4076d563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c1:8c:b5:e4:d6:06:79:1a:a2:cd:0d:dd:8c:09:04:19:2f:
         ae:8c:d5:70:96:44:3c:cd:a1:cc:ff:c6:2d:79:f5:67:2e:f2:
         25:ae:24:41:8c:5e:04:15:1f:dc:b3:1d:00:bf:52:92:ba:56:
         ad:50:88:56:ec:c0:c0:b1:f3:81:cd:c5:12:9a:09:c3:8b:f0:
         32:8b:1e:0e:5b:a3:6a:5b:4e:94:2a:f7:ac:45:f4:7c:f6:dc:
         dc:b1:f7:a3:2b:fb:61:40:29:d5:e0:7c:57:ab:6b:ef:97:c4:
         2f:05:0d:62:d9:6a:5c:7a:b7:15:6d:c2:b5:74:ba:e5:cf:c8:
         f3:de:00:31:94:3a:75:05:b1:34:ea:9b:50:a5:bc:20:54:42:
         ab:cd:3d:16:f3:fc:49:cc:86:6b:a2:ed:62:88:67:1a:1a:8c:
         b7:af:c6:20:6b:48:77:c0:e2:bf:d2:e2:db:73:ce:6e:db:10:
         03:9d:69:a4:49:e0:42:26:73:2d:02:ac:36:c7:1b:49:3b:72:
         7d:d8:ee:af:48:cd:9d:13:9b:11:cc:7c:1e:84:a1:2f:1a:96:
         d4:f8:20:67:2c:f2:98:d1:46:5a:d2:c0:2f:76:23:96:7f:42:
         08:a6:95:b1:04:13:ad:ab:dd:99:24:cc:2c:1e:9e:6b:9c:a7:
         2e:ff:c5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:34 2025 by rpki-client