Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/358da367-d6e0-3649-9043-df6b5c71776a.roa
File:                     358da367-d6e0-3649-9043-df6b5c71776a.roa (raw, json)
Hash identifier:          JBRlf0C7bdLCpFg+r+zWDDXvqdx1DCdyR/n90yJQweA=
Subject key identifier:   7A:DF:9C:31:1E:6E:6C:B9:EC:8A:AE:AC:0D:C5:C4:1F:45:94:04:27
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858494039628FBC226F035C9F4440
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/358da367-d6e0-3649-9043-df6b5c71776a.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4bb0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:62:8f:bc:22:6f:03:5c:9f:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=97071bbe-e279-4b57-b3da-1dd6c42f0237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:82:47:47:1d:9e:a6:3c:f0:80:91:2b:ef:
                    49:00:e0:c2:7d:0a:5f:db:c3:44:b8:64:e6:50:d1:
                    c5:3a:27:62:ca:bd:71:8f:5f:2a:50:4b:76:13:fd:
                    91:47:20:df:e3:14:e0:7c:2e:ce:3c:0b:73:db:fc:
                    37:17:5f:f6:ac:70:7c:26:54:b7:d4:37:f6:67:e5:
                    56:37:c6:1c:15:52:4e:79:b9:b8:b1:c5:43:0a:93:
                    3d:03:b5:11:c0:f7:e2:1d:4e:64:68:db:59:10:1d:
                    0d:39:0f:69:84:b8:2c:2e:0b:62:ab:9a:08:90:4f:
                    48:d9:80:c0:90:28:d1:00:45:75:de:53:d7:49:dd:
                    60:34:7a:fb:ef:f1:90:25:f0:01:f1:92:12:b7:d2:
                    84:86:ac:f4:52:8b:8d:e9:20:a4:be:2a:0b:9a:23:
                    05:ba:c7:10:09:c3:e5:4c:c4:60:62:f0:26:ef:59:
                    3b:fb:fc:ce:55:fd:2a:57:91:e1:18:f9:47:71:51:
                    4f:11:68:ed:21:8d:6f:df:81:69:e0:e4:4a:18:38:
                    af:fc:90:ab:b7:b2:98:cd:aa:0b:1d:c2:54:9f:12:
                    2a:c5:81:8d:14:34:fe:81:57:9d:fb:83:04:f6:2d:
                    ef:a9:ce:c8:2e:60:99:ee:25:9e:94:a5:4b:ad:6e:
                    3d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:9C:31:1E:6E:6C:B9:EC:8A:AE:AC:0D:C5:C4:1F:45:94:04:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/358da367-d6e0-3649-9043-df6b5c71776a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4bb0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a2:49:6d:33:41:f9:8e:88:66:f9:9e:fd:fb:c4:9d:e6:9d:
         5f:42:e1:e8:ef:54:7b:73:ac:a4:ec:f7:e3:39:f3:84:9e:2d:
         1f:a7:74:6d:77:73:f3:7a:47:e3:e5:75:49:b0:da:91:6b:34:
         7f:66:f7:18:03:7f:19:4c:e3:b1:22:48:b6:a2:d2:18:b3:5c:
         59:22:26:60:7f:e7:59:00:e7:c6:2a:ff:86:50:55:c9:12:1c:
         25:aa:2d:6a:5a:dc:a6:ba:39:2f:11:78:39:72:d3:38:dd:52:
         15:10:6f:a5:1a:d5:25:98:d7:62:cc:8b:78:94:72:92:7b:8f:
         9c:65:11:74:2a:ef:bd:42:15:76:be:3d:1d:8c:73:73:c8:9d:
         ea:8a:4f:eb:87:7a:e2:d6:e9:a2:fc:21:2a:41:fd:f5:3b:91:
         00:c5:de:5a:9b:a6:84:da:e2:f5:a1:a6:62:cd:5e:be:03:fc:
         9b:ae:5f:09:b9:1b:a5:8d:3c:2b:67:30:23:26:d0:12:7e:0e:
         4f:de:51:b2:b8:21:4d:20:8e:dd:be:42:2b:12:22:15:f2:7d:
         0b:2c:81:ea:78:1e:d7:5b:be:db:f0:fd:c2:93:85:4f:59:d5:
         33:59:6c:55:bf:d3:b8:42:a8:10:a6:c7:28:a3:85:b9:21:8e:
         81:19:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:40 2025 by rpki-client