Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e125deca-71dc-3c9f-9a54-ffbf0a785086.roa
File:                     e125deca-71dc-3c9f-9a54-ffbf0a785086.roa (raw, json)
Hash identifier:          EYl+YyVjje3f1cEY03BhBPfS1J/vde1KQ4YpqU0RAjo=
Subject key identifier:   4B:F8:42:93:FF:87:76:45:40:35:CA:86:2C:39:CE:25:18:23:8B:1C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5782B307035056F439BC380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e125deca-71dc-3c9f-9a54-ffbf0a785086.roa
Signing time:             Tue 04 Feb 2025 13:43:15 +0000
ROA not before:           Tue 04 Feb 2025 13:43:15 +0000
ROA not after:            Mon 05 May 2025 12:43:15 +0000
asID:                     30036
IP address blocks:        2604:2d80:7480::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:78:2b:30:70:35:05:6f:43:9b:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:43:15 2025 GMT
            Not After : May  5 12:43:15 2025 GMT
        Subject: CN=083d4b86-4dc5-4624-8df5-63c31d373eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:19:51:72:23:a4:96:9d:f2:de:52:0d:1f:
                    6b:83:86:0b:35:c1:5e:78:8b:71:90:44:8f:cc:03:
                    68:2d:d7:6b:7d:76:82:21:e4:d5:93:f0:2f:bb:0e:
                    f1:54:c6:b0:f8:d7:bd:5f:fd:76:ed:90:52:b1:76:
                    66:8e:65:48:82:d6:22:69:37:8c:77:54:95:0a:78:
                    1c:b5:50:04:86:4a:a4:1a:ab:09:86:84:ca:0d:42:
                    ba:69:34:86:74:11:2a:b8:c6:66:c3:d5:01:e1:72:
                    70:4c:85:4d:05:bd:20:b8:7d:c7:31:c6:fe:cf:50:
                    cd:ba:8c:1d:bc:a4:01:e7:58:6a:c6:1e:ab:0f:0b:
                    70:ff:17:4c:37:e0:b6:c2:cc:86:ca:c6:1c:dc:90:
                    fa:b7:11:1b:4b:60:66:c5:c6:2f:7d:6c:aa:ab:7d:
                    e3:45:51:d7:6a:89:34:f8:cc:90:d3:13:0c:29:26:
                    6a:05:66:07:9b:32:13:d9:67:97:83:44:30:7b:1b:
                    ea:c2:7a:ab:92:0d:9c:6f:68:e6:17:99:df:c1:22:
                    76:fc:7d:2f:c2:ab:11:62:92:39:6b:60:89:f9:85:
                    2e:8c:d4:2a:c4:47:6c:36:d9:87:fd:1a:33:c6:d8:
                    7e:c1:4b:ff:9e:79:45:9b:3b:bd:ea:f3:c8:52:68:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F8:42:93:FF:87:76:45:40:35:CA:86:2C:39:CE:25:18:23:8B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e125deca-71dc-3c9f-9a54-ffbf0a785086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:02:71:e3:0f:08:b9:9b:e8:98:b8:b1:eb:50:d1:23:d1:56:
         4c:7c:4d:fc:fb:c2:1d:b7:82:f3:7f:62:5c:01:ea:5f:4c:21:
         b9:7d:72:56:df:a3:d2:6a:6d:a0:3e:af:4c:69:c7:24:07:45:
         29:e5:47:32:02:31:48:7b:4e:1a:68:6b:d9:70:ba:4d:a9:78:
         46:18:ec:02:98:1f:2c:07:4b:48:47:72:b0:c8:62:3b:26:ad:
         a9:f5:d0:34:f4:77:d2:b6:4c:46:89:e4:a6:f2:c0:a5:50:c1:
         36:28:f3:b9:60:76:2b:58:48:39:43:d2:96:48:69:f4:56:16:
         a1:02:37:89:04:e4:d8:ad:26:fb:9f:1a:6c:78:ae:3d:14:46:
         1c:d5:ab:c4:49:0f:52:7a:1a:7f:ce:e5:d3:9d:48:96:a9:60:
         bd:64:b5:48:5f:36:13:fa:5d:56:8a:57:2c:47:a8:dc:3f:54:
         a1:ad:a8:7e:59:75:8b:52:60:a1:9a:66:0f:41:cd:e6:27:36:
         13:df:33:1c:f1:46:29:26:fc:87:16:f8:24:50:91:7e:7c:8f:
         fb:5d:8e:93:d7:a0:b9:4b:f1:46:7f:e6:71:1c:94:fb:49:70:
         90:ff:1d:1c:a7:d9:3a:39:5b:0e:e5:a4:96:f3:74:5e:e9:12:
         cd:25:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:09 2025 by rpki-client