Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/3414d1ad-32bc-3a20-aaf7-5d3dac7c3e8e.roa
File:                     3414d1ad-32bc-3a20-aaf7-5d3dac7c3e8e.roa (raw, json)
Hash identifier:          oiHUvijiai+WkCEErf+DB/9Py+FpuNDx6fiy4xdgT0o=
Subject key identifier:   7E:D9:8F:4A:7C:29:DC:29:40:E8:FD:71:CD:E9:4C:93:B9:3B:2A:E2
Certificate issuer:       /CN=bce2ace0-971c-48f1-8361-962ad02d9618
Certificate serial:       010D0C9F4328584902EC1C4FE82C2E4374935AE0
Authority key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/3414d1ad-32bc-3a20-aaf7-5d3dac7c3e8e.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     32943
IP address blocks:        2602:f937::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:1c:4f:e8:2c:2e:43:74:93:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce2ace0-971c-48f1-8361-962ad02d9618
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=eb3211b6-3dff-4c88-a1bd-4873b0ee3603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:c9:33:b4:aa:ee:ed:29:a7:ab:51:b4:eb:
                    d7:74:24:9e:b5:a9:f3:70:46:b5:e9:75:89:1c:d8:
                    9e:8a:42:81:17:48:3c:db:3a:1a:7c:ec:95:70:30:
                    85:27:04:fd:3e:40:4e:02:31:bc:91:05:c9:db:d7:
                    b9:38:2c:20:ba:07:cb:8b:2c:30:2c:ef:85:47:e8:
                    91:95:5a:31:a1:06:56:91:3b:1d:db:39:86:0f:8d:
                    75:13:20:21:f1:cd:37:57:69:33:ad:88:7b:55:b3:
                    1b:84:c2:70:80:64:d0:94:ed:dc:6c:e4:be:7e:45:
                    ac:d8:dc:df:cb:92:df:4d:76:0b:d4:84:74:dc:d8:
                    c8:4f:76:71:fa:87:30:b8:ca:e5:6b:59:50:d7:46:
                    a5:4f:d2:e2:0e:ad:19:d3:f6:d6:00:35:2c:05:a6:
                    4f:18:28:cd:47:be:e1:6a:02:85:16:8d:0c:ee:64:
                    d3:ac:cf:3e:17:c9:38:27:dd:c0:9a:d4:e2:b2:c5:
                    aa:06:bf:4a:41:81:1e:93:04:c3:93:44:58:1e:10:
                    dd:70:72:f3:c7:c7:af:e7:2d:71:4d:63:29:82:88:
                    fe:70:f8:a9:bc:e6:60:9d:c6:b9:65:d8:d9:29:2b:
                    9e:94:df:20:18:31:0e:ae:bf:1a:27:cb:b3:57:d5:
                    7d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D9:8F:4A:7C:29:DC:29:40:E8:FD:71:CD:E9:4C:93:B9:3B:2A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/3414d1ad-32bc-3a20-aaf7-5d3dac7c3e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl

            X509v3 Authority Key Identifier:
                keyid:E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f937::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:34:44:99:e7:40:78:03:b7:04:5e:a4:21:96:92:06:f4:
         c0:3b:46:3d:d9:dc:89:9e:dc:f9:6e:90:63:83:b4:79:eb:af:
         93:bb:48:c1:91:91:bf:86:58:4d:07:cc:01:6d:de:09:ba:57:
         1f:a9:44:6a:b1:3e:d0:28:94:89:09:93:c5:43:69:c5:a3:95:
         a7:af:36:82:7b:db:5d:33:ae:0b:a5:e0:a0:e3:16:e1:87:71:
         a1:7e:6c:e6:85:d6:a7:6d:99:02:59:c0:0d:a5:de:73:e4:05:
         19:c0:72:21:3e:78:a9:bc:b7:30:5c:e5:b1:de:b1:08:80:d2:
         67:0b:ab:79:66:83:39:79:20:40:7e:92:df:bb:a3:30:c3:f4:
         0a:47:48:09:2b:64:9d:57:be:47:40:05:1d:85:d0:1d:66:25:
         cf:23:6c:08:a1:fe:4f:28:18:22:b3:5c:2b:ee:c7:cd:7d:0d:
         cd:7a:41:6c:6a:71:11:2e:6c:3f:56:7a:36:48:ca:cf:bf:de:
         41:17:1d:a4:31:23:6e:87:4c:a9:8f:a5:b6:f2:40:56:ce:c6:
         63:c0:5c:41:04:4e:66:af:84:4c:1f:2a:31:09:ec:8f:9d:3e:
         a2:13:0c:d9:59:69:0c:3b:8c:81:c8:63:68:b4:74:35:35:af:
         30:2e:a1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:51 2025 by rpki-client