Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa
File:                     fd3aebe3-a766-37fe-998a-845bb98c23a7.roa (raw, json)
Hash identifier:          fXYyaOdHGp2MDitnWqIyKpdNoNKxWLoiz0HKjHh3B7k=
Subject key identifier:   B9:F3:13:76:59:06:11:52:A6:6A:76:96:BF:26:E3:71:70:57:3C:B9
Certificate issuer:       /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Certificate serial:       010D0C9F43285848EF6163F978EEAF04A582E800
Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     40555
IP address blocks:        2607:b100::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:63:f9:78:ee:af:04:a5:82:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=2613ecec-55da-4e5f-beb4-b019af1ff309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:b9:e1:65:86:25:e0:4a:8c:cd:72:ac:0f:
                    5e:e3:86:b1:af:bc:d6:9e:10:3a:86:e5:8e:2a:9e:
                    59:a1:aa:b6:71:5b:ac:c3:e4:3c:46:96:3a:f4:79:
                    35:89:c4:ee:0c:23:91:e9:da:10:53:ce:0a:a2:26:
                    70:e8:d2:62:94:8a:c4:f7:cd:2b:a5:48:71:a4:64:
                    3c:e2:2b:d4:6d:58:a9:df:47:ac:9c:81:c7:c9:08:
                    72:65:95:56:2f:35:56:9a:df:44:d6:93:04:a3:33:
                    aa:5a:93:48:b1:40:12:e7:10:1a:0d:06:57:0e:93:
                    c7:e7:fe:72:53:e2:64:a6:fa:0e:27:08:0f:69:71:
                    77:7b:07:9f:3b:e1:6a:24:20:c4:8a:7b:34:af:ec:
                    96:f2:fa:95:3c:80:3c:40:15:ee:5a:23:ce:5f:c9:
                    3d:82:c2:16:31:a9:19:74:54:86:cc:e8:96:92:94:
                    76:5f:65:ab:2b:ec:a9:e3:93:70:cd:f0:94:b7:d8:
                    85:cd:c3:a8:e0:ef:5f:61:86:90:f8:fa:7e:45:3f:
                    dc:ee:43:83:b8:c7:18:17:c8:e6:66:30:93:27:85:
                    96:1a:1a:7d:db:d2:e3:3b:4c:3c:f7:6c:73:7d:3b:
                    70:09:dd:d5:cb:db:21:ea:93:51:b2:9a:1c:98:dd:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F3:13:76:59:06:11:52:A6:6A:76:96:BF:26:E3:71:70:57:3C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl

            X509v3 Authority Key Identifier:
                keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:65:1c:8c:54:95:4f:c7:3b:f7:0f:06:23:55:4f:6a:13:05:
         d0:51:c8:45:3a:03:1c:be:ef:b8:69:ae:27:67:e2:68:ea:fd:
         3b:8e:31:85:f5:e4:8d:ea:9c:3d:cc:93:22:82:e2:86:49:2d:
         e9:69:e4:84:52:d0:fe:16:b7:53:ea:4b:94:d4:7f:18:b7:5e:
         ff:db:82:f2:39:21:b9:c6:6f:c8:1d:8f:ee:98:3d:d7:ba:df:
         05:8c:ff:91:6f:8c:09:fe:aa:06:be:39:5e:12:c9:c5:24:12:
         be:0f:40:d2:80:09:05:57:35:76:ea:c8:0f:28:68:1d:56:28:
         46:87:cd:8d:60:f5:da:9b:dc:e3:7b:d8:91:11:8d:e5:04:7c:
         a4:28:b6:8c:e8:bb:66:48:72:0b:bf:6a:b2:2e:a4:b9:d1:e5:
         35:fb:a1:99:0f:a7:4c:04:1d:34:57:b3:61:9f:92:b7:44:23:
         08:87:a8:89:db:6f:2c:bf:a0:aa:02:d4:54:83:ee:d0:d6:eb:
         d8:1a:e0:f2:ff:be:22:0b:1f:56:c9:c6:89:55:84:85:a5:c5:
         4c:60:98:b7:9b:55:77:9d:61:39:e9:2d:fd:25:9f:06:4e:ef:
         73:3b:5d:9b:3e:ff:48:ce:fd:ad:36:28:e9:3d:4c:1e:b5:f9:
         be:88:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:21 2025 by rpki-client