Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/30183ad6-a9db-371b-bb6e-7604e4fae2d7.roa
File:                     30183ad6-a9db-371b-bb6e-7604e4fae2d7.roa (raw, json)
Hash identifier:          ZW6PkAqEAtDNfZzDsA1GZbWzYu4CvT++5OJL1fPixn4=
Subject key identifier:   4D:3A:E1:CE:DB:BA:1B:7A:D4:F5:25:F9:6A:BE:91:75:24:C0:2A:DB
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584930DE777ECF146F4A9E98CC80
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/30183ad6-a9db-371b-bb6e-7604e4fae2d7.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     398564
IP address blocks:        2607:2240:f000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:77:7e:cf:14:6f:4a:9e:98:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=bbb0bc36-3d53-4230-9b64-536ed14c7a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8a:53:76:c4:ea:fa:98:05:bc:2c:c3:ab:53:
                    22:b6:ac:bc:9a:e6:a3:d9:71:e9:80:79:62:69:52:
                    8b:6e:9e:2e:81:58:33:72:47:2b:7a:20:f5:bb:af:
                    67:11:fc:74:6b:da:01:ea:3f:0f:f0:7d:80:17:a3:
                    0b:d5:8b:a3:65:b6:35:58:b5:89:4b:8f:dc:5c:23:
                    e3:ab:3e:4f:c4:51:6f:56:ad:29:55:ac:fc:13:51:
                    b4:67:6a:6c:dc:0e:a0:dd:3f:b7:7b:0d:3e:f1:d3:
                    c8:e6:38:eb:b1:c0:c3:00:70:bc:42:a4:a9:5d:55:
                    ad:ad:25:5b:61:42:42:b9:5a:33:40:54:61:ef:2e:
                    39:01:c9:5d:92:3d:68:b6:82:04:7d:16:7e:87:d6:
                    61:89:7e:dc:e1:39:83:5d:b3:18:13:b1:28:1b:87:
                    08:b2:47:6b:05:91:d1:9f:8f:39:70:af:91:a6:1c:
                    54:f6:d8:26:42:e8:f9:03:2a:51:5e:db:5b:39:9e:
                    49:78:16:3a:0f:cd:b2:61:19:a9:9b:d7:fb:19:ca:
                    cc:97:d3:25:3f:90:e2:16:24:a0:33:d0:47:88:b7:
                    ee:7e:77:3c:e8:1e:be:52:d0:8c:8e:d9:0c:30:4e:
                    25:2d:46:70:3f:88:9a:04:da:a5:d3:d5:68:e0:48:
                    64:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3A:E1:CE:DB:BA:1B:7A:D4:F5:25:F9:6A:BE:91:75:24:C0:2A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/30183ad6-a9db-371b-bb6e-7604e4fae2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:e1:6b:c1:c9:24:bc:fc:89:1b:0b:53:74:54:32:39:e2:
         4a:cf:f3:3b:7a:56:75:7b:f7:45:d5:e4:80:87:12:51:7a:e3:
         34:8d:eb:42:17:f5:ae:d7:26:71:02:ef:63:a8:ab:1c:71:70:
         c2:d7:c9:05:74:cc:8f:8e:09:b5:b1:96:7c:b5:cb:41:59:ca:
         6c:5f:3f:db:88:e3:e1:fe:6c:71:d8:f1:2f:b1:60:ed:68:ba:
         98:1b:96:61:8b:dc:66:b8:e1:2a:8d:30:78:07:42:92:18:9a:
         6b:61:51:31:ab:07:9f:60:05:37:5e:0d:e5:ae:e5:f7:cc:49:
         28:61:94:21:4c:14:33:70:e8:4b:ab:59:9b:51:54:d6:44:6c:
         5c:25:ba:7c:44:62:d6:3c:58:87:be:a6:57:36:19:b8:83:5c:
         47:71:f9:7b:26:71:e7:9e:70:a3:6f:55:1b:24:f5:b4:84:70:
         08:d3:95:dd:f0:06:f6:47:29:b2:05:aa:17:9d:b9:17:69:50:
         62:e5:ef:c3:b2:7c:f2:4d:fe:a1:2d:d6:8f:a2:04:e0:f6:fd:
         a9:e2:98:05:f4:ff:d5:87:ce:06:3a:b4:40:39:ff:4b:0e:d1:
         1c:fb:85:8d:80:dc:66:f0:27:a8:8a:6b:68:18:db:5f:c0:57:
         c1:3a:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:09 2025 by rpki-client