Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/423c792a-aec0-33ab-aaca-ea6545d77459.roa
File:                     423c792a-aec0-33ab-aaca-ea6545d77459.roa (raw, json)
Hash identifier:          n+JG7+o6D7Ssws80IcmygXhwztrbWPkzvfa8VAL4aiQ=
Subject key identifier:   0C:EE:3C:B8:C6:DF:96:B5:F6:42:6E:D2:60:45:86:1D:0D:6C:76:03
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858494B641952BF845AF3B91EB700
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/423c792a-aec0-33ab-aaca-ea6545d77459.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     394285
IP address blocks:        2606:a100:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:19:52:bf:84:5a:f3:b9:1e:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=0c477524-b787-4f30-86cd-9ad4fd6d960b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:35:22:9d:81:64:4c:09:e4:4b:e9:4f:85:
                    dc:63:63:47:88:b6:ff:aa:72:a1:a3:7a:81:dd:e2:
                    03:88:0f:56:3c:f4:ca:8d:76:d1:9a:20:0f:64:5a:
                    a1:b2:98:ae:11:d0:ac:10:20:c1:90:59:45:88:64:
                    07:4c:17:4a:a0:c9:f3:f1:e8:25:36:6f:dd:9f:a7:
                    79:e1:fd:90:f0:d9:6b:2b:ef:67:19:6f:6d:ef:6c:
                    16:df:6e:9b:c7:20:74:7b:0e:8f:64:39:e5:48:d2:
                    a5:c5:d8:05:d7:86:67:0a:af:94:28:95:fd:83:d1:
                    06:c8:0e:0d:76:e1:ac:05:ff:f3:59:9b:49:a6:c8:
                    eb:e8:45:b5:fe:90:dd:96:52:b4:41:06:b9:26:5f:
                    03:f9:ba:2d:17:99:01:b2:89:2f:16:9d:75:9f:92:
                    4c:e4:43:f6:ce:84:ad:70:7a:d5:4b:1d:a8:ae:18:
                    48:41:8d:bb:f0:17:4a:0c:f0:36:c2:ee:80:05:7b:
                    2e:14:ac:0f:e9:77:7f:a5:b7:d9:9a:bd:6f:1a:2d:
                    40:89:e3:ab:b8:28:5b:7d:04:08:e0:14:e2:72:82:
                    f5:42:01:aa:f9:28:08:72:95:2b:43:ea:a6:c8:4c:
                    b0:d0:57:2e:91:f7:32:ee:b8:27:9c:2b:7d:4a:31:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:3C:B8:C6:DF:96:B5:F6:42:6E:D2:60:45:86:1D:0D:6C:76:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/423c792a-aec0-33ab-aaca-ea6545d77459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:70:6b:8a:db:a2:10:7c:83:4c:68:3f:75:2e:6e:68:aa:
         b9:8c:ae:36:2d:74:3b:81:4b:ad:0b:3b:99:3d:86:b9:da:12:
         f0:7b:cb:f6:23:5e:ce:11:c5:34:ee:99:71:77:59:d9:fc:ab:
         bb:9c:35:42:02:be:ad:7f:5b:d3:61:95:6b:0c:9b:2e:17:18:
         a3:a7:4e:61:14:51:b8:b4:80:68:25:e3:4e:26:a8:8a:cb:76:
         34:08:b1:5b:af:0e:4f:21:2b:fc:29:78:72:40:4c:a7:7b:d0:
         d4:fb:98:47:83:e7:bb:51:c6:5a:83:24:f7:9c:92:7e:a1:81:
         d9:80:44:5a:61:63:47:07:8c:94:43:5b:a1:9a:f4:b8:42:bb:
         f3:ab:eb:1a:36:51:a8:02:62:e7:e1:14:88:45:f1:3f:32:7b:
         02:4c:2c:46:86:9f:b3:9a:f6:12:23:f6:ee:20:23:e9:7b:cd:
         81:59:a0:6b:08:53:3c:49:85:19:6e:0b:32:1a:80:10:ce:50:
         9a:d5:de:bc:72:5a:5d:82:dc:d0:0e:66:b9:e1:d1:d2:05:83:
         cf:5d:9f:7a:71:3f:a2:c5:f4:ca:45:05:11:c2:ee:e5:e9:68:
         05:9a:92:42:d5:52:6d:45:60:d0:a0:e7:fd:d3:71:df:d2:7a:
         14:76:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:29 2025 by rpki-client