Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/07d99c68-ec01-3205-a4d6-87cbf2100262.roa
File:                     07d99c68-ec01-3205-a4d6-87cbf2100262.roa (raw, json)
Hash identifier:          hmRFZGdaM0xzdlqsDDlHcOo7DUVqhHrtA/OaMLlvHcs=
Subject key identifier:   45:9E:33:47:4A:FC:EB:8A:20:E2:75:71:1A:AD:03:AF:E6:C1:AB:7F
Certificate issuer:       /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial:       010D0C9F4328584953C418FC28A6DF4FE1AFF780
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/07d99c68-ec01-3205-a4d6-87cbf2100262.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     32024
IP address blocks:        2607:69c0::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:18:fc:28:a6:df:4f:e1:af:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=2cd1f510-0b6c-44a9-ba6d-41bef6b2fd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:80:8b:19:47:d7:35:a7:5f:66:ef:17:74:
                    ce:27:af:a6:8f:3f:44:a8:df:c8:4d:3f:47:bd:c6:
                    5d:be:99:e9:58:23:69:d8:d8:ae:8d:af:ff:91:e1:
                    ed:c3:da:b0:76:89:45:43:ef:b3:73:13:b7:7e:7b:
                    06:94:0f:71:31:01:9b:7a:f8:ae:b3:31:11:14:98:
                    28:4d:e2:6e:51:4c:c1:91:9a:eb:ad:2b:2d:ba:69:
                    50:fd:2c:5e:3f:0e:15:26:4a:c7:c2:64:f6:d0:ba:
                    a5:74:73:0f:35:86:58:35:bb:b6:0d:57:9d:49:e4:
                    8f:37:70:64:a1:66:12:ed:cd:8f:a1:a5:a7:ca:f6:
                    32:75:5c:91:87:a0:e6:8d:7a:3d:e2:73:0d:1c:62:
                    30:de:ef:1f:cc:43:b6:4d:2e:c8:80:87:d8:9b:df:
                    41:a4:0e:91:6c:15:47:b0:16:fb:bb:89:25:85:fa:
                    a7:60:c4:66:44:00:c0:c7:6b:50:51:8a:9f:56:12:
                    7c:28:7a:24:73:38:ca:6f:e1:4c:15:26:9f:cf:31:
                    03:13:59:fa:ba:62:79:c2:3c:a3:7e:91:1e:4e:31:
                    a5:d2:fb:97:20:07:11:be:8a:09:d5:74:36:66:dd:
                    09:d9:fb:0d:66:64:56:ce:65:fe:f5:b6:b0:2e:e9:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9E:33:47:4A:FC:EB:8A:20:E2:75:71:1A:AD:03:AF:E6:C1:AB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/07d99c68-ec01-3205-a4d6-87cbf2100262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl

            X509v3 Authority Key Identifier:
                keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:69c0::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:da:c6:b7:6d:4c:a4:6e:ab:91:9b:36:0b:02:c6:e0:f2:
         86:6f:43:e9:6b:e0:19:d0:c3:a0:a4:fc:60:1c:2b:0d:ac:b7:
         fc:e9:5c:8b:c2:3d:5b:05:cb:2f:64:01:26:28:35:d3:2d:b8:
         5a:08:f4:58:9a:22:96:21:b5:e4:58:75:53:ac:a6:ca:61:da:
         1f:ab:54:2f:f4:c0:89:3c:00:d8:3b:01:bf:f4:c2:f0:7c:3c:
         5c:bc:1a:38:47:6d:75:a6:01:f1:7e:25:25:b1:16:c7:5f:4d:
         1f:a5:e0:69:04:3e:c3:8b:e8:d5:c0:74:74:98:da:3f:5e:f3:
         c9:2e:e9:1a:ca:89:cb:e8:2a:4f:e3:2d:37:a2:f4:9a:11:96:
         6f:e0:fa:46:21:f5:82:af:4a:c4:ed:83:25:7a:d0:25:e4:07:
         ed:5f:b0:6c:1c:fc:b6:37:af:d8:8b:25:0e:48:b1:85:30:71:
         b8:5d:5c:db:f5:aa:e4:b5:78:93:63:8d:88:3c:b5:f6:62:68:
         74:ad:63:d4:50:f0:19:6c:5c:45:60:ad:35:38:c6:3e:52:46:
         26:80:33:dc:5c:b6:45:5c:46:23:28:d2:b2:3e:b4:51:2d:33:
         23:8b:80:cc:a0:7d:4e:c5:aa:99:44:c2:29:78:34:72:7b:ee:
         aa:5a:36:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:36 2025 by rpki-client