Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a273edd3-a1c9-35f1-8647-aab34a8dd1d8.roa
File:                     a273edd3-a1c9-35f1-8647-aab34a8dd1d8.roa (raw, json)
Hash identifier:          kPu7rIdtVBKJTM/BbTYLwsrW1GKQVKrpXJjiFiIGz4c=
Subject key identifier:   9C:5A:5E:40:C6:7D:86:95:43:61:CA:BD:75:FA:EF:22:EA:F7:F4:DC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858493B446B86BD6D34ED501CF180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a273edd3-a1c9-35f1-8647-aab34a8dd1d8.roa
Signing time:             Tue 18 Mar 2025 18:24:23 +0000
ROA not before:           Tue 18 Mar 2025 18:24:23 +0000
ROA not after:            Mon 16 Jun 2025 18:24:23 +0000
asID:                     30036
IP address blocks:        2604:2d81::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:44:6b:86:bd:6d:34:ed:50:1c:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 18 18:24:23 2025 GMT
            Not After : Jun 16 18:24:23 2025 GMT
        Subject: CN=5a2ddb8a-9a93-4bf7-a376-459a3a4c46c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:d4:b3:0a:92:51:e2:b3:e1:7c:9d:30:11:
                    71:e7:e7:b4:11:33:c6:54:1d:54:43:63:7d:7f:03:
                    cf:42:10:d9:bc:bc:3d:1d:fd:ae:ce:b0:a5:52:4e:
                    17:06:fb:14:32:bd:9d:20:00:e2:cc:51:68:0b:f2:
                    f8:05:18:4e:fb:8e:92:a1:a5:5e:fe:79:c9:ba:9d:
                    60:44:d3:97:75:90:6f:26:e3:ca:64:90:99:45:46:
                    4b:25:0c:61:26:86:f1:c2:e3:73:2d:43:a7:40:75:
                    03:03:ad:60:a8:e3:00:55:53:6f:57:30:ab:37:19:
                    87:bb:04:d4:54:56:8f:6e:35:c4:8b:a7:88:8a:ab:
                    96:37:c0:37:85:77:b1:bb:16:65:9b:3b:bd:22:e0:
                    64:6e:7c:37:ef:58:91:dd:3c:31:f0:34:72:46:93:
                    0d:39:22:6d:40:e4:06:5d:2c:cd:97:90:27:74:72:
                    bc:1a:4b:56:e4:4f:17:47:64:86:b3:90:1f:2a:63:
                    ce:45:a5:fa:11:92:5e:f9:54:2a:01:72:b3:a7:ff:
                    d1:b8:52:e1:4c:4d:41:93:6e:65:92:26:6e:bb:77:
                    41:d8:54:3b:98:3b:24:55:4a:5a:5c:fe:8f:8a:69:
                    91:03:08:43:52:75:fc:b2:df:87:c2:dd:ec:e6:31:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5A:5E:40:C6:7D:86:95:43:61:CA:BD:75:FA:EF:22:EA:F7:F4:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a273edd3-a1c9-35f1-8647-aab34a8dd1d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:bd:76:bd:c0:69:84:99:f7:40:42:10:29:d9:9e:d6:6b:63:
         fd:5d:2f:3d:23:e8:66:f9:3a:13:6a:4e:cc:52:bb:b5:1f:76:
         c2:08:cb:b4:7e:84:1e:4d:d3:2b:77:9f:ee:e5:b1:5d:90:74:
         8f:08:c9:33:c6:f2:fa:eb:84:9d:69:72:a2:b0:d5:16:9f:0a:
         89:c2:01:87:fe:45:27:8c:75:61:ea:31:04:00:89:aa:a4:3a:
         88:d9:b9:17:44:90:01:4f:56:03:3a:0f:25:8c:61:8a:a2:c9:
         0a:66:61:a7:d6:40:83:68:48:2c:98:8f:93:60:25:1f:39:0d:
         6d:a7:90:ba:4c:31:ff:a6:88:c7:63:62:1f:b9:6b:ad:7e:87:
         f8:d2:54:3b:24:82:72:69:4e:3e:11:af:84:e9:34:c2:ab:8d:
         67:68:01:c7:3b:88:2b:dc:91:75:79:23:47:e7:19:69:79:b7:
         28:45:24:1c:02:29:7c:e9:06:cd:3e:d4:9c:c7:a5:92:37:f9:
         4e:8e:fa:0c:60:5e:a3:76:f9:46:cc:36:f1:1a:f6:93:a7:14:
         28:95:8d:19:8e:d0:79:64:08:24:b5:fd:28:fb:de:ef:25:a9:
         75:41:f5:d7:0e:e6:9a:0e:57:f8:6b:6c:75:37:2f:28:6f:23:
         50:58:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:32 2025 by rpki-client