Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4/c56eea94-b3a7-3456-b101-628d28aedb2d.roa
File:                     c56eea94-b3a7-3456-b101-628d28aedb2d.roa (raw, json)
Hash identifier:          pGlNpW4xit86CKBNLYEl0ueHihAC18+lIxXb7jG1VXQ=
Subject key identifier:   2F:2E:F1:C3:B7:4A:EF:E7:BA:32:8D:11:F2:73:22:3D:B8:7E:A1:E7
Certificate issuer:       /CN=73aeeb26-083d-498f-b36a-5f0bfb5166f4
Certificate serial:       010D0C9F43285848B5185E1D2E63EB3187F24A00
Authority key identifier: 01:47:E6:0A:7E:92:F2:42:7F:9C:1F:14:F5:6F:DC:5F:A4:8B:CB:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4/c56eea94-b3a7-3456-b101-628d28aedb2d.roa
Signing time:             Wed 29 Jan 2025 16:57:18 +0000
ROA not before:           Wed 29 Jan 2025 16:57:18 +0000
ROA not after:            Tue 29 Apr 2025 15:57:18 +0000
asID:                     397081
IP address blocks:        2602:fe32::/36 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b5:18:5e:1d:2e:63:eb:31:87:f2:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73aeeb26-083d-498f-b36a-5f0bfb5166f4
        Validity
            Not Before: Jan 29 16:57:18 2025 GMT
            Not After : Apr 29 15:57:18 2025 GMT
        Subject: CN=10150b7f-e5b4-4362-acfb-d6313e2c4815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:f7:08:e0:6e:0b:c7:3c:1b:0e:fd:8e:43:
                    f0:81:b9:ae:66:7e:ec:38:c8:a4:d1:86:25:d2:0e:
                    7d:0a:9b:7b:f6:d5:0d:da:f6:4f:d6:4e:f3:32:47:
                    07:8a:e7:13:6f:c5:dc:7a:4a:ba:f1:8b:87:15:b1:
                    a0:4a:c8:51:78:8e:01:3f:9c:21:1b:fa:71:d2:71:
                    18:25:76:a3:b0:1b:9a:91:03:94:33:a9:d1:8f:c7:
                    4e:10:2c:01:46:9d:a6:66:a6:3d:f4:d9:d3:39:d3:
                    39:29:85:3b:ea:7d:ae:76:d7:7b:cf:98:54:c2:be:
                    f7:c1:97:be:4a:a2:1f:f5:16:1f:12:64:48:c5:58:
                    11:56:3a:a5:d9:29:3d:25:79:87:54:e7:b6:d4:d1:
                    61:2d:ad:7e:07:93:2e:18:7b:3a:f4:1f:7f:1a:74:
                    f9:e7:ee:66:38:de:93:8e:ef:b8:a7:3e:ad:7d:28:
                    55:73:c3:4b:01:25:91:8c:8a:de:ec:89:18:0b:78:
                    3d:e3:9c:d8:a9:a0:8d:9c:50:68:df:dc:bb:55:ca:
                    83:e4:f9:2e:a3:42:fa:24:44:73:ce:14:b7:09:21:
                    9d:a2:80:77:d9:89:ee:9f:65:37:e0:0f:c9:6a:f4:
                    8d:a0:51:24:5b:06:70:ec:28:5e:a9:21:3a:57:cf:
                    41:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2E:F1:C3:B7:4A:EF:E7:BA:32:8D:11:F2:73:22:3D:B8:7E:A1:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4/c56eea94-b3a7-3456-b101-628d28aedb2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4/73aeeb26-083d-498f-b36a-5f0bfb5166f4.crl

            X509v3 Authority Key Identifier:
                keyid:01:47:E6:0A:7E:92:F2:42:7F:9C:1F:14:F5:6F:DC:5F:A4:8B:CB:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/73aeeb26-083d-498f-b36a-5f0bfb5166f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe32::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:89:10:f9:e2:58:e7:ac:9b:da:e3:6d:4d:50:c2:ab:ab:80:
         03:43:88:30:66:05:23:a2:fd:8e:56:87:db:41:eb:06:25:23:
         7b:c0:d2:5b:c5:89:d4:3f:d1:a3:7b:ee:e8:02:cf:1f:41:98:
         ab:c3:80:27:ed:c6:23:b7:db:7b:4b:aa:e7:01:7a:72:23:0f:
         13:46:69:60:11:c4:ac:a7:c3:4c:c8:18:a5:c6:95:c8:15:2a:
         49:9d:44:10:a2:38:63:09:94:3e:a9:e9:ae:64:42:f5:80:29:
         eb:a0:a4:4b:7a:29:8d:e6:6e:fa:0b:b4:ac:28:e3:80:9b:3a:
         5e:15:7c:23:9a:3c:74:3e:22:7f:97:83:c6:6b:10:fd:ca:61:
         cb:24:8b:4b:3f:09:c6:81:40:87:32:34:8f:c3:e9:45:66:00:
         c1:76:93:67:f4:35:fe:01:93:cf:d3:ad:9b:2a:0d:69:cc:bc:
         ee:28:64:5e:fc:f1:96:7c:c5:2b:88:ac:db:70:17:6e:bb:e3:
         46:5f:ca:58:19:5b:9e:66:4f:93:fb:e4:68:3b:a6:bf:6d:46:
         77:65:e0:e4:5d:15:af:fb:e2:74:2b:3a:b0:66:a5:b8:af:b0:
         51:22:b8:75:c1:aa:9d:55:4e:04:dc:0d:bf:33:d4:8b:9d:38:
         6d:fe:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:44 2025 by rpki-client