Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/48879af0-7da1-3dad-8f70-acec7b8206e1.roa
File:                     48879af0-7da1-3dad-8f70-acec7b8206e1.roa (raw, json)
Hash identifier:          0NimiKm/tQOCRtYFxHELnb3Dync9fxB7roofon6yC+8=
Subject key identifier:   34:AE:DA:36:88:B1:DA:75:D1:D5:D6:C2:8E:D1:51:18:77:C5:DA:B5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848B73811A963E956A1449CC500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/48879af0-7da1-3dad-8f70-acec7b8206e1.roa
Signing time:             Thu 30 Jan 2025 11:12:47 +0000
ROA not before:           Thu 30 Jan 2025 11:12:47 +0000
ROA not after:            Wed 30 Apr 2025 10:12:47 +0000
asID:                     30036
IP address blocks:        2604:2d80:5880::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:38:11:a9:63:e9:56:a1:44:9c:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 11:12:47 2025 GMT
            Not After : Apr 30 10:12:47 2025 GMT
        Subject: CN=aac0208a-6330-4df1-b616-a3d39c6b1410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:27:eb:bf:d3:4e:f8:21:04:af:0f:29:a5:
                    e5:5a:b3:5e:8f:d9:ca:f8:9c:1a:85:2b:f5:56:5e:
                    4f:aa:ed:ff:91:21:98:ed:de:3b:be:c2:fc:dd:f5:
                    45:10:5f:83:09:59:76:7f:20:43:a4:19:4a:38:d0:
                    7b:c3:20:53:9d:37:c7:6a:b6:21:ad:a7:e5:a1:d6:
                    6e:b7:e7:48:61:af:15:a6:31:81:60:9a:4a:ee:79:
                    03:64:22:66:96:af:19:12:16:31:79:4e:0e:44:eb:
                    df:d1:20:2f:56:28:65:c4:cc:4c:e1:a5:13:ce:06:
                    2b:46:a4:24:6a:81:14:85:a6:4b:6b:a7:11:e9:17:
                    7a:bc:d0:32:85:cd:81:d2:e4:04:49:04:61:e0:0e:
                    00:91:85:df:42:11:fb:6c:46:ef:4b:58:d4:65:4d:
                    ef:a8:30:c2:40:48:c4:bf:2b:22:ad:83:4a:1d:35:
                    45:8a:26:7f:80:fa:e3:98:e7:66:78:f1:5c:eb:3b:
                    74:34:e9:61:7e:fa:90:6b:6b:9e:2f:22:5d:e9:6e:
                    f8:1d:af:d6:0d:8b:e1:5b:d5:cc:24:26:ef:6b:85:
                    c8:6d:f4:f0:98:b1:cb:e6:d3:f0:c9:e0:bd:69:16:
                    ab:4c:d7:5a:91:84:78:59:c7:14:92:1e:5a:6d:dc:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AE:DA:36:88:B1:DA:75:D1:D5:D6:C2:8E:D1:51:18:77:C5:DA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/48879af0-7da1-3dad-8f70-acec7b8206e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:81:e5:7c:09:24:33:03:39:23:3f:43:b1:0f:55:92:c0:
         01:99:05:50:02:a1:5d:05:76:20:68:0f:33:73:9c:77:b5:ce:
         14:40:71:f4:ef:71:7e:b8:57:a9:43:c5:7e:56:ca:ef:31:10:
         4c:48:45:a8:dc:cf:84:7b:63:99:36:3a:9d:85:2f:19:20:85:
         0a:80:7e:e6:86:c2:56:4f:a7:7d:6b:82:c1:8c:ec:d4:d0:82:
         c3:75:f6:13:8d:74:2c:91:48:5a:fb:91:c3:42:d4:01:a5:87:
         87:39:0d:76:0e:aa:24:1d:de:b4:db:ee:9b:93:9d:ff:43:35:
         e6:fd:54:f1:1d:9d:06:ad:fd:81:0b:55:a1:d9:b5:82:a1:99:
         e3:9d:07:22:4d:88:62:44:14:a4:46:31:ff:d9:e9:15:57:35:
         9e:10:e1:7a:d8:29:e4:d8:af:34:51:5e:e1:2b:46:fe:fa:54:
         72:ef:a7:30:15:fd:0b:28:2c:02:56:c4:c8:09:d9:4f:4c:b4:
         6d:62:af:dd:54:a3:bf:fe:a6:b2:a3:dd:34:4d:db:bf:9f:ff:
         53:9b:e5:7a:d1:20:40:81:18:4d:4f:b5:4b:c7:b0:52:df:0b:
         03:a0:d1:54:43:c9:d6:48:57:8a:15:4b:3c:95:61:5d:89:00:
         f4:40:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:42:34 2025 by rpki-client