Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e876d6cd-14cf-3fc4-9ce9-a9e9cd201d1e.roa
File:                     e876d6cd-14cf-3fc4-9ce9-a9e9cd201d1e.roa (raw, json)
Hash identifier:          zT9jhlOYLCQDm59hqMRhA9iwkVlmf0+tJYQPa0F6ENE=
Subject key identifier:   FA:66:F0:3B:0E:18:52:97:82:8B:0D:1E:C9:C9:05:AD:38:E8:B6:A2
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F43285848B090AF71B84E6759DF711400
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e876d6cd-14cf-3fc4-9ce9-a9e9cd201d1e.roa
Signing time:             Tue 28 Jan 2025 02:00:39 +0000
ROA not before:           Tue 28 Jan 2025 02:00:39 +0000
ROA not after:            Mon 28 Apr 2025 01:00:39 +0000
asID:                     3477
IP address blocks:        2610:20:8000::/35 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b0:90:af:71:b8:4e:67:59:df:71:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Jan 28 02:00:39 2025 GMT
            Not After : Apr 28 01:00:39 2025 GMT
        Subject: CN=b2969a77-d108-4017-b58a-be097dad68a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:5b:cc:d2:95:7f:7a:06:17:5c:90:da:0b:
                    17:26:26:e8:03:fd:19:38:ac:19:5e:18:41:62:7e:
                    07:f5:f9:1f:ea:18:67:e1:4a:c6:8c:fb:87:df:a4:
                    43:e4:a7:da:ce:2e:a7:a3:95:d5:ce:7f:b8:06:87:
                    f5:48:43:1c:59:5b:e2:95:1f:f5:2c:e1:c3:de:02:
                    91:cc:26:0d:b5:b4:27:4e:06:1b:1a:7c:6c:01:21:
                    c9:fd:25:13:28:15:72:73:bd:d4:df:ec:13:b4:9f:
                    fb:51:92:0a:9c:f2:ac:ed:d0:00:bd:4d:df:39:f3:
                    aa:9c:7b:3f:50:b9:9e:a4:3f:02:d8:f0:0c:a2:90:
                    28:53:6a:eb:21:d9:68:7c:0a:54:5e:bb:a4:12:80:
                    0c:66:0a:0e:3b:4c:37:b1:56:77:bf:c4:cf:e5:b9:
                    52:50:10:ac:ed:3b:6c:5a:80:2f:1c:23:3a:da:e9:
                    84:b6:2e:2a:f5:4c:2a:f8:21:12:8b:fb:3f:a6:36:
                    6d:46:ff:70:72:7c:32:d7:9f:1f:e3:40:4e:a7:19:
                    f5:7b:30:ad:e8:93:42:12:b2:22:5f:7c:dc:09:b7:
                    fb:d7:48:dc:10:21:67:6a:ce:e7:a1:95:b0:3f:62:
                    e1:92:41:fb:b0:7f:5f:4d:29:83:e0:91:e1:61:fa:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:66:F0:3B:0E:18:52:97:82:8B:0D:1E:C9:C9:05:AD:38:E8:B6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/e876d6cd-14cf-3fc4-9ce9-a9e9cd201d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:27:cc:f0:10:1e:30:42:a5:c9:71:12:a1:3e:4e:a6:7d:16:
         b8:50:21:16:ab:0b:40:97:b8:4c:7d:9d:82:79:55:7a:41:af:
         5d:bd:02:b6:4c:77:a1:59:11:e2:a0:dc:7b:36:7b:8b:5d:1b:
         7d:c5:d9:4f:ae:d3:a7:c2:f0:f3:c2:a2:10:2b:f6:65:a1:49:
         65:7e:78:04:0e:66:99:af:4a:e3:3c:59:77:ae:d7:bd:0c:06:
         49:60:99:e1:28:ba:e5:88:03:f4:58:d5:53:b2:ef:ad:23:d1:
         07:79:68:bd:ab:98:df:33:0d:36:9a:87:1c:5b:84:86:98:1a:
         dc:83:df:e9:79:de:81:56:24:57:a5:05:35:e0:e5:f0:48:f6:
         1a:74:5c:41:35:c0:12:7d:46:67:73:b7:76:16:3d:50:f5:e0:
         d4:0f:09:29:32:af:be:6e:eb:20:98:c7:bf:e0:f0:ef:8f:fc:
         e1:11:74:9b:de:49:4c:9c:42:f4:ea:d1:88:c5:22:10:3d:c7:
         1a:8f:f4:0a:29:68:31:0e:05:64:92:66:e8:93:36:bc:24:44:
         1e:25:62:30:09:6f:49:81:70:c3:04:18:de:7b:c5:b8:a9:6a:
         5b:49:d8:a5:6d:bb:c3:9e:cd:00:dc:47:1a:9c:15:c6:ab:33:
         bc:f4:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:46 2025 by rpki-client