Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa
File:                     17250f54-5119-3396-8248-a8f3e305a3f8.roa (raw, json)
Hash identifier:          CDymn9DUs+uHEv2Lco7HD/IQTYXob4Hzd5iMhGYCOjw=
Subject key identifier:   56:F2:31:29:94:77:88:96:F0:FA:60:9F:04:39:DC:93:81:74:46:93
Certificate issuer:       /CN=3a975a5d-2307-4688-a186-4a355ff45581
Certificate serial:       010D0C9F4328584886B07426211405402D65C100
Authority key identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     32473
IP address blocks:        2605:6740::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:74:26:21:14:05:40:2d:65:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a975a5d-2307-4688-a186-4a355ff45581
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=30670549-a4e4-4954-a82f-79fbda77365b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:8a:40:8f:cc:9f:51:19:cb:7e:f9:09:04:
                    bb:79:85:e9:7f:62:97:d9:01:23:49:5b:ea:af:78:
                    e6:ea:8d:bc:08:1f:d1:14:53:85:b9:ed:da:fd:17:
                    15:02:8d:20:37:34:f9:8b:8f:c3:62:8e:7c:20:6e:
                    fc:2d:9b:bd:fe:44:95:48:f1:01:e0:cf:81:ce:cc:
                    9f:2f:fa:b9:07:0c:95:a9:ea:37:60:16:29:64:4c:
                    06:a9:8d:f2:84:e4:37:fc:4d:28:80:5d:24:a8:16:
                    db:09:e2:ba:2b:b1:ef:60:69:79:1b:68:d7:18:d9:
                    1a:a5:8a:13:22:e3:2c:b1:33:fe:bd:d3:64:ff:7f:
                    d2:2f:d0:35:7e:11:a7:e4:a0:6e:86:0b:95:c3:32:
                    df:1c:e1:e7:69:5c:2e:e2:ba:9f:ae:3d:20:91:fe:
                    77:3c:ae:da:31:5f:5c:74:a5:02:13:7b:8f:09:2b:
                    3f:5c:af:a4:1e:eb:76:6c:90:ac:3a:dd:85:f7:ab:
                    40:48:5d:47:8e:93:79:ab:f0:f6:93:ca:69:6a:49:
                    13:63:19:12:3d:08:a4:1b:c6:13:93:f3:74:a0:b3:
                    4b:14:15:ab:c4:23:c6:b9:85:da:ce:41:ef:85:06:
                    9e:40:9c:f3:e4:7f:89:8a:3f:ff:de:71:86:aa:ce:
                    82:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F2:31:29:94:77:88:96:F0:FA:60:9F:04:39:DC:93:81:74:46:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl

            X509v3 Authority Key Identifier:
                keyid:0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:58:d8:81:2f:d3:f3:58:3d:7a:55:36:b4:47:c8:9f:e7:f5:
         c5:86:e3:64:2b:96:03:e1:65:dc:71:3d:7f:68:b3:4f:e9:b4:
         f2:d1:1d:72:0a:0f:96:4f:15:99:42:0a:de:b2:cc:dd:da:c1:
         fe:15:22:c2:89:a9:e0:f7:41:27:58:bb:c5:9c:51:54:61:49:
         83:f0:72:13:5b:61:9d:cf:96:67:29:00:f4:0f:de:0b:3e:4a:
         2a:be:a9:14:b8:49:bc:56:f3:03:f8:7d:7e:42:1f:33:5e:8f:
         56:00:00:86:a8:26:e5:ef:5e:1c:d6:cd:f0:ef:6f:cb:7d:14:
         7f:ba:13:d9:b7:71:2c:e6:f6:a8:b0:31:9b:fc:26:f1:de:09:
         73:3a:27:9f:ad:cf:a3:65:53:32:c5:96:db:a9:b7:65:09:80:
         87:96:dd:76:75:09:ee:37:c7:5d:4e:ec:2b:92:f6:ef:10:cc:
         ba:39:1f:ed:d6:43:4c:91:12:a2:77:7d:cf:17:fe:f4:e7:15:
         95:36:4f:38:f6:25:6e:44:0c:f0:fe:e3:cb:a6:0b:4a:ef:0f:
         e4:33:09:ac:e8:a0:ce:65:03:48:a8:8f:75:96:e5:c0:36:27:
         9f:52:ab:7a:51:d1:c0:72:a3:05:64:c6:f9:94:d9:0b:0f:c1:
         08:e1:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:35 2025 by rpki-client