Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c18aa17c-82c8-338d-8d10-ff6fb470b981.roa
File:                     c18aa17c-82c8-338d-8d10-ff6fb470b981.roa (raw, json)
Hash identifier:          dPtjU72wW8zrANtvpFfWSF6Ynw8rTMOHSofCCG9HL5M=
Subject key identifier:   81:A6:6D:8D:4C:25:FE:47:8D:61:5F:12:59:87:FF:15:C3:ED:D7:AE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C2656A63F8799DA59A12F140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c18aa17c-82c8-338d-8d10-ff6fb470b981.roa
Signing time:             Mon 03 Feb 2025 11:18:03 +0000
ROA not before:           Mon 03 Feb 2025 11:18:03 +0000
ROA not after:            Sun 04 May 2025 10:18:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:5e80::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:65:6a:63:f8:79:9d:a5:9a:12:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:18:03 2025 GMT
            Not After : May  4 10:18:03 2025 GMT
        Subject: CN=7d8f97e2-ddd6-42e3-8460-1cbd7ed66f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:19:68:5e:04:10:76:7c:00:6d:a3:94:3b:81:
                    ed:78:2b:d2:6f:87:4e:82:fc:4e:9d:3c:29:fb:3c:
                    d0:c2:02:eb:c9:a0:3a:e9:1b:8b:df:50:36:e3:f9:
                    8b:d3:50:c7:60:3f:78:c7:de:73:73:5a:0d:21:ca:
                    cb:5e:de:f1:29:7c:d6:e4:7c:7f:ac:6e:cd:95:4f:
                    9a:bd:48:88:b8:24:84:e1:5e:95:b9:b4:cb:a7:b8:
                    c9:73:9f:80:31:2d:20:7e:dc:cf:55:20:66:93:97:
                    8c:d5:e8:f1:8b:23:cd:21:9c:5a:11:6b:25:a3:db:
                    0e:7c:5b:be:9f:43:c2:c2:91:2d:e5:be:a2:74:d1:
                    b1:ac:35:bd:9a:32:99:91:a4:23:18:a6:0a:56:d0:
                    48:ad:39:6e:ab:e8:57:19:8e:59:c7:59:3b:f5:95:
                    6c:78:f5:8d:48:35:10:fe:f5:48:92:35:db:b8:7b:
                    37:16:84:d2:97:fe:27:00:22:a6:ed:b5:1e:db:bf:
                    73:9f:a2:14:0d:f4:a2:35:34:fc:d8:fb:11:81:a8:
                    78:e6:ad:e4:b4:3a:62:51:1b:1d:1d:cd:51:cd:80:
                    7f:8d:b0:7e:62:49:cb:c9:cb:9d:2e:9a:06:db:bc:
                    ef:fa:57:44:73:af:2c:f2:a4:7a:75:53:01:3f:4a:
                    1c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A6:6D:8D:4C:25:FE:47:8D:61:5F:12:59:87:FF:15:C3:ED:D7:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c18aa17c-82c8-338d-8d10-ff6fb470b981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:3c:9a:c4:9a:cb:a8:c5:0b:30:62:51:56:35:40:91:42:66:
         ee:50:0e:f5:a3:96:e9:11:a7:5d:10:60:85:a5:4f:df:1b:50:
         72:56:5c:40:bc:a3:10:43:66:65:27:c7:3f:94:54:90:b4:e3:
         a6:18:0c:59:92:ee:81:ea:90:64:c9:f0:06:13:60:05:6c:15:
         ed:07:a8:00:95:83:92:56:2f:da:8a:8b:45:68:9d:e7:59:c6:
         d0:5a:67:a3:88:cb:11:61:ad:cd:e9:dc:66:97:24:06:63:95:
         89:2a:c7:61:08:99:03:a8:75:36:2e:c0:e8:ae:be:a9:2a:fb:
         c0:d6:d3:52:ad:e7:a3:07:2c:e7:ca:b8:77:00:ed:d8:df:07:
         52:25:31:80:16:fa:35:6b:00:4d:cd:08:36:ad:7e:5f:8c:bb:
         f2:be:ca:fa:36:f5:1e:6f:ff:af:9e:3d:e3:f5:da:71:d0:7f:
         f1:f7:54:ce:8f:26:d1:4b:bd:de:8f:ab:d4:26:27:b2:f3:19:
         09:61:f9:25:41:35:ba:7c:23:56:03:33:45:bd:18:5b:13:80:
         c1:58:04:8f:cf:80:06:6a:92:09:f6:ee:46:81:9d:a4:a9:5d:
         fa:40:c4:1c:17:6f:4f:5d:21:29:cc:3e:3f:31:32:ae:89:ba:
         53:b4:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:14 2025 by rpki-client