Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa
File:                     ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa (raw, json)
Hash identifier:          qHsFlfbNwb4WhQhpTqvkht3YRRFCCT9knHGDT0MrYjg=
Subject key identifier:   39:9F:F3:0D:E4:FC:79:DD:85:60:4F:22:FB:00:2A:F3:1A:07:4D:A2
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F4328584878C689B7F333F617D8A42C80
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa
Signing time:             Wed 08 Jan 2025 02:23:55 +0000
ROA not before:           Wed 08 Jan 2025 02:23:55 +0000
ROA not after:            Tue 08 Apr 2025 01:23:55 +0000
asID:                     47069
IP address blocks:        2602:f9df:200::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:c6:89:b7:f3:33:f6:17:d8:a4:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Jan  8 02:23:55 2025 GMT
            Not After : Apr  8 01:23:55 2025 GMT
        Subject: CN=35a1179f-854d-421b-89d4-c40bdb106969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:51:8e:76:a0:af:27:48:c0:84:09:63:3d:37:
                    ea:36:10:7e:a5:cc:9c:82:31:32:04:cc:bf:b2:0a:
                    1f:e5:cd:96:5c:cb:14:b1:57:6d:e2:b7:e8:19:59:
                    65:fd:37:17:68:fb:a5:2c:af:de:1c:ba:20:43:35:
                    35:34:9d:d3:f6:1a:1b:5b:da:9b:19:78:20:5c:b9:
                    b0:0e:05:58:2c:c7:9f:68:b2:c7:f8:59:fb:96:19:
                    20:08:e7:32:dc:e9:ce:96:18:49:46:82:10:66:1b:
                    69:04:bc:bd:87:b5:3e:71:95:43:5d:27:5a:f7:ac:
                    52:2e:40:83:3d:d6:ab:10:ec:04:66:c3:fd:f0:eb:
                    b7:a4:08:dd:c3:cd:fb:be:4d:2c:ca:54:a9:73:1f:
                    f3:a6:23:f6:ce:fc:c2:d8:50:eb:83:1f:2f:b8:66:
                    b0:32:fc:68:42:fd:5d:73:5f:e3:6e:da:31:1d:d2:
                    bb:06:59:59:76:6a:da:58:86:b2:c6:1a:76:55:a9:
                    04:35:a9:5d:84:43:9d:01:dd:10:bc:05:5f:4d:c8:
                    d3:26:df:bd:8f:ea:af:4e:1a:59:be:3c:9c:1d:a6:
                    96:16:aa:3b:b9:81:48:28:41:97:13:ff:8c:98:05:
                    27:a3:cf:99:a9:d4:58:88:30:6d:f3:75:ee:0c:01:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9F:F3:0D:E4:FC:79:DD:85:60:4F:22:FB:00:2A:F3:1A:07:4D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:42:82:89:0b:68:06:82:49:1d:93:f2:ec:4c:b7:fd:15:91:
         72:1d:6f:ce:da:8e:85:e3:9c:90:14:9e:50:ec:b3:9f:c4:ab:
         de:67:b6:a3:f3:ca:41:f0:cd:14:ce:18:ff:f5:78:45:eb:a8:
         b8:9a:66:d0:b7:cc:ff:97:04:4f:58:0e:a1:b8:62:73:a4:4d:
         7c:f9:85:f4:27:55:1a:e6:3e:ab:3d:8f:7a:66:d3:dd:91:0e:
         aa:e9:7e:9e:e9:89:00:e4:f9:17:e5:3c:c6:df:2f:39:1a:e4:
         47:16:eb:ad:74:2b:f3:aa:09:50:76:61:ca:a3:3f:69:b2:a1:
         94:b0:0a:72:9c:8c:da:88:6e:ab:26:1b:7f:f7:04:89:5d:e6:
         80:6e:b2:a5:67:3b:6a:9b:29:99:8a:a2:e8:43:0e:86:76:30:
         71:b7:c7:85:0c:e3:c6:34:85:82:dc:2b:46:66:aa:b5:32:79:
         71:30:72:e6:95:9a:d5:c8:2a:e6:ac:84:54:86:90:35:23:bf:
         15:de:1e:a8:38:7c:19:87:56:aa:bd:15:37:99:4d:af:5b:32:
         8a:72:c9:dc:36:72:f7:ba:8c:cc:da:7b:5e:0d:4e:39:4a:86:
         d7:86:82:fb:a2:48:e2:2e:46:0c:ff:d3:de:fe:ec:de:0b:f3:
         ca:c6:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:37 2025 by rpki-client