Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d9d941c-1ea8-34ec-bffb-5dc7daaba735.roa
File:                     4d9d941c-1ea8-34ec-bffb-5dc7daaba735.roa (raw, json)
Hash identifier:          Y35rm3HabOgRjQN8JscQ29OIRLQxwAPebuefJCSA5II=
Subject key identifier:   AF:37:8C:1C:07:01:9E:C3:3B:BB:B6:DA:85:DD:7E:CF:CC:29:43:24
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849134FACDC18F1DE7254CAACA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d9d941c-1ea8-34ec-bffb-5dc7daaba735.roa
Signing time:             Tue 04 Mar 2025 10:54:43 +0000
ROA not before:           Tue 04 Mar 2025 10:54:43 +0000
ROA not after:            Mon 02 Jun 2025 09:54:43 +0000
asID:                     30036
IP address blocks:        2604:2d80:cc00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:4f:ac:dc:18:f1:de:72:54:ca:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  4 10:54:43 2025 GMT
            Not After : Jun  2 09:54:43 2025 GMT
        Subject: CN=50aebc8f-9226-4435-85d1-e4b92fcbb7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:2d:9b:2d:fc:51:25:fa:72:fe:d8:91:51:
                    19:de:b3:7a:ba:51:41:19:49:4d:43:d9:6c:cd:e2:
                    cf:2b:5a:c6:a7:b8:a4:49:83:ff:4b:30:b0:da:e5:
                    9e:11:06:27:6b:c9:4a:6e:12:d0:83:de:f9:01:f0:
                    b9:c1:a6:73:82:25:0d:f3:86:2f:a5:7b:1c:79:06:
                    93:a7:c4:f7:ea:36:73:70:a9:51:1f:27:3d:a9:90:
                    ca:89:53:e5:bc:42:90:3b:82:1b:3e:f8:d3:b2:d1:
                    c9:8c:90:61:e7:0a:a3:19:64:ab:98:0e:cc:4b:d5:
                    27:0d:df:92:b7:5f:f1:d0:ca:37:80:d9:f6:10:36:
                    60:d1:b4:17:3c:e1:f9:cc:95:8b:78:1c:56:7f:ab:
                    3a:cf:cd:18:99:f3:91:31:88:23:c5:44:78:59:97:
                    ab:e2:0c:6d:df:0e:dc:5a:3c:5e:e0:a6:4f:ed:8f:
                    54:e3:d8:79:0c:66:c7:44:05:40:82:f3:46:a9:4e:
                    a3:ae:b3:85:13:69:8c:26:77:24:89:3a:47:a8:e5:
                    fd:c8:30:20:82:48:8f:29:05:d0:a6:dd:b0:76:fe:
                    ba:d7:8f:45:1f:58:87:7b:a7:a0:e1:c1:35:da:e2:
                    f4:20:90:29:e4:90:9b:0e:a4:f5:fd:e9:99:1f:4f:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:37:8C:1C:07:01:9E:C3:3B:BB:B6:DA:85:DD:7E:CF:CC:29:43:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d9d941c-1ea8-34ec-bffb-5dc7daaba735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:b1:38:5b:67:85:c1:5b:0d:eb:6f:b4:3a:7e:e4:d1:9b:
         18:5e:1d:57:64:00:20:ad:24:a3:ea:51:dc:ec:7e:e6:49:dc:
         1e:cd:29:fb:d8:23:bb:f5:a9:b9:36:99:c4:3f:64:a5:a0:4b:
         de:12:f0:34:30:6e:66:83:3d:e0:db:d1:cb:c3:f6:94:35:87:
         d1:95:9d:79:c2:95:4b:de:a4:e2:a4:ed:d8:ea:29:3d:f9:60:
         3f:70:3c:08:36:8c:f9:05:15:52:7a:48:8c:10:0c:bc:46:b2:
         ef:be:24:5c:b7:fe:fe:46:9f:df:6d:3a:9e:6c:ba:a6:ae:c6:
         32:26:2f:c3:47:ec:2c:61:0b:a9:e6:b2:6b:64:4e:14:3d:15:
         5a:a1:65:a2:12:51:07:34:7d:79:68:3c:63:0a:31:d4:ae:63:
         08:a4:a1:c4:c7:b9:85:8a:01:d1:83:eb:36:27:86:ee:4e:67:
         59:e8:ff:7d:d8:02:f1:35:35:d7:f2:5b:ec:5f:4a:22:5f:05:
         26:03:32:df:23:ef:0d:a1:80:3e:d2:5e:eb:54:8d:3b:1e:4f:
         cc:49:74:73:1d:91:99:c1:f0:a6:66:e9:3b:55:98:0d:87:da:
         80:04:a3:17:14:e4:d5:fd:bc:80:4e:97:7f:66:32:7d:b7:01:
         14:03:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:49 2025 by rpki-client