Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d6b1f8-79dc-3348-b036-ece241de04af.roa
File:                     f9d6b1f8-79dc-3348-b036-ece241de04af.roa (raw, json)
Hash identifier:          PF5LcJvcmjkIFddwlvz2TV9ne2CWpi0DSybwB0zDXW8=
Subject key identifier:   D8:DD:5B:5F:C8:D4:45:00:9C:F4:70:39:2B:49:3E:2E:A7:80:F2:9B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C265D2417D038F30F308F800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d6b1f8-79dc-3348-b036-ece241de04af.roa
Signing time:             Mon 03 Feb 2025 11:18:52 +0000
ROA not before:           Mon 03 Feb 2025 11:18:52 +0000
ROA not after:            Sun 04 May 2025 10:18:52 +0000
asID:                     30036
IP address blocks:        2604:2d80:da80::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:65:d2:41:7d:03:8f:30:f3:08:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:18:52 2025 GMT
            Not After : May  4 10:18:52 2025 GMT
        Subject: CN=8f9965f8-1f2b-46b1-9dbe-843f5997630f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a8:b1:bb:a7:ea:1c:54:66:d5:2a:71:52:d0:
                    8f:fa:ca:08:39:9a:51:15:fb:ea:0c:f1:5d:3b:37:
                    05:34:0e:0c:0e:8a:e1:94:a8:1d:4d:f1:17:0c:94:
                    7e:c5:d5:b8:1f:de:41:e9:ac:c4:17:c7:24:6f:d7:
                    c3:93:78:91:48:f4:bb:06:d5:be:b9:44:a2:e7:f8:
                    53:c0:09:e4:ea:58:5e:cb:90:5c:25:54:6a:9d:17:
                    8b:76:6f:c3:37:01:47:72:e9:de:07:e9:fa:1f:11:
                    8c:8e:89:a3:bd:13:0c:58:8d:04:b6:da:09:eb:02:
                    70:f2:ec:39:e0:44:d1:e8:99:6f:dd:58:95:e0:d4:
                    0b:de:0b:65:95:06:9e:8d:93:1b:8c:a2:21:69:4a:
                    8d:42:0a:dc:dc:52:9d:78:fe:5c:c6:28:02:93:50:
                    f6:46:86:78:ce:5d:9c:51:5e:f6:71:59:ec:58:e1:
                    bf:9d:e3:fb:a4:fd:ef:39:bf:17:f1:6a:5c:da:06:
                    75:5d:f9:b2:36:13:35:28:f7:f5:8a:ec:3c:20:dd:
                    b5:fa:86:b3:d2:b0:d8:93:4b:56:c0:72:40:21:48:
                    8a:9f:6a:36:54:b2:a4:19:7c:6e:ee:28:99:59:d3:
                    66:81:ca:0e:27:bb:93:5d:61:d1:1f:d6:79:97:af:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DD:5B:5F:C8:D4:45:00:9C:F4:70:39:2B:49:3E:2E:A7:80:F2:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d6b1f8-79dc-3348-b036-ece241de04af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:da80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:1b:af:86:b3:18:8a:0c:9e:8d:66:50:d6:72:c7:f5:82:
         9d:80:c6:82:90:9c:2a:1b:5f:59:0b:81:e0:89:cc:de:a5:76:
         4c:7d:aa:87:b6:b4:7e:a6:50:b4:21:ba:bb:99:6b:1a:90:e4:
         ab:3d:4b:78:36:f9:2e:aa:67:db:0b:81:4e:25:09:6f:f0:c4:
         48:f7:76:a1:ca:d4:ca:56:4d:73:90:40:51:5a:bf:b9:f6:fc:
         dd:1b:16:33:9f:fe:cf:22:b1:15:d4:c1:82:a6:d5:11:26:96:
         5a:92:5c:ae:ba:42:77:8f:d3:b2:5d:66:08:6d:f5:48:da:e2:
         ae:a8:7d:04:2a:d0:09:87:ce:49:cc:1d:97:cd:c1:04:2f:9b:
         81:34:ac:5d:07:15:51:32:a0:0e:d2:92:5b:14:a8:b5:14:91:
         64:49:ba:aa:46:1f:7c:0b:a0:e2:34:07:93:82:28:25:fb:da:
         1a:10:9e:19:fd:3a:ed:c9:14:a7:63:5c:ae:4c:7d:ed:0e:85:
         06:39:c1:b0:5d:9e:0b:62:74:46:68:e7:fa:93:67:0c:80:3c:
         f0:63:f2:60:19:e8:52:e2:d4:eb:e6:22:44:ae:9e:0d:67:55:
         1b:1f:f4:1f:c4:cf:39:86:c1:15:be:06:a8:ea:83:3c:56:32:
         55:77:a9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:52 2025 by rpki-client