Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad532ff9-a700-3f2b-8f78-49b6bf22d97b.roa
File:                     ad532ff9-a700-3f2b-8f78-49b6bf22d97b.roa (raw, json)
Hash identifier:          vRuHKozP9ffC7ggXwprOHD6S4IgTQCgTDax+5WLb8zE=
Subject key identifier:   38:F2:89:60:76:89:42:EC:8B:1B:E1:5F:6C:6F:5E:97:F3:AE:D6:3B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5601B19888C29453D210780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad532ff9-a700-3f2b-8f78-49b6bf22d97b.roa
Signing time:             Tue 04 Feb 2025 12:54:46 +0000
ROA not before:           Tue 04 Feb 2025 12:54:46 +0000
ROA not after:            Mon 05 May 2025 11:54:46 +0000
asID:                     30036
IP address blocks:        2604:2d80:ba00::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:60:1b:19:88:8c:29:45:3d:21:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:54:46 2025 GMT
            Not After : May  5 11:54:46 2025 GMT
        Subject: CN=672cd2b3-74e0-40eb-a025-faf6a5bacd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:a6:4e:70:75:2b:30:64:5e:9d:30:e6:13:
                    b6:4f:ac:ef:00:b9:78:d7:dc:89:b1:34:53:21:ba:
                    c8:08:88:af:48:4e:0d:93:73:51:2c:db:d4:5d:7e:
                    44:3a:fc:3e:d5:88:19:77:26:3b:9d:ef:01:9e:a0:
                    2a:8b:b1:cb:33:9b:36:d0:92:83:82:fb:39:62:21:
                    9c:75:3e:96:74:82:47:92:48:19:02:a1:34:4b:88:
                    79:96:71:97:66:d4:6c:c2:30:dd:09:2b:64:98:d9:
                    b1:7c:5c:dc:94:43:ae:85:17:09:34:ba:da:23:2f:
                    52:74:65:56:aa:c4:6f:93:63:d3:7e:1f:bf:e5:43:
                    7d:a5:a5:2e:6e:6f:7d:ee:d9:9b:7a:8a:db:00:80:
                    35:f7:54:ac:e0:75:62:bb:27:29:d1:2f:30:cd:c0:
                    b2:b9:54:a4:04:da:81:2b:53:19:59:90:38:8a:4d:
                    ce:77:6d:d4:21:f4:2a:06:c6:2a:c5:e5:cf:f5:0d:
                    cd:50:2c:98:fa:07:0f:f6:e9:f8:f6:0c:4e:ef:8f:
                    a0:fd:40:6c:7a:6d:f3:c7:34:e8:54:e6:1e:90:bd:
                    9f:3f:e3:a5:d5:47:13:62:96:bf:a8:18:da:ee:ea:
                    0c:6a:a1:18:15:07:a8:b7:f9:11:66:2d:60:24:28:
                    4b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F2:89:60:76:89:42:EC:8B:1B:E1:5F:6C:6F:5E:97:F3:AE:D6:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad532ff9-a700-3f2b-8f78-49b6bf22d97b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ba00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c5:bf:d5:72:c8:f0:96:3d:72:1e:b3:d0:e7:f7:d1:06:12:
         fb:91:80:a0:a8:9c:d7:38:f8:77:1c:09:8e:f9:25:fd:dd:99:
         61:f8:55:e8:64:74:92:67:60:b4:f5:87:97:d6:35:64:38:6f:
         f2:57:96:d4:ce:f8:ea:2a:6b:82:8b:9d:d3:bf:68:62:55:6a:
         30:f6:0a:aa:ee:48:c7:cd:c3:0c:00:06:4f:8b:d7:25:99:97:
         af:6c:23:d3:6b:19:cd:cc:d9:37:c6:39:a3:6b:66:b7:0e:ec:
         fc:06:57:bd:70:51:52:83:ba:d7:86:74:a9:1b:1b:38:66:ae:
         4b:1f:5a:5e:df:0b:83:73:f8:08:b5:e2:64:11:eb:7a:d5:ff:
         9e:7d:a3:cf:ee:82:97:05:74:08:c7:03:3c:b9:22:43:bb:b3:
         bb:fe:36:08:72:8e:ba:b9:0a:00:13:07:58:46:1c:07:be:dc:
         d5:90:10:65:e1:7a:2e:11:54:0d:80:21:70:26:53:a2:20:17:
         e7:e3:61:81:2f:4a:5f:70:ed:d5:de:3d:99:10:15:af:2f:c8:
         42:36:5a:86:1b:94:25:a5:c8:e6:65:72:fc:4b:b4:ab:a1:ad:
         23:07:8f:fc:52:ad:c1:74:de:d8:a1:23:e9:38:27:ac:a3:ec:
         dd:2f:4f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:15 2025 by rpki-client