Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/3009b715-8196-3a24-8bd7-58ab776a5a57.roa
File:                     3009b715-8196-3a24-8bd7-58ab776a5a57.roa (raw, json)
Hash identifier:          nc+83/ohs6F+TOFUDS/3IoTmPfelG2kTBKbMFbDvC0g=
Subject key identifier:   F3:CB:3B:6D:6A:04:71:9E:23:78:4E:49:CD:53:0B:5A:0E:23:29:FE
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F432858491AA20F67870066BAD5E2E448
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/3009b715-8196-3a24-8bd7-58ab776a5a57.roa
Signing time:             Fri 07 Mar 2025 01:51:22 +0000
ROA not before:           Fri 07 Mar 2025 01:51:22 +0000
ROA not after:            Thu 05 Jun 2025 00:51:22 +0000
asID:                     206216
IP address blocks:        2602:fb54:c00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a2:0f:67:87:00:66:ba:d5:e2:e4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Mar  7 01:51:22 2025 GMT
            Not After : Jun  5 00:51:22 2025 GMT
        Subject: CN=e69ae1b0-65b4-4ccc-8d9b-f2e0ad6e62a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:51:5c:e0:a0:e9:40:15:79:5e:09:91:7f:
                    ee:d6:0c:9b:19:9d:a1:30:a9:3f:b8:c8:31:19:6f:
                    e4:7c:35:3e:2f:3a:0f:35:71:0a:df:88:aa:ed:29:
                    2e:ac:b1:a9:34:2a:9b:34:bd:60:ca:15:52:5d:32:
                    56:72:6b:34:19:42:6a:20:57:67:4b:69:aa:a3:f3:
                    74:93:a5:cd:f0:a0:37:a9:fd:e3:60:fb:eb:72:30:
                    e9:7d:07:c8:05:23:32:48:71:8b:56:26:2e:73:23:
                    fa:6b:be:f4:07:13:77:5a:c2:d7:9f:70:70:e3:92:
                    8f:5a:e8:d9:3a:ee:18:04:db:03:b6:d8:5b:de:fb:
                    45:52:48:ac:10:ff:2b:5d:f8:b2:3c:46:72:d7:5e:
                    78:14:16:01:a6:b3:2d:19:47:49:ae:8b:bb:b6:a3:
                    7b:34:14:a6:e6:40:5c:c3:0a:a0:d0:8d:9b:b2:ef:
                    e3:df:a9:61:84:d1:fa:87:5a:23:17:1c:8c:8d:d7:
                    8f:db:da:f9:ff:86:30:95:23:ad:45:ee:bb:d5:5f:
                    41:b1:ee:85:ca:40:b2:af:d9:d0:8b:40:79:f2:b0:
                    5d:4a:35:01:69:f0:a3:64:3c:9e:c4:5b:6d:7c:4c:
                    a1:4a:36:70:f8:b0:17:c3:ef:17:0b:b6:2b:16:b0:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CB:3B:6D:6A:04:71:9E:23:78:4E:49:CD:53:0B:5A:0E:23:29:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/3009b715-8196-3a24-8bd7-58ab776a5a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:7f:bc:80:58:47:f4:6b:d8:66:85:35:29:a2:25:d0:2d:80:
         48:50:7d:69:2f:3f:2d:30:36:66:41:13:d2:5f:81:19:9a:d8:
         d9:ef:91:09:bd:c8:75:ac:ba:d7:16:e1:10:78:ee:2e:3e:43:
         83:d9:df:3c:be:1d:04:62:c6:95:7c:37:06:52:d8:f5:ef:2c:
         88:92:e0:6f:ac:67:2d:62:b6:4d:ba:ff:34:8c:0f:f6:70:c6:
         51:c4:67:ad:78:7d:01:e0:52:10:0e:a4:9e:46:51:95:f5:13:
         55:d6:eb:42:56:b0:e1:e7:b2:ce:b6:a7:c2:4e:9f:fb:e7:5a:
         28:98:93:c5:5a:d7:ac:76:71:00:a0:01:b3:11:89:7f:26:d7:
         ce:ba:d7:70:93:23:3a:4d:a8:87:25:f8:81:c5:6a:3a:3d:95:
         72:3a:a1:bd:8e:20:83:47:a5:6b:5e:0e:92:f1:68:b3:9b:c3:
         6e:be:87:70:96:b7:ac:5c:cd:cf:62:b8:7f:d7:9b:a1:f2:cf:
         da:81:40:84:70:c8:5e:c5:78:7d:f5:e2:5d:f1:c0:94:fe:42:
         db:3c:67:1e:fa:9d:d0:4c:0f:89:0a:23:09:94:0c:b9:e8:6e:
         dd:47:c8:82:b8:0b:be:c6:79:85:a3:34:3e:ed:d1:4d:8a:32:
         12:cb:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:12 2025 by rpki-client