Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa
File:                     df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa (raw, json)
Hash identifier:          H4LfzdJV/+SLy1BW3HjNqGIhwR4h/2tkGJ8gP5JSz3A=
Subject key identifier:   32:91:DF:FE:0B:2A:60:92:62:9D:53:22:ED:BD:E0:8B:39:5B:47:CA
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F432858491A018245A33DD4842A9F6D40
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa
Signing time:             Thu 06 Mar 2025 20:27:53 +0000
ROA not before:           Thu 06 Mar 2025 20:27:53 +0000
ROA not after:            Wed 04 Jun 2025 19:27:53 +0000
asID:                     0
IP address blocks:        2602:fd10:900::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:01:82:45:a3:3d:d4:84:2a:9f:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Mar  6 20:27:53 2025 GMT
            Not After : Jun  4 19:27:53 2025 GMT
        Subject: CN=dc7aa7e5-fd29-4d3e-935c-0121025347ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:ce:c0:6c:7a:d6:c9:a5:43:32:4a:3f:08:
                    a0:d3:23:db:cb:5b:f9:cf:17:8f:42:60:b9:24:bb:
                    e9:ce:b3:27:de:00:53:07:5f:7f:bb:d0:d9:e5:31:
                    bc:16:b2:94:f4:80:26:04:9f:37:ca:be:2f:20:77:
                    66:a0:35:e2:15:eb:4f:14:a4:0d:77:7a:56:60:48:
                    13:fa:3a:ce:6f:af:4b:9b:94:9c:e1:fe:2f:2b:e7:
                    3f:9c:bc:dd:b6:9b:26:d4:67:49:3e:a7:c5:37:7a:
                    68:44:78:6d:a3:e4:b7:7e:f5:25:40:e5:81:e9:d8:
                    e3:4f:04:5c:c7:35:38:b6:74:5e:24:56:ff:cf:ce:
                    3c:e2:d9:8b:7d:4b:af:59:05:84:1b:b2:13:43:59:
                    a9:be:c7:0e:c2:f5:37:5b:79:d8:60:21:7b:91:d2:
                    aa:f2:38:36:cf:c8:be:b7:44:3b:3b:bf:9c:91:db:
                    01:53:4a:ea:07:c4:34:32:69:ab:7a:50:e2:ba:86:
                    90:7e:81:f8:78:d3:0e:d4:8e:6d:63:a5:73:ac:71:
                    8c:ec:57:85:85:53:4c:6d:a2:91:a4:27:a8:05:38:
                    c0:a5:3a:72:a0:80:63:6c:40:3d:e1:7d:53:ed:5f:
                    c5:ce:84:14:b7:87:48:8d:54:7d:b1:f2:64:12:10:
                    c8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:91:DF:FE:0B:2A:60:92:62:9D:53:22:ED:BD:E0:8B:39:5B:47:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b1:43:a5:b8:3f:81:eb:0a:89:73:53:e2:f9:dd:c8:4f:66:
         71:aa:37:47:d4:14:15:c4:c1:fc:83:39:64:c3:6a:d4:04:d5:
         92:8b:71:5e:b8:b7:7e:0a:06:26:27:31:a4:38:ee:2a:64:0d:
         79:5d:4c:28:f5:43:ed:61:34:41:a5:88:2f:9e:21:18:6f:2b:
         74:f3:00:d8:7b:57:0b:8a:ee:4b:2a:12:56:cc:f9:29:e6:53:
         2c:5f:a7:28:87:58:7f:76:bc:f6:64:45:bd:ca:16:d4:aa:4c:
         66:1d:66:0f:d0:a3:b1:99:23:c9:40:ba:42:a8:c9:d8:80:b3:
         8a:1f:3c:e6:dc:42:51:c2:67:92:c8:45:dd:df:d8:65:d3:41:
         2b:60:9a:43:d7:91:79:aa:94:88:a4:f3:39:3c:75:1d:23:6f:
         26:ae:82:22:c2:d4:e0:09:e8:b6:08:7f:60:db:28:ac:9e:15:
         1f:83:ea:6a:1a:6b:4b:62:cb:7b:14:43:7f:c5:a4:dc:4f:da:
         ad:f9:dc:a1:20:ee:28:33:ee:7d:1f:f6:3e:e9:eb:58:4b:59:
         58:92:b0:35:9f:7a:6f:d7:b0:db:f6:83:86:07:3f:de:bc:3c:
         66:c1:15:cd:d9:a2:d2:2a:11:53:04:4d:27:44:b8:6f:88:fc:
         6e:d5:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:41 2025 by rpki-client