Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa
File:                     159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa (raw, json)
Hash identifier:          IKODRQgKKWLj5I2k45NU5e1zisGkFnHEcdbH2uuzvyA=
Subject key identifier:   16:2B:4D:27:75:BB:BB:84:AC:46:78:90:78:65:3E:47:18:C7:DC:E2
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F43285848977089C434AF35402CDAB380
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     401390
IP address blocks:        2602:f7da:32::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:89:c4:34:af:35:40:2c:da:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=293b185d-8865-4348-b3e7-9de67d11576a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:67:2f:4b:19:52:ef:13:1a:93:de:f9:78:73:
                    5a:bd:92:cf:ba:6c:a1:bf:e8:80:32:f3:79:59:28:
                    9a:54:a6:db:1e:47:82:bc:cc:6e:2f:b7:9d:23:2d:
                    82:f3:15:70:60:4f:c6:02:2e:48:57:75:b2:9a:75:
                    03:19:68:a0:23:97:0f:31:96:4a:47:e2:5f:1d:20:
                    28:f7:92:b7:0e:56:f8:3d:a8:13:80:ca:56:60:8d:
                    99:1b:41:e9:ee:b4:4e:9c:06:ec:35:91:e6:b9:28:
                    ab:4f:be:3f:79:7a:a9:65:bc:40:96:86:16:5b:69:
                    64:68:f3:b7:f3:1a:99:b1:76:eb:6a:92:fc:94:13:
                    df:f6:1e:52:70:43:96:f7:b6:ce:a4:15:cb:0e:7d:
                    b1:0c:7e:ef:d0:2f:6b:42:8b:66:ba:03:02:b6:ef:
                    a6:e1:72:8a:c2:69:b1:a8:eb:9c:72:1a:4a:bb:87:
                    a9:8f:48:7a:72:fe:67:40:79:75:fd:50:c1:d3:63:
                    a6:3a:53:c4:b3:7c:3c:6b:b2:3f:cd:fa:2d:12:39:
                    db:ee:12:87:bd:85:0c:aa:3c:3a:7f:24:83:73:72:
                    41:c5:0f:18:64:42:21:84:95:43:8f:33:9c:55:12:
                    a1:f2:cd:28:13:26:67:93:fc:b4:80:85:44:d2:bc:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2B:4D:27:75:BB:BB:84:AC:46:78:90:78:65:3E:47:18:C7:DC:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3c:4d:a0:64:c2:33:47:42:01:25:b5:04:10:f7:18:f6:15:
         9e:7f:65:d1:a2:05:40:e4:5e:91:57:28:b7:62:03:c9:3c:9d:
         8e:36:80:10:18:66:a1:12:b5:06:40:31:2f:16:cb:78:a7:9a:
         97:08:ec:0b:35:72:a7:5d:ab:56:d0:d5:54:1c:01:f3:50:02:
         b8:30:06:5a:54:84:03:1d:39:7d:18:82:55:fb:b5:0a:b0:53:
         63:48:7c:37:af:b9:5c:ce:64:b9:ea:16:72:b2:ec:24:7a:ee:
         55:ef:35:3c:26:29:c4:f1:ac:ca:70:9b:48:be:56:dc:95:42:
         55:e9:b2:c8:e5:8e:e7:b8:a5:c0:e8:51:5c:43:b7:7a:a4:9c:
         8d:4b:3c:9c:a9:68:74:13:42:16:d2:5e:0f:ae:eb:b2:ab:c8:
         ac:e1:a1:97:04:11:a5:5d:ed:14:7c:9f:85:8d:53:48:82:63:
         07:b0:73:f6:91:72:10:d4:45:d5:83:ad:43:2e:c6:ce:e2:a4:
         15:ab:6f:82:2b:9e:e6:8f:4c:49:3b:70:45:cd:dc:4d:ad:5b:
         d1:3f:7c:ed:e6:66:d1:41:e8:81:b4:a5:73:18:c5:cc:4d:83:
         f2:ba:c4:06:e3:6c:06:6d:c3:8c:b6:ca:06:ba:eb:8b:c7:0a:
         e9:08:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:32:33 2025 by rpki-client