Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/e9806501-b1e3-33f9-93c3-bb9dc5a50d6c.roa
File:                     e9806501-b1e3-33f9-93c3-bb9dc5a50d6c.roa (raw, json)
Hash identifier:          60fN0r9AnoQBg2m95LABYq2hC8CyisKYbXdp+6dAgGY=
Subject key identifier:   1F:FD:5C:96:99:BD:C6:86:8F:77:DF:FC:97:08:BB:41:01:4E:F1:EE
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F432858492AD1D20B44AC6B91FB1EFE00
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/e9806501-b1e3-33f9-93c3-bb9dc5a50d6c.roa
Signing time:             Wed 12 Mar 2025 21:00:32 +0000
ROA not before:           Wed 12 Mar 2025 21:00:32 +0000
ROA not after:            Tue 10 Jun 2025 21:00:32 +0000
asID:                     27539
IP address blocks:        2604:a900:c000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2a:d1:d2:0b:44:ac:6b:91:fb:1e:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Mar 12 21:00:32 2025 GMT
            Not After : Jun 10 21:00:32 2025 GMT
        Subject: CN=24d1934a-9c48-4dd1-b422-f6b4cd1f3c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:32:4b:6e:af:49:7d:44:96:7a:09:33:db:
                    fc:90:e1:d9:e4:86:82:93:3f:06:f9:ee:99:97:6a:
                    99:db:a5:04:d9:4a:3c:9a:ac:c8:f7:d5:70:6f:51:
                    d3:57:3a:20:bc:0d:60:42:b1:ab:ac:50:e3:47:37:
                    e7:d2:77:f0:73:a9:42:4f:d0:6a:29:1f:1c:07:48:
                    1a:9b:70:08:ba:d8:15:39:d5:68:5c:85:b5:f0:ba:
                    0c:99:3c:72:b2:9b:fc:93:29:48:17:e4:70:8c:5b:
                    73:c1:71:ae:04:d3:b1:ee:08:e3:be:96:06:cc:c0:
                    c1:48:d1:0f:31:b2:db:4f:4b:e0:43:cf:00:2c:0e:
                    2f:36:ee:d3:36:10:0c:76:ae:34:a5:a9:b8:ef:db:
                    51:ea:fd:3a:c5:54:ef:c8:92:27:13:11:0e:0f:94:
                    26:db:d6:ae:61:3a:43:54:c5:57:47:f7:97:b6:1f:
                    94:b9:42:44:e4:6e:36:2c:28:45:d6:00:e7:46:2f:
                    60:8b:f1:e5:7e:48:1e:2e:9c:0b:c3:b4:63:16:35:
                    22:1f:1f:05:47:fd:73:ba:06:71:e9:9a:d2:b0:5b:
                    28:b6:cf:82:f3:14:9d:85:75:17:88:d0:45:98:b3:
                    2e:d6:c9:8a:0d:b4:d9:82:fe:79:6c:a1:5d:5a:d5:
                    7d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FD:5C:96:99:BD:C6:86:8F:77:DF:FC:97:08:BB:41:01:4E:F1:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/e9806501-b1e3-33f9-93c3-bb9dc5a50d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:92:89:6e:0d:8a:37:c0:d3:a1:c7:fc:04:cb:c1:57:25:7b:
         9b:c3:23:b0:6f:4c:9a:de:65:db:11:a2:b5:bf:10:16:27:9a:
         65:aa:5a:82:39:57:86:58:07:e3:c5:41:c0:40:1a:79:70:ac:
         03:45:f9:aa:a0:77:8d:8c:e0:a5:f8:d9:bd:4d:79:74:75:3c:
         15:0c:f1:08:0b:5e:f2:77:89:99:d2:6a:0c:8c:ee:4e:59:52:
         0e:c1:8e:fb:9d:e3:ad:00:40:10:42:98:99:cc:fd:39:a6:70:
         0b:ad:23:3c:a2:37:10:36:1a:a2:7e:f3:55:1f:0e:af:02:66:
         d6:66:48:85:d1:49:6b:a6:a9:84:32:d6:6a:48:0f:a8:69:34:
         e8:65:70:81:3f:16:bd:6a:0a:35:7b:96:d2:a4:81:4e:8f:c8:
         34:7a:41:f0:34:de:df:f9:e7:01:58:d7:62:49:44:d7:aa:57:
         23:92:d8:8e:fe:0c:6a:31:c2:85:48:14:7b:bc:6d:c5:68:b3:
         ff:f2:ec:c7:95:8d:e3:6c:56:40:62:0c:bb:c5:a4:1c:e6:ff:
         f5:4a:c1:fa:87:d5:d6:74:3c:d3:a2:1f:70:d0:4c:f6:53:35:
         8f:1b:72:fa:a1:82:6d:17:44:16:99:1f:2f:35:4e:62:65:f5:
         40:dd:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:44 2025 by rpki-client