Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa
File:                     f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa (raw, json)
Hash identifier:          28PUTQ/xYByJhk8D9YG2C0mok1wO/4tayWuHN1GQ/cE=
Subject key identifier:   64:3B:EB:8C:9D:9B:42:5B:96:5A:7B:9B:21:F9:FF:9E:4C:04:71:DD
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F43285848B1F62DA70FB1A52E9BF62880
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     396026
IP address blocks:        2607:fc30:200::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:2d:a7:0f:b1:a5:2e:9b:f6:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=15193a10-876f-4bbb-bd8d-64cb48b99de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ba:9e:15:2e:e5:b3:ac:5e:a0:7d:34:c3:c8:
                    32:5b:c0:f4:9d:54:a3:1c:da:65:a6:8f:33:da:fd:
                    dd:9f:79:bc:5a:66:0e:d5:76:20:7a:61:63:be:2f:
                    d7:63:d2:fb:4f:21:6e:07:38:5e:ec:d3:90:83:7c:
                    d2:b1:38:4e:ec:8d:af:c9:75:42:b2:07:17:91:d7:
                    e9:92:b2:9a:fa:a1:fc:17:54:a3:ea:69:0d:81:b4:
                    ef:f8:ec:f2:25:ce:86:2a:1a:b2:ca:8f:7e:84:5b:
                    1e:6e:05:a3:20:da:97:7a:5c:6c:0b:a5:82:38:50:
                    0c:50:cd:de:23:d7:b5:6e:29:62:1a:10:ee:20:79:
                    5a:3d:5c:bd:54:31:2f:a0:a9:89:54:31:06:56:1a:
                    92:2f:9c:e8:16:96:6a:c3:4b:df:de:65:4c:81:fd:
                    b1:46:63:c8:69:72:02:03:c3:53:47:00:cd:58:d3:
                    da:1c:95:a6:50:fb:48:8f:0b:8f:98:36:6b:ed:11:
                    fc:57:ed:69:38:76:45:7a:68:16:fc:3b:a0:a1:2a:
                    5f:4b:a3:b8:91:b6:6c:0b:27:bf:5f:56:03:33:23:
                    ec:4c:bc:7e:da:94:cb:ea:3f:cf:9c:fa:cd:51:c5:
                    ca:3c:0a:cc:bb:d8:10:66:13:d8:9c:48:8c:62:8f:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3B:EB:8C:9D:9B:42:5B:96:5A:7B:9B:21:F9:FF:9E:4C:04:71:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:68:1d:9f:3c:b5:6b:e8:2a:5f:77:c4:27:ac:b5:4f:16:
         95:c1:33:2a:da:a7:9e:9f:26:e2:b9:78:d9:02:4e:81:c7:76:
         53:bf:3d:99:93:d1:fe:13:6d:32:c5:5f:bc:ce:d4:a3:2d:3e:
         11:60:96:ae:e0:85:28:6d:36:70:29:24:af:aa:78:03:02:59:
         76:f2:47:98:6b:2a:4f:1d:58:c8:a5:0a:e4:c0:96:51:00:f7:
         11:a1:a5:fe:c2:83:46:82:dc:59:b9:29:ec:aa:0a:b7:cc:dd:
         68:f8:69:76:b0:93:92:ef:dd:27:cb:78:a2:db:99:7e:2f:08:
         9d:3f:4f:90:5d:f0:5f:df:43:02:bc:da:de:ee:fe:c1:56:e1:
         06:51:3f:35:04:2f:ec:a8:97:54:41:07:c5:16:ff:6d:f8:45:
         b4:1c:68:b0:ee:47:81:58:95:f2:34:8f:06:20:fe:72:6c:24:
         98:a0:c7:4e:83:cd:fd:90:a1:5c:83:12:b0:77:2b:93:8c:6c:
         05:66:17:09:01:0b:b2:27:1b:c6:40:41:57:d0:5e:73:ac:9e:
         56:34:e5:2c:ea:1e:ae:d7:85:49:ae:c8:f7:d8:46:59:8a:6e:
         3e:b3:0e:72:43:21:d6:68:ac:7b:82:a2:79:23:9d:95:49:26:
         52:ee:84:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:09:59 2025 by rpki-client