Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f1c8225-d134-3d3e-8dbb-1e2beb247f14.roa
File:                     2f1c8225-d134-3d3e-8dbb-1e2beb247f14.roa (raw, json)
Hash identifier:          W0dkq3y1LZJFxARYYrvI28XmSD6cDV23k3Das+I9qNA=
Subject key identifier:   61:06:3C:DA:4C:5D:95:3C:D6:12:E1:41:9C:B3:C7:37:15:4E:F1:BC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5780F38E676A58E539F3400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f1c8225-d134-3d3e-8dbb-1e2beb247f14.roa
Signing time:             Tue 04 Feb 2025 13:43:02 +0000
ROA not before:           Tue 04 Feb 2025 13:43:02 +0000
ROA not after:            Mon 05 May 2025 12:43:02 +0000
asID:                     30036
IP address blocks:        2604:2d80:3980::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:78:0f:38:e6:76:a5:8e:53:9f:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:43:02 2025 GMT
            Not After : May  5 12:43:02 2025 GMT
        Subject: CN=31862156-4cc8-416e-bea5-27c628d35814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b5:12:67:42:43:18:66:55:d0:41:62:13:f5:
                    5e:4a:a0:95:74:26:b3:03:33:e1:b9:92:2c:bb:a7:
                    ac:a9:b5:0d:08:2e:93:0c:e1:9b:78:8a:e6:9c:73:
                    82:71:17:7d:69:eb:80:70:eb:83:1c:82:a5:13:62:
                    fb:49:2e:91:a3:a4:fe:26:70:ee:f7:a0:86:92:ad:
                    12:c9:9c:e1:bc:7b:d7:4a:ce:82:a5:c7:4c:a1:0c:
                    61:62:4f:41:2a:74:49:76:16:b5:1b:a4:66:af:0c:
                    2a:a6:3f:1c:38:e7:4f:8d:a2:05:ee:41:81:22:86:
                    b9:1e:a5:52:e1:c3:b5:11:10:bf:f4:fc:46:25:c8:
                    00:cf:57:e5:6d:db:ac:30:ac:e2:7b:06:42:eb:18:
                    8e:42:94:73:91:00:94:aa:86:c0:48:2d:a3:56:d8:
                    3e:33:7d:dd:43:69:df:fb:20:e6:ad:44:72:34:c3:
                    56:67:6c:ef:12:e4:f8:ab:9f:9f:9b:14:b8:6a:5e:
                    fe:5f:99:b4:8f:11:c2:7e:c9:3a:fe:a8:bb:9b:f6:
                    26:84:a5:d3:4d:a1:3f:79:30:6a:a4:fa:99:98:e6:
                    95:de:a5:08:25:9d:54:3d:ce:af:0d:ae:c0:11:2d:
                    ea:68:0b:aa:61:3c:99:8a:b8:1d:43:25:2a:c3:16:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:06:3C:DA:4C:5D:95:3C:D6:12:E1:41:9C:B3:C7:37:15:4E:F1:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f1c8225-d134-3d3e-8dbb-1e2beb247f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:cf:6f:83:0d:f3:91:0a:c6:da:4f:6e:16:3b:a0:e3:34:2f:
         1b:42:ed:22:52:27:32:03:35:e1:3c:a8:46:e2:ea:4c:38:10:
         fd:de:e2:6f:57:ae:7a:ba:18:69:21:77:83:f5:a6:a0:b7:7a:
         c8:90:46:48:4f:f3:36:02:1a:eb:97:30:0b:bc:0b:92:ce:ca:
         9e:3d:81:28:16:2a:4c:ef:58:8a:d2:63:a3:25:b8:74:68:27:
         17:a7:04:ec:cd:09:c8:a5:f9:06:d9:c0:fa:33:f7:0f:22:b1:
         fb:21:a1:f1:72:83:80:9e:7d:e4:5d:81:61:7f:db:cd:81:d9:
         78:64:49:f9:b4:a1:68:db:11:bc:e9:cb:5d:a9:c9:f7:75:20:
         00:77:4d:bf:56:61:fe:15:c4:f0:56:b3:72:26:ed:e2:47:31:
         f8:fe:09:0a:e3:c8:1a:61:02:5c:37:e4:b4:03:e7:4f:af:e6:
         eb:07:a7:c4:e2:92:98:16:a1:f8:39:b7:0a:52:33:e0:0b:ee:
         d6:d6:bd:3f:b5:b9:4c:e0:18:b1:67:30:5c:ed:a8:b1:84:c9:
         c0:1c:dc:63:39:0b:52:dd:32:85:c2:ce:55:06:6b:73:7c:77:
         19:92:84:27:a2:11:55:5f:f2:29:1c:dc:2c:fe:73:8f:4f:d0:
         11:45:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:28 2025 by rpki-client