Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/896b036b-108b-332b-bc99-80c95a5b6278.roa
File:                     896b036b-108b-332b-bc99-80c95a5b6278.roa (raw, json)
Hash identifier:          S6HD4qUpnCkkpY5t2wgbq20DhWJ+hfAFcYd92objMXM=
Subject key identifier:   11:B5:A0:F0:16:27:B2:15:43:6A:D6:59:ED:C8:47:87:BC:35:B4:57
Certificate issuer:       /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial:       010D0C9F432858489075F4E14832508A26256B80
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/896b036b-108b-332b-bc99-80c95a5b6278.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     400587
IP address blocks:        2602:fb95::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:f4:e1:48:32:50:8a:26:25:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=88a8f1e1-d236-45a5-88a7-e54d73a934ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:53:f9:9d:cf:b3:b7:2a:dc:f9:6a:da:61:
                    5a:13:7e:15:58:7c:00:1d:ed:1e:b3:57:ba:19:68:
                    77:90:1d:4b:05:b5:a6:59:cb:d7:af:5b:3f:ab:51:
                    46:85:74:02:25:e1:71:f9:cc:8e:48:45:bd:04:14:
                    61:fa:05:5f:82:24:c8:97:b9:9c:ac:97:9c:bd:48:
                    0a:1c:68:6a:bb:93:88:c3:81:1b:4c:0d:88:1e:70:
                    c6:92:f0:19:29:89:03:ef:93:85:37:f9:9d:2a:3b:
                    a3:4e:82:35:0f:73:1f:5f:11:c9:ab:4d:f3:49:40:
                    93:79:58:99:ff:5f:49:bd:02:ce:7b:88:3f:36:96:
                    88:18:eb:54:f6:96:b7:0f:36:8b:d2:4f:6d:59:fd:
                    30:90:bb:20:0c:5a:d8:d5:28:91:d9:22:54:8d:5c:
                    86:10:67:71:27:88:35:2f:40:e9:a7:05:49:9f:ac:
                    03:1b:40:12:fb:d6:da:be:3b:df:73:05:77:cc:e3:
                    a7:1c:a0:a9:4a:99:86:1d:d0:36:01:a1:9b:5f:57:
                    18:e2:76:74:d6:49:75:ea:1c:06:f2:2c:81:19:ba:
                    b7:94:88:b4:83:9c:52:9b:34:17:31:23:a4:cc:0d:
                    4a:cc:6e:c4:80:90:31:80:a8:a8:ab:b0:d7:79:4b:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B5:A0:F0:16:27:B2:15:43:6A:D6:59:ED:C8:47:87:BC:35:B4:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/896b036b-108b-332b-bc99-80c95a5b6278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl

            X509v3 Authority Key Identifier:
                keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb95::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1f:b3:d8:fd:85:4c:bc:d6:71:82:18:83:2e:59:d1:03:99:
         0a:89:a4:d2:43:7c:5f:93:30:d0:9f:3e:f9:b8:f2:c6:fe:eb:
         2b:7b:bb:1f:e7:9d:8d:54:2e:c2:3b:d6:5f:59:4f:b8:c4:5e:
         9e:04:29:29:c6:8e:a5:e1:82:f1:63:67:91:5d:a3:58:97:89:
         7d:d1:ae:ac:8e:1a:1c:d2:45:b1:3a:80:03:ad:61:cc:a6:f8:
         a4:bc:2c:14:65:3f:83:34:55:b9:8a:a0:07:92:da:dc:8b:ce:
         98:26:64:56:50:63:98:49:9c:59:d2:99:78:e0:01:98:18:a2:
         e4:31:ab:fb:fa:de:e0:e9:0d:f2:47:40:c4:12:0f:f4:22:05:
         af:ed:3c:3e:11:c4:7f:68:9e:fe:2e:05:ba:27:f2:b1:42:e1:
         6c:d3:29:d3:77:b4:79:23:14:61:ef:32:7b:48:b7:5e:08:7e:
         47:a0:aa:af:e5:16:01:17:2c:a6:ac:a7:f0:1d:0c:78:3f:27:
         82:d5:8a:a0:92:3b:ca:6c:a1:1c:c2:be:dd:d8:12:d0:b2:37:
         32:4b:13:67:f1:fe:a7:52:d1:a4:83:7f:74:13:7c:79:13:74:
         e7:9f:f0:a6:0b:27:aa:41:c1:4c:f7:87:4b:c0:c5:66:78:6e:
         99:d5:25:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:42 2025 by rpki-client