Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa
File:                     3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa (raw, json)
Hash identifier:          8r53P4vChChkyT/9YVmadOEmyOWXY48mJHRT8o3VzVg=
Subject key identifier:   AE:AC:95:DF:4F:D2:7A:73:D8:C6:21:D3:8E:3E:FB:EC:B6:31:03:3A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584917DC0AAC95A2E55D3F081FE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        2604:cb00:42::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:0a:ac:95:a2:e5:5d:3f:08:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=81ded995-caa8-4236-a44f-16f12a9b253d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:55:45:8a:f6:20:1e:18:c0:49:53:ae:e0:
                    d8:26:aa:6b:bb:0a:21:07:60:58:1f:2c:a2:e5:73:
                    00:e1:f0:12:8d:7a:23:6e:e2:e8:85:32:50:b0:92:
                    85:51:e5:13:db:4b:d2:68:20:58:b8:32:fc:a1:d9:
                    ad:66:5e:53:62:0d:79:90:e7:da:3c:28:f1:78:2c:
                    e4:8a:cd:ee:1e:06:d2:8a:9e:7e:d2:c5:bd:56:88:
                    fe:b8:93:69:49:bd:f0:3f:f2:13:8f:05:5e:88:ea:
                    36:9c:4f:51:0e:2c:22:c6:e3:b6:6b:ed:43:66:3a:
                    8d:69:41:54:df:4a:eb:fd:2d:9c:8e:fa:58:25:e9:
                    99:74:b7:5a:6d:71:90:9f:4e:0d:7d:51:97:e2:ad:
                    24:7a:8e:6b:e2:ad:94:60:f7:f5:40:48:64:ba:4e:
                    9b:ef:59:77:91:68:06:e3:d4:42:9f:f2:64:41:3a:
                    eb:48:43:22:af:0c:29:83:d6:92:a7:9d:15:7c:1d:
                    5e:8d:a2:ce:96:8f:f5:a5:d9:95:a9:02:30:fa:3c:
                    b8:74:1c:bc:2d:39:07:0e:a2:3e:a8:96:9c:f7:57:
                    d1:01:58:c5:b0:bc:14:53:e2:e0:c9:6a:79:c5:6a:
                    5e:67:ee:d9:ff:4d:04:5a:5a:b3:1b:ec:97:4d:40:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AC:95:DF:4F:D2:7A:73:D8:C6:21:D3:8E:3E:FB:EC:B6:31:03:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:10:b6:30:2f:a4:0d:4c:f7:15:56:bd:a3:a3:73:06:77:03:
         75:89:39:40:06:4b:c1:ba:57:c5:86:1e:a1:d9:c8:b7:1f:93:
         71:1d:a1:fa:48:d2:ba:13:59:6c:c4:ba:4f:44:72:5b:4a:7e:
         92:c9:9b:41:24:f3:da:f5:9a:98:95:64:90:95:bb:7d:e6:5e:
         ba:d8:d4:b3:65:d8:c4:0c:c2:70:1b:cc:7f:69:6a:87:ca:71:
         60:e7:80:69:15:ec:7f:e3:ac:19:f0:5b:b1:b7:8c:84:34:05:
         a3:06:bf:49:e0:85:60:1b:20:e8:b3:db:a3:13:07:88:b7:09:
         e0:f8:73:61:e4:98:d0:0a:34:70:c8:ff:6d:d1:6e:53:7a:38:
         c1:6c:bc:15:9c:92:63:49:ab:04:a2:79:ce:23:95:09:20:35:
         3c:f4:fb:f2:cd:e3:87:7f:90:28:b2:2b:c2:a1:b5:67:b4:08:
         84:b2:3a:90:44:07:c1:4e:4b:29:29:82:d2:a9:31:b4:3a:0c:
         1a:eb:f2:18:c6:6e:29:c3:9f:08:ea:ef:ee:48:e3:97:67:fc:
         37:1e:3c:57:2d:3b:cf:41:e6:88:a6:68:ff:27:16:22:d7:22:
         e8:77:fe:8f:01:6c:0e:50:61:25:1d:f6:31:6f:1f:76:52:1b:
         d8:d3:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:15 2025 by rpki-client