Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa
File:                     e2ece0bd-96db-3f31-969b-d90af59c4720.roa (raw, json)
Hash identifier:          UqHqh90snx5CEz7SXBl0bFvxqMLNi+/4WhACNRfP+Vw=
Subject key identifier:   ED:4C:A0:39:D9:D5:63:24:73:74:92:81:E5:F2:F6:71:CF:0C:7C:B4
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584929E3C7B7C024EBAD35CFD180
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     3477
IP address blocks:        2601:a000::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:c7:b7:c0:24:eb:ad:35:cf:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=5a540f58-73ba-4caa-a471-e8aa7d3a834d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:4d:6b:12:e4:b9:69:5a:38:a4:ee:48:d0:
                    13:35:30:d4:c4:9f:44:05:e2:c5:13:10:56:08:db:
                    7f:ba:33:e8:60:5b:52:7e:d3:02:8a:d3:6c:4a:97:
                    d6:0f:90:e8:83:1e:90:68:ce:ea:2d:f6:08:d0:3f:
                    0b:ae:91:b9:45:5c:12:82:f3:6f:13:c6:7d:6c:61:
                    b9:52:7e:b7:28:f5:92:ad:b8:7d:89:d5:35:d2:4a:
                    08:70:da:f6:ae:15:cc:f9:be:17:04:75:4b:13:98:
                    a5:97:bb:91:e5:be:15:35:ff:5e:1f:d9:0e:4c:0e:
                    80:83:10:d1:cc:14:f5:bc:66:9a:9c:11:89:ff:e3:
                    80:ae:11:d7:87:62:40:2e:cf:e3:31:94:67:cc:4d:
                    d8:18:41:29:9d:56:32:97:78:94:fc:c2:3a:da:e6:
                    c1:6d:e3:fc:50:c2:09:45:dd:af:4a:93:b5:3e:c4:
                    72:60:7a:ab:88:f9:7c:bb:81:f0:e7:8e:fc:e9:62:
                    5b:61:24:c2:c3:01:44:24:89:45:2f:61:16:0c:63:
                    58:a9:3c:02:f1:f4:57:b2:1b:e9:80:71:e0:81:7e:
                    08:2d:95:79:b6:9c:2b:74:19:2b:16:45:3a:e0:a3:
                    5b:00:7c:1c:f3:48:f4:34:cb:bf:32:f4:50:ed:51:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4C:A0:39:D9:D5:63:24:73:74:92:81:E5:F2:F6:71:CF:0C:7C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e2ece0bd-96db-3f31-969b-d90af59c4720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:73:d5:3e:3b:8a:be:2f:fc:ba:5e:7f:77:f7:5d:b3:e3:
         26:b8:73:63:0c:ee:11:44:e1:9f:df:6c:70:60:b2:58:16:b5:
         c8:10:e9:80:bc:6f:3e:95:a6:60:64:bc:79:9e:e4:7f:f6:4d:
         a8:82:a0:10:3c:9b:35:5e:cc:87:0d:2a:a3:f6:93:5c:0a:08:
         e3:2e:78:e3:41:4f:4e:f5:ae:48:1a:06:b1:55:49:90:10:10:
         c7:8a:42:36:d5:d4:48:38:a8:87:bc:fa:5d:51:ed:b9:9e:ac:
         e4:d2:ff:18:af:d1:98:be:06:31:c0:c1:77:f4:1e:13:7f:94:
         6f:af:bb:68:e4:28:13:29:42:bd:a8:eb:51:4a:45:0b:15:e2:
         db:11:16:f4:27:c9:9a:13:c9:98:82:46:b0:c7:04:f5:8d:17:
         f0:66:4c:20:6d:8d:f8:91:37:0f:e7:90:85:c9:31:33:24:20:
         9a:e0:d3:16:61:55:04:5f:e3:c1:8d:4c:bf:32:55:b9:17:d9:
         8c:26:05:16:71:5c:b7:df:f8:64:03:14:b8:ed:41:c0:20:68:
         2e:a2:b8:89:4a:e9:37:37:06:0e:cb:1a:d6:ed:a7:76:00:74:
         90:a2:77:ed:7c:eb:10:e0:c8:bb:78:8a:9b:16:bd:86:7c:99:
         24:68:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:39 2025 by rpki-client