Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/61a0c69c-f9ed-3327-9926-b1cddffa8f79.roa
File:                     61a0c69c-f9ed-3327-9926-b1cddffa8f79.roa (raw, json)
Hash identifier:          yQDs0vQ6YG+aBkUF6V+UpXs4Unm1Z1cOE2TwonN5oLc=
Subject key identifier:   5B:EE:3E:39:40:61:5D:91:F8:79:E7:35:95:CC:18:90:E4:09:74:CC
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285848BBBB8273C175F410D2C40720
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/61a0c69c-f9ed-3327-9926-b1cddffa8f79.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     199203
IP address blocks:        2602:f9a9:e00::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:82:73:c1:75:f4:10:d2:c4:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=641bf53c-9928-49a8-9040-3ff7d530d823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:c4:e2:63:5d:b3:72:53:73:9c:19:a1:09:
                    fa:b0:78:4b:7a:ea:05:4e:2d:84:da:ee:80:7f:cf:
                    2b:df:e9:de:bb:0d:d7:10:8e:ea:f0:7c:ee:94:57:
                    f6:ba:d3:55:a5:46:da:c5:61:20:2a:50:51:e5:bc:
                    cc:b3:a2:aa:c7:46:c9:09:24:e3:f1:70:8a:b2:19:
                    8d:b1:a1:ee:09:b9:ad:d3:f6:09:bf:f0:bc:26:c8:
                    90:c1:34:f2:1d:96:25:fa:34:71:3c:ad:7d:82:57:
                    c0:08:d9:ee:ed:35:32:de:98:56:e4:52:c2:da:8f:
                    99:25:2f:35:bf:e9:29:7a:76:4c:57:99:e4:86:e7:
                    33:a5:0b:14:70:1e:d4:2f:5c:ef:65:5a:17:9f:c3:
                    9d:79:36:35:58:31:96:e8:e7:66:f6:e1:8d:ea:97:
                    dd:9e:00:d0:ab:a0:3a:52:0c:51:b9:fe:04:02:9b:
                    d0:0b:90:a8:cc:2e:28:c5:c9:5b:4c:0a:67:ce:4f:
                    c9:27:7d:6f:a0:3f:25:95:93:a4:03:c6:ac:03:b9:
                    9c:42:23:42:73:41:1f:c2:cd:94:8d:40:d8:fe:bb:
                    4c:4b:96:ea:ed:ff:5d:55:d3:c7:2d:62:f2:d9:51:
                    bf:ee:f1:a5:73:2c:5c:dc:39:e4:79:43:1d:51:ea:
                    44:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EE:3E:39:40:61:5D:91:F8:79:E7:35:95:CC:18:90:E4:09:74:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/61a0c69c-f9ed-3327-9926-b1cddffa8f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:e00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4c:db:3b:5b:97:66:6c:61:86:5c:5f:ed:9f:06:ff:dd:04:
         1d:7c:6d:5c:96:ee:9d:07:e5:34:ae:d3:72:1f:ad:e1:e7:c2:
         b8:f4:fa:2f:66:43:3d:d6:99:57:81:cf:5e:67:1a:61:49:38:
         e3:c3:56:7b:a2:be:20:44:4e:b4:d5:e5:14:9a:45:52:b3:ae:
         70:82:af:61:8c:8c:ba:2e:e1:7c:bc:11:de:91:d5:95:ca:18:
         dd:b5:d2:22:57:69:ba:47:1a:36:63:94:c5:3c:d9:1f:e5:34:
         67:b9:3d:da:94:2f:1a:07:d4:d6:80:20:1d:11:24:b5:ac:0b:
         15:e7:1b:ff:e1:78:e1:ce:fb:4d:79:84:fd:fc:71:05:06:b1:
         62:ab:53:d2:b1:97:7f:08:35:a1:52:33:08:58:6b:8f:20:be:
         36:ec:c3:a0:40:35:f8:a1:e1:bc:40:a5:a3:59:a8:59:91:6d:
         f3:8a:32:0d:d4:57:7f:0a:96:2f:3e:94:67:de:3b:67:c2:d9:
         b0:0e:65:a9:32:6c:92:a9:cf:f6:8c:96:de:d1:96:08:03:6b:
         39:94:df:6d:60:19:58:89:2f:c6:ab:14:21:68:ab:52:96:e1:
         06:c1:03:9a:b2:ba:09:72:0d:05:28:f2:13:15:c4:46:dc:8c:
         2f:6e:88:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:40 2025 by rpki-client