Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f869cbd8-4b13-3204-a71f-f9f77adaf977.roa
File:                     f869cbd8-4b13-3204-a71f-f9f77adaf977.roa (raw, json)
Hash identifier:          oYMbvcXSgzrO9MfFYVbcMyk7aVxZvb/wr/2dclqxFZw=
Subject key identifier:   60:ED:14:F6:D6:F8:1E:D4:39:5C:B5:43:EE:4A:DF:EC:01:54:BB:9C
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F432858491A01E277ABC5D7BF87E4D660
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f869cbd8-4b13-3204-a71f-f9f77adaf977.roa
Signing time:             Thu 06 Mar 2025 20:28:38 +0000
ROA not before:           Thu 06 Mar 2025 20:28:38 +0000
ROA not after:            Wed 04 Jun 2025 19:28:38 +0000
asID:                     0
IP address blocks:        2602:fd10:c00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:01:e2:77:ab:c5:d7:bf:87:e4:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Mar  6 20:28:38 2025 GMT
            Not After : Jun  4 19:28:38 2025 GMT
        Subject: CN=73d21386-987f-475e-804c-38eb82455d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dc:46:70:5c:3b:c9:67:e3:4d:e0:71:ed:85:
                    61:08:fb:4c:b1:db:00:4e:f8:ca:bc:d9:40:0b:61:
                    ab:b4:f4:81:55:77:8d:aa:a2:03:5e:7f:77:be:b9:
                    b5:b0:0b:2a:c4:25:68:d7:c2:60:ab:c5:c8:6c:cf:
                    ea:43:35:b0:d7:72:73:09:14:6a:5c:33:d4:3b:bf:
                    38:49:e3:f7:23:39:7b:c6:5a:2b:82:e6:1b:73:e4:
                    56:80:bb:15:74:eb:92:e0:76:5e:58:96:bb:5d:2b:
                    96:b5:6d:cd:b9:95:7f:d9:76:c7:0c:d6:6f:88:f4:
                    f3:b8:43:34:48:83:cf:7f:c2:c5:bf:6b:af:12:d6:
                    45:fa:77:2f:26:2f:1b:65:22:89:de:4d:fb:60:e1:
                    32:80:ba:f1:71:c6:91:ec:33:79:23:0a:09:93:c9:
                    06:0f:cd:20:f8:6b:13:b0:39:08:4c:8c:3d:3e:f5:
                    f9:78:07:1c:97:4f:61:2a:a1:a4:3b:b9:6f:97:6e:
                    a7:94:86:1b:ba:32:02:ff:83:93:ab:dc:87:dd:03:
                    74:db:cb:e9:24:d3:f3:5e:ea:72:09:35:cf:16:55:
                    01:50:bd:5d:3a:2e:6f:f7:a7:03:fe:84:18:b7:f6:
                    60:88:f5:d0:9b:7a:05:81:66:db:fa:4c:75:2e:38:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:ED:14:F6:D6:F8:1E:D4:39:5C:B5:43:EE:4A:DF:EC:01:54:BB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f869cbd8-4b13-3204-a71f-f9f77adaf977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d1:1f:fb:8b:d7:d8:18:d0:7d:8b:4a:54:a1:82:9d:0b:d8:
         88:43:fe:ea:60:2c:64:57:2a:07:86:0e:86:4c:71:fa:c6:55:
         8c:dc:95:99:d7:04:96:06:5d:02:bb:06:50:1a:37:ad:ec:d2:
         66:f4:a3:fc:d9:61:d8:7b:64:34:78:4f:a2:9d:73:e6:6e:34:
         a8:01:8e:4e:77:82:8a:61:5e:ff:79:bd:e8:b9:d1:a3:ca:1b:
         a6:8a:c2:40:4b:b2:9f:7f:e2:79:f1:38:16:8c:b3:98:4c:fd:
         05:1c:f0:e7:80:fd:63:a0:ae:d8:8c:ea:e6:73:70:54:66:68:
         e7:96:95:19:fb:1f:b7:dd:ee:c9:d2:dd:d2:5c:dd:00:0c:38:
         d1:3d:05:27:0c:b3:83:54:3f:c8:4f:1b:45:e2:7b:2e:f4:fb:
         00:b3:66:c9:62:7d:4e:8f:a1:6c:88:9d:39:20:97:fd:f0:e7:
         d9:26:09:44:49:b2:cc:52:b1:ca:b2:d7:d5:cb:05:f1:c3:af:
         4c:c5:64:e0:8f:14:db:d3:d7:92:b6:a1:a7:84:6e:34:71:cc:
         fb:cb:5a:06:7c:51:a4:d6:0b:bc:03:6a:2a:9a:32:77:fa:9e:
         3c:e9:f0:85:8f:ae:85:af:6d:bd:8d:fb:71:5f:b3:1c:d6:95:
         8a:f6:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:22 2025 by rpki-client