Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/1b6464a5-3725-3742-83db-ed28b8df3f78.roa
File:                     1b6464a5-3725-3742-83db-ed28b8df3f78.roa (raw, json)
Hash identifier:          bt8wlzg4qkZyAT2tJdI7ZEjgvuu6er2T7VzDz9ZpllU=
Subject key identifier:   E8:C5:96:D8:CC:30:ED:5E:E7:AB:15:68:8B:AD:66:51:AB:F6:80:3A
Certificate issuer:       /CN=0c3cf342-4337-44bf-ac45-d0772ad75854
Certificate serial:       010D0C9F432858492CAE91579BCC9CC239124B80
Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/1b6464a5-3725-3742-83db-ed28b8df3f78.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     49791
IP address blocks:        2606:2040:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:91:57:9b:cc:9c:c2:39:12:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b9d431f1-3544-4431-a2bc-d2b7bafbf9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:60:16:0b:6d:b9:49:16:44:e9:1c:d8:e5:fe:
                    bf:30:c6:29:35:2b:18:c5:86:79:57:06:f5:72:61:
                    9c:00:52:46:e5:25:19:a3:6d:ea:84:66:49:2c:39:
                    10:7b:be:24:32:67:29:28:06:ad:b6:5a:32:59:96:
                    b1:b4:4f:14:4a:04:50:43:41:b8:78:d8:39:b8:49:
                    56:48:f1:a5:86:2b:3a:64:ed:13:17:70:75:59:e5:
                    b7:a9:37:23:93:07:ba:d2:1e:e9:16:6e:7e:2c:46:
                    25:fd:cf:1a:c5:98:46:7a:eb:c7:58:8d:33:46:24:
                    06:e6:a3:0a:e0:f5:ff:3e:b1:87:98:70:4b:c2:ea:
                    17:b7:43:31:0d:68:a6:62:ee:63:f5:57:2a:bd:f0:
                    c3:d2:20:42:98:3f:a0:d3:cc:f2:f6:92:00:76:5f:
                    d2:ee:3c:c9:8b:c7:be:03:5b:be:9b:ce:3b:52:7c:
                    de:c6:9e:ec:4e:f6:ce:5c:6c:86:73:05:78:a6:55:
                    a4:9c:45:ac:35:82:49:09:55:b0:b8:18:57:eb:1b:
                    86:76:78:59:a9:a6:28:5b:ac:eb:58:e1:7b:62:0e:
                    78:cc:d2:4e:87:e5:33:b0:29:ec:72:1c:be:b4:4b:
                    ee:e0:cb:40:ae:21:94:89:9b:4c:3e:68:17:8d:bf:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C5:96:D8:CC:30:ED:5E:E7:AB:15:68:8B:AD:66:51:AB:F6:80:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/1b6464a5-3725-3742-83db-ed28b8df3f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl

            X509v3 Authority Key Identifier:
                keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2040:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a6:c7:ab:d5:b4:58:87:20:72:e3:00:08:08:9f:c5:01:ad:
         67:0a:fc:a9:65:a1:5b:1e:7c:bf:fa:65:8a:c9:59:fc:76:3f:
         44:30:ae:84:31:a7:e7:d4:9b:1f:56:c6:1a:56:8b:e1:f6:74:
         39:b6:84:63:d3:61:3e:f8:95:c4:bf:44:d9:af:2a:5e:2c:22:
         71:f0:c4:c3:5e:c3:62:08:89:7c:02:f2:d3:f3:69:36:f4:6b:
         1e:2c:b9:04:d0:cb:75:56:20:a0:e9:55:a3:c9:c4:6b:d0:ef:
         81:1e:2f:13:e9:21:e3:e3:bb:e3:f7:a0:3f:75:73:ad:b3:56:
         ef:8b:19:c5:00:e5:fa:58:ac:24:4d:79:1e:0a:35:a7:87:55:
         2b:ac:f7:55:a3:f2:93:90:03:09:bf:72:3e:64:93:22:e2:26:
         26:76:4b:78:08:ea:d5:27:9f:02:0f:bd:54:f7:24:81:c3:28:
         1a:7a:81:b4:c3:a3:76:a9:9f:bc:34:20:59:0c:1e:2d:c6:c8:
         ec:51:3e:7f:03:13:0d:c8:ee:16:01:02:f6:01:d4:49:f1:92:
         7c:8e:48:af:a0:bb:2e:9a:8c:63:9a:5f:85:4d:31:47:9b:ae:
         16:e7:54:a7:c8:c6:51:3a:f8:e9:c9:d0:3c:3e:40:df:95:34:
         24:72:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:27 2025 by rpki-client