Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/65822779-0e82-3c50-81dd-d3a6ad85ec06.roa
File:                     65822779-0e82-3c50-81dd-d3a6ad85ec06.roa (raw, json)
Hash identifier:          jzk0WGBtlqpA3MXspLOzN2l9YAPrJKE7496kanJOvx8=
Subject key identifier:   46:28:BF:C4:37:FE:C7:FD:1B:80:6B:B9:CA:86:CE:C9:CE:B3:E5:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858494BADA686D93607D9035C0200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/65822779-0e82-3c50-81dd-d3a6ad85ec06.roa
Signing time:             Mon 24 Mar 2025 15:29:20 +0000
ROA not before:           Mon 24 Mar 2025 15:29:20 +0000
ROA not after:            Sun 22 Jun 2025 15:29:20 +0000
asID:                     30036
IP address blocks:        2604:2d80:5c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:ad:a6:86:d9:36:07:d9:03:5c:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 24 15:29:20 2025 GMT
            Not After : Jun 22 15:29:20 2025 GMT
        Subject: CN=a97a5699-df61-48bf-9f7b-c18ae13d18d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:48:79:e8:56:33:42:07:31:09:d4:29:a9:
                    ba:ea:fd:52:a9:fa:ef:d0:a8:84:6c:b4:e4:cf:05:
                    69:d7:cb:1a:f8:cc:c9:62:1b:f0:8f:e1:98:13:af:
                    85:34:90:5e:e1:d3:0a:df:1d:ea:83:4b:10:7d:17:
                    08:9f:b1:54:7b:a2:93:68:65:dc:fc:be:5f:0a:da:
                    b7:ee:00:bb:7e:01:fc:6d:65:44:f5:f8:c4:3f:5c:
                    63:b4:97:67:90:13:16:54:37:8b:5a:aa:9f:22:6d:
                    1e:c5:bd:e3:49:2c:18:51:5f:c7:b3:7e:f0:27:ec:
                    fb:20:fb:4e:72:8e:d8:ef:33:a9:60:0d:31:be:d6:
                    a4:9a:08:6a:78:1d:18:4c:55:eb:88:f6:7b:af:4f:
                    97:27:32:21:14:b1:46:b5:90:8b:20:d7:eb:f9:22:
                    49:a0:bb:11:0e:fd:06:16:f3:44:20:a1:29:d9:62:
                    42:16:a7:09:b3:b1:11:7e:05:00:45:14:3d:c1:e7:
                    cc:35:7b:b9:19:cd:cf:73:ee:9f:65:e0:4c:ad:1d:
                    99:bc:ca:f0:4d:0f:33:69:37:00:ff:02:ae:6c:19:
                    d3:2a:11:81:b8:a6:e1:34:99:7b:4d:e2:14:b1:7c:
                    a4:e3:1f:2f:88:e2:84:42:cb:21:71:3b:fb:b2:07:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:BF:C4:37:FE:C7:FD:1B:80:6B:B9:CA:86:CE:C9:CE:B3:E5:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/65822779-0e82-3c50-81dd-d3a6ad85ec06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:85:eb:90:37:70:59:3c:3b:05:2e:5b:e6:4e:db:c7:49:e8:
         ec:38:99:3b:fd:0b:be:fd:a4:0d:7d:a4:81:6d:4f:29:74:17:
         1e:09:01:0b:bc:e3:16:5f:f4:79:60:29:ae:a5:3d:b9:cc:2c:
         45:4e:98:9f:c3:26:11:b0:b5:ef:0a:ac:c8:59:35:df:06:8a:
         af:e2:bb:4e:b3:51:ca:08:e7:36:77:fa:e8:61:e8:7c:b6:06:
         be:16:f0:99:6b:f7:fe:06:b5:ed:95:88:f9:35:f2:be:c5:4a:
         b2:ee:67:32:6f:b7:01:2c:4d:fd:3b:f6:9c:b1:e0:19:8e:bd:
         dd:e4:b3:20:68:7e:f4:35:3d:5b:d4:1a:b5:5e:40:57:1e:8d:
         0f:5c:33:5c:33:20:95:e2:3d:cc:d8:c3:e4:3b:a0:a4:c3:b4:
         90:66:96:27:0e:ca:32:4a:7e:fd:8a:d7:de:b7:cd:4e:b0:b4:
         7e:bd:88:b4:c1:5b:2e:56:4e:16:81:21:3e:74:34:48:c4:51:
         c3:d4:a7:db:3c:43:07:27:a4:c9:22:1f:2b:10:f8:dd:d8:2a:
         f5:b6:55:6f:e9:f2:26:6e:db:0b:07:16:f3:2b:10:6c:53:2f:
         4a:10:64:65:7e:cb:78:31:a3:e0:91:26:73:01:52:74:9e:76:
         6d:3e:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:22 2025 by rpki-client