Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa
File:                     5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa (raw, json)
Hash identifier:          Di1O+4ZieWkuvHNlyfagocGlZ/VZK4GZNW4Zn6NOfSg=
Subject key identifier:   48:42:FD:C7:A1:D1:EE:11:61:A1:76:7A:7C:B5:8E:35:EA:FB:C6:07
Certificate issuer:       /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b
Certificate serial:       010D0C9F432858491ED6E119903C08EEAA096480
Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     3653
IP address blocks:        2602:fc2d::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e1:19:90:3c:08:ee:aa:09:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=5c62b421-7965-45c0-900c-394cd7507a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:bf:1a:e0:ae:64:1a:e7:cf:83:9e:32:ac:
                    27:b4:6f:f4:bb:14:da:2b:e6:e5:a3:32:04:cc:5d:
                    26:59:b9:c9:10:f2:dd:79:5f:eb:ab:4e:30:f8:65:
                    25:42:49:ec:bb:53:43:ec:f6:cb:c6:75:ba:86:04:
                    be:c1:1c:9f:78:ef:0f:e8:17:8c:ad:bb:1b:b2:22:
                    8f:39:94:4e:ad:34:01:04:cf:84:d6:02:0f:9f:91:
                    64:a8:ee:49:47:35:c8:06:e0:f5:03:f3:37:5a:81:
                    0a:eb:55:8e:2c:97:2f:2d:a3:ee:fa:c3:a3:0d:3e:
                    08:cb:ec:43:bc:50:82:58:e9:0f:ca:11:02:eb:87:
                    92:d4:d8:6d:02:39:40:65:66:ee:4e:42:23:2b:86:
                    8d:ff:ba:38:9b:55:50:53:3b:d4:28:2b:ea:03:b3:
                    27:e2:04:be:cd:32:c8:5a:d1:67:30:e6:18:26:c3:
                    c7:dd:4e:e2:2d:82:57:08:4f:9a:e9:31:17:86:62:
                    4b:04:91:e1:dd:7c:99:fa:29:c5:6c:da:8a:dd:0e:
                    9d:7d:e6:b6:ac:0c:05:57:5b:ad:86:34:84:bd:1e:
                    b0:57:1b:80:20:49:80:76:0b:5f:8a:2c:ae:f4:44:
                    d0:e9:d0:a0:70:71:52:d4:61:fa:94:f5:04:2e:3d:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:42:FD:C7:A1:D1:EE:11:61:A1:76:7A:7C:B5:8E:35:EA:FB:C6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:07:b8:55:42:56:1a:1e:5a:48:7f:12:07:5f:f5:70:6f:52:
         bd:32:11:b0:b7:dc:81:5b:04:bb:42:2e:5f:6a:58:d1:5c:1e:
         58:80:ba:0e:2d:11:e0:9b:5e:a2:9c:f3:e6:1c:18:aa:28:7c:
         46:0a:22:b1:18:10:de:54:19:54:45:d0:05:2b:47:89:23:87:
         a9:bf:bc:95:17:19:7b:af:a1:86:4a:5b:ed:72:55:27:61:0d:
         9e:ef:e2:b6:5b:66:af:05:5d:de:3b:18:b4:05:9e:8e:80:d5:
         b2:82:bf:1a:82:32:91:1a:45:7c:e3:1f:7f:7e:33:86:2c:33:
         b1:f7:57:29:89:ab:01:3b:69:07:98:7d:60:10:99:e3:09:f6:
         36:d0:9c:56:af:ea:e1:53:7f:eb:0d:6e:ff:f0:a2:af:9f:ae:
         20:bb:f2:22:de:6c:68:59:b5:bc:cf:88:91:db:0e:70:f8:bf:
         b6:79:bf:6f:c3:a2:6c:96:c8:dc:ae:4c:c2:57:db:d1:70:c4:
         1b:fa:66:71:29:61:f8:ee:b6:97:d0:bd:f6:ed:8e:d1:9d:56:
         b9:d0:b4:af:84:36:ca:d4:fc:a8:f8:38:1a:22:f1:57:8b:90:
         5f:22:44:c7:40:bc:8f:19:cf:d2:8a:76:8c:e7:56:71:57:52:
         67:44:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:07 2025 by rpki-client