Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/ae858c3c-2288-3e41-9e51-5d4476b7a73a.roa
File:                     ae858c3c-2288-3e41-9e51-5d4476b7a73a.roa (raw, json)
Hash identifier:          5SB3Oq5Qiy0n2Ha3VqhbskP4EOc6kCNbZFsQcw8G7G0=
Subject key identifier:   FA:01:A7:E6:75:41:FA:29:9A:0B:3F:BC:49:BB:77:E7:55:D9:61:47
Certificate issuer:       /CN=b741a525-1b5e-4308-93b6-815fed38e182
Certificate serial:       010D0C9F43285848A2A273575F2644CDE8391640
Authority key identifier: B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/ae858c3c-2288-3e41-9e51-5d4476b7a73a.roa
Signing time:             Thu 23 Jan 2025 02:15:09 +0000
ROA not before:           Thu 23 Jan 2025 02:15:09 +0000
ROA not after:            Wed 23 Apr 2025 01:15:09 +0000
asID:                     26253
IP address blocks:        2606:2740::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:a2:73:57:5f:26:44:cd:e8:39:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b741a525-1b5e-4308-93b6-815fed38e182
        Validity
            Not Before: Jan 23 02:15:09 2025 GMT
            Not After : Apr 23 01:15:09 2025 GMT
        Subject: CN=998ef213-b1cc-4859-b8ab-60a8150d5642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:6e:0c:61:4e:31:4c:f1:ad:80:82:66:ed:
                    38:4c:12:c4:c0:a6:72:78:af:f7:0a:17:50:26:4c:
                    f7:16:af:69:bd:95:6a:35:5e:10:9b:76:3f:09:fe:
                    1e:48:06:42:39:80:bc:75:a8:54:b1:a1:45:2f:20:
                    b3:f2:25:70:4f:cf:af:51:54:45:c3:2d:d0:1e:46:
                    7a:e9:98:de:1f:e6:7e:94:4a:7f:42:0a:0c:59:b0:
                    8f:c7:07:f6:83:70:86:84:bd:05:9e:33:f5:d8:28:
                    e9:c4:9b:2b:eb:fb:49:27:52:6f:16:0b:84:4b:ef:
                    1f:c8:2f:c3:df:97:5c:f6:f1:69:e3:c7:bd:4b:31:
                    db:50:88:17:de:5b:56:82:82:28:4f:4d:86:34:53:
                    cb:f9:ab:59:a1:5d:09:f9:11:10:c1:07:1c:96:10:
                    52:cc:79:b1:05:fa:b0:a5:45:9e:89:06:a1:f4:1e:
                    f9:d8:17:38:a1:ff:96:72:99:46:57:fa:41:62:23:
                    49:43:24:9c:1f:dd:43:45:ca:9f:f5:af:5c:18:fe:
                    28:d5:31:f5:22:17:ce:fa:e8:f1:2b:04:d2:2c:a3:
                    c7:ff:1e:0e:a8:82:42:e5:78:e6:1e:10:c2:08:b3:
                    39:c8:6f:48:df:06:3e:84:9d:49:41:08:f7:ef:53:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:01:A7:E6:75:41:FA:29:9A:0B:3F:BC:49:BB:77:E7:55:D9:61:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/ae858c3c-2288-3e41-9e51-5d4476b7a73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl

            X509v3 Authority Key Identifier:
                keyid:B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:62:ae:c1:63:37:d1:ee:76:13:d9:01:dd:f7:89:b6:91:2c:
         f6:12:af:d7:8a:e7:91:3c:dd:14:7b:65:09:a6:db:a6:ed:2c:
         68:ad:74:e6:ab:bb:21:c2:13:de:60:8c:80:6a:64:b2:c6:06:
         54:42:ee:45:a6:99:04:5f:66:88:b7:7c:9b:21:56:79:c4:58:
         7a:c6:82:23:2c:ca:6d:a8:2a:15:11:70:de:5c:77:fd:19:13:
         36:1a:21:e6:4d:14:40:5b:a6:ad:47:68:31:c6:86:15:a0:86:
         42:98:55:0b:12:1a:e6:a7:25:e7:2c:7a:23:d5:9c:03:14:ba:
         90:44:42:5d:5d:23:f6:33:63:b6:6b:29:4c:40:75:08:c1:55:
         ec:52:55:26:e1:19:df:30:f9:62:ef:bc:79:50:99:04:0a:76:
         7a:15:7a:c6:90:7f:3e:ea:13:a7:4e:68:e6:66:44:18:d9:53:
         62:1c:29:78:3d:a3:52:d2:40:c1:8a:04:8f:79:26:5c:6e:d3:
         91:86:db:52:22:47:5d:b9:01:41:6b:03:0d:d0:98:d1:79:b2:
         73:39:1e:34:ad:04:e7:ba:b6:cd:90:5e:d6:e5:7c:26:80:86:
         97:1c:7a:9a:ca:ea:37:d9:dd:a2:bc:3a:bc:07:7c:05:18:cb:
         a1:b1:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:08 2025 by rpki-client