Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14e7ce23-b634-37fe-a764-f8453fd0477a.roa
File:                     14e7ce23-b634-37fe-a764-f8453fd0477a.roa (raw, json)
Hash identifier:          6XzGy7H15aB2lWvdqL7hJgoNtExsoA9DpEe5L3IkZzk=
Subject key identifier:   74:D6:22:37:AE:68:9C:2D:5C:56:6C:23:C5:DE:CB:24:66:8F:0B:B6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F8A577422210B5803A6A40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14e7ce23-b634-37fe-a764-f8453fd0477a.roa
Signing time:             Wed 05 Feb 2025 11:13:44 +0000
ROA not before:           Wed 05 Feb 2025 11:13:44 +0000
ROA not after:            Tue 06 May 2025 10:13:44 +0000
asID:                     30036
IP address blocks:        2604:2d80:e800::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f8:a5:77:42:22:10:b5:80:3a:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:13:44 2025 GMT
            Not After : May  6 10:13:44 2025 GMT
        Subject: CN=804d3a8a-a6b6-4545-a73c-c079d1be054e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:3c:53:6f:62:76:13:57:68:41:45:62:e0:
                    68:6b:3b:0a:18:bb:18:24:26:64:ca:3b:4d:6a:66:
                    2d:1b:4c:cc:be:01:6c:bf:bf:ce:10:e4:0c:52:d8:
                    54:f2:dd:e7:b4:f0:25:db:9f:d0:6f:5b:e3:33:dc:
                    15:19:73:f5:b7:9d:7d:2b:c1:dd:d8:fb:f0:0a:59:
                    b9:aa:98:80:f2:69:74:e3:63:2d:9b:ba:51:1e:c3:
                    a8:cd:5a:e8:00:ed:90:97:91:b2:8f:7b:12:92:dd:
                    3f:ff:09:c0:a8:f4:48:1c:2d:5f:e5:74:14:3f:8f:
                    17:3f:87:98:07:6c:6f:64:ca:0a:c4:82:24:3d:ed:
                    04:f0:51:b9:1e:61:56:23:48:b3:a3:fe:79:3b:60:
                    2a:f7:ac:fb:03:e0:0a:b4:3a:2a:53:07:ff:0f:d0:
                    51:b5:a3:cc:8d:7c:1f:fd:7d:c0:cd:d8:d5:e8:6f:
                    30:46:b7:b8:f2:0e:98:cc:44:39:51:c7:46:f9:7a:
                    f5:b3:03:b9:56:b1:eb:47:57:c2:f2:8f:4c:7e:7a:
                    b0:95:e4:0a:9d:74:03:8d:36:87:61:c7:60:11:8e:
                    3e:fd:a3:43:99:5b:7b:05:45:d7:fc:5a:02:0d:ff:
                    cf:99:80:e0:42:1e:10:9f:1d:3f:0e:c5:d5:a8:d6:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D6:22:37:AE:68:9C:2D:5C:56:6C:23:C5:DE:CB:24:66:8F:0B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14e7ce23-b634-37fe-a764-f8453fd0477a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a7:f1:7a:15:0d:bf:45:01:c8:70:9e:06:7f:5f:c5:b6:6c:
         85:0e:94:83:3b:f8:0f:3a:90:8a:fd:d1:11:6c:ee:4b:c4:b2:
         b8:bd:db:be:de:1a:6f:81:c6:e4:87:42:ed:d0:63:66:1b:a4:
         92:73:5c:5e:bc:3a:c8:41:94:90:c1:e7:ac:00:2a:a2:56:3e:
         09:cd:d2:ee:30:e3:da:9c:ce:af:c9:7a:71:d6:35:62:3b:fe:
         b8:99:f2:f6:9f:dd:6d:c5:ae:c6:9b:0a:76:f4:8b:96:ba:c2:
         61:0c:2f:41:64:0d:cd:58:31:df:90:3f:fa:bf:fd:56:1c:e1:
         fa:ec:9f:67:8d:d8:d2:4f:0f:e0:66:0a:2a:ba:c8:90:9b:76:
         2b:6d:e8:07:fe:9d:f1:ec:5b:a0:bd:bd:46:71:67:18:f9:b9:
         ca:4d:4e:ee:b0:e5:8f:ed:2c:ee:f8:d0:11:39:45:89:b8:cb:
         56:80:d3:05:82:c8:33:fb:7c:b0:c2:7d:a8:08:bf:80:75:24:
         e2:e2:8a:f5:5c:fc:2d:bc:13:f6:40:2d:b7:e0:85:f0:9a:09:
         a4:18:28:3d:e5:fa:2f:b4:49:db:13:fc:aa:e4:62:3d:d4:7f:
         f9:3c:4c:14:7f:9c:52:e2:2b:fb:8e:3e:eb:f6:c3:7c:31:ca:
         c3:eb:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:41 2025 by rpki-client