Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa
File:                     308fdebd-55e3-3c5a-99b7-a06760224d7a.roa (raw, json)
Hash identifier:          NtDfatWoRlPYT4+DEIw5u9vDb5x0sLfuuGg62vSJl+s=
Subject key identifier:   FA:D8:9F:C3:F4:9F:CF:13:D0:CF:18:0C:27:A9:8F:9D:80:02:D7:F4
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584902EC0EF1171A33E6D8DB4000
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     400097
IP address blocks:        2606:3d40:5d01::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:0e:f1:17:1a:33:e6:d8:db:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=8c4b073b-fa97-4d46-892e-b45cb33bc63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:e3:a7:d3:55:ab:78:4c:c1:91:9a:6f:ae:
                    95:34:07:1d:12:55:2b:75:81:3a:90:bf:f4:8e:1e:
                    21:08:84:ec:ba:95:c5:cc:49:ff:af:54:64:64:f3:
                    74:ba:28:3c:87:dc:bb:57:9d:65:2f:38:a1:d4:41:
                    9a:37:f9:29:5f:5b:86:2e:50:fa:a9:aa:d6:1c:b5:
                    a8:cc:bc:ea:c6:05:8a:ec:8b:4a:ac:bc:d5:64:a4:
                    a7:57:74:04:c4:a0:71:7d:69:d5:83:8c:41:53:52:
                    9a:e0:43:ff:2e:a2:f2:0d:92:2c:38:40:42:f8:12:
                    5b:82:c3:24:f9:5b:57:41:fb:69:d4:d8:e4:09:cb:
                    36:a9:41:84:fd:f2:88:c1:dc:0b:5a:d7:37:bb:4a:
                    35:7b:58:8e:74:45:13:27:e7:97:33:09:a2:2e:31:
                    b3:3a:ec:fb:7d:56:ea:28:05:e4:46:93:5a:93:40:
                    66:20:98:66:fc:4a:a2:ca:c3:0e:2d:fa:3a:0f:90:
                    ec:a1:0b:84:89:16:11:5a:75:c9:08:e6:bb:28:23:
                    52:4e:55:cf:ae:f9:6b:0b:b2:e9:20:92:cf:58:e5:
                    e7:8a:26:e3:4c:ab:48:88:71:a9:01:19:a8:fe:d3:
                    ab:b7:0f:70:2c:fe:5d:36:65:09:68:90:15:ea:fd:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:9F:C3:F4:9F:CF:13:D0:CF:18:0C:27:A9:8F:9D:80:02:D7:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:5d01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f2:6b:e9:14:c3:1c:55:90:41:4e:b8:e0:36:f0:51:47:c4:
         90:d5:7e:f6:19:bc:12:0b:6d:79:b3:1f:22:3f:4f:7b:09:06:
         ae:e1:0f:6a:89:d7:da:d3:b3:e2:9b:df:1e:17:b2:fb:41:b1:
         ce:b4:2b:f7:ca:0a:76:f0:37:d1:d0:2a:60:c4:7f:d1:3e:09:
         33:39:6f:91:9b:d2:f6:f7:9e:90:f5:9a:35:b3:ce:38:0d:71:
         e8:3e:a9:37:0b:73:84:8b:15:36:f0:75:9f:a3:65:4d:e8:bf:
         7d:fc:d5:c1:b3:4b:e4:01:1a:85:33:72:06:87:ab:04:e6:7a:
         0f:a2:48:1a:bb:70:5d:82:d8:b7:32:ae:4d:7a:25:0c:b5:3a:
         cf:4d:b4:af:07:f1:87:d4:43:c3:f2:a3:7a:28:74:d7:38:38:
         0c:66:e8:75:3a:4e:cf:31:88:33:60:ff:cf:51:8b:01:70:c8:
         0f:77:96:a7:dd:e5:a5:69:cd:db:b1:28:b7:ae:c6:9e:58:98:
         97:f0:92:8d:b3:cb:c4:cd:5f:4e:9f:cf:22:d6:f4:b9:dc:78:
         66:8d:27:5c:93:63:5b:de:e4:64:a1:4b:45:58:d1:7b:bc:18:
         87:74:f7:8b:f0:4c:95:69:2b:30:45:83:fd:8b:63:d8:52:16:
         07:5c:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:48 2025 by rpki-client