Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/f07a692b-0a34-30a7-91d1-b5e63cab7a36.roa
File:                     f07a692b-0a34-30a7-91d1-b5e63cab7a36.roa (raw, json)
Hash identifier:          IUAiKdDLu7yJ6xNjGgcJCNIwEK0OVyYhNfjv3zlrdR0=
Subject key identifier:   A9:E6:CC:15:21:46:1E:27:5E:33:AC:92:38:60:77:8D:CF:8E:C9:3E
Certificate issuer:       /CN=8bac97f5-d21c-48d2-aec7-850d7f93d5b3
Certificate serial:       010D0C9F432858488EAFCEE643C2D19F99DE3780
Authority key identifier: 50:E2:FA:1A:89:77:71:8D:A9:A2:CF:B0:D0:B0:AE:3D:50:0D:7A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/f07a692b-0a34-30a7-91d1-b5e63cab7a36.roa
Signing time:             Wed 15 Jan 2025 22:45:54 +0000
ROA not before:           Wed 15 Jan 2025 22:45:54 +0000
ROA not after:            Tue 15 Apr 2025 21:45:54 +0000
asID:                     401609
IP address blocks:        2602:f737::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8e:af:ce:e6:43:c2:d1:9f:99:de:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bac97f5-d21c-48d2-aec7-850d7f93d5b3
        Validity
            Not Before: Jan 15 22:45:54 2025 GMT
            Not After : Apr 15 21:45:54 2025 GMT
        Subject: CN=3ee2704c-d31f-4cf8-9c4f-d963ce323474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:2b:dc:15:79:7a:ea:bf:3e:2a:ad:da:bd:
                    5b:86:93:1e:2d:28:ff:b1:ad:53:4d:3f:f0:aa:bf:
                    ec:e5:53:11:58:d0:fb:d8:61:86:cc:cc:5a:55:50:
                    c5:58:49:aa:a8:f4:62:c9:38:d2:31:ac:17:64:d9:
                    2f:fb:af:1e:74:99:24:7b:c3:c7:fd:9c:d8:c4:16:
                    cd:5c:40:a3:83:79:51:db:37:73:07:d1:8d:9f:37:
                    1e:cb:3d:fe:30:dd:51:6a:06:7a:a8:6e:12:0f:ce:
                    a7:af:50:be:83:76:5b:16:2a:28:31:ae:c7:5a:b2:
                    25:5c:8e:5c:04:80:0c:30:83:54:0f:96:dc:4b:26:
                    f9:6d:7e:03:6c:92:ac:e0:cd:df:f1:91:48:41:ec:
                    e2:21:76:b9:03:a6:67:25:84:d7:c8:ce:f8:5b:97:
                    e4:43:bf:9e:79:fc:cd:d2:dd:9f:a0:11:17:5c:35:
                    73:cf:ca:31:43:05:71:b4:c1:df:8d:28:dc:cb:40:
                    8d:19:7f:13:f5:fa:2a:2f:11:da:22:fe:4f:4b:50:
                    af:4e:92:d4:0c:a8:c2:b2:93:83:6d:cc:aa:c0:5d:
                    b0:4d:36:f0:f1:6e:f7:76:af:f3:9e:cf:52:86:f7:
                    f9:ee:44:b6:64:e3:d4:4c:d9:5b:62:fb:e8:f0:e0:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E6:CC:15:21:46:1E:27:5E:33:AC:92:38:60:77:8D:CF:8E:C9:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/f07a692b-0a34-30a7-91d1-b5e63cab7a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.crl

            X509v3 Authority Key Identifier:
                keyid:50:E2:FA:1A:89:77:71:8D:A9:A2:CF:B0:D0:B0:AE:3D:50:0D:7A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8bac97f5-d21c-48d2-aec7-850d7f93d5b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f737::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:42:d1:de:9f:d4:37:e0:f6:fd:3f:7f:7a:e3:87:45:03:8e:
         ab:81:46:eb:1a:00:8e:19:ce:8f:1b:c8:aa:d2:c1:f5:80:bd:
         ba:48:44:4d:38:eb:6c:0e:52:92:88:e4:1c:6e:0c:ab:f5:0e:
         45:76:18:09:14:43:ae:a5:61:81:66:23:81:a8:6e:ba:48:1e:
         28:9f:c1:2b:91:a0:a0:54:f7:af:a3:30:28:f4:0a:a9:64:2e:
         80:61:3c:c3:36:26:04:c0:3c:c4:54:b5:9b:56:1f:4f:a9:7e:
         11:e4:53:aa:94:c1:80:30:aa:fe:7b:66:d4:e7:51:57:9f:d2:
         8e:29:dc:0b:a8:e8:be:37:8d:3d:f1:6c:10:d3:80:e1:d2:86:
         22:7f:36:e9:69:77:16:9a:f2:11:13:91:e7:c8:07:0d:30:36:
         82:8e:86:ed:17:20:72:a0:f4:b4:96:6e:fe:4e:25:b7:ca:2b:
         47:7a:44:91:e9:fd:5d:3f:a5:a8:8c:65:d3:1a:f9:d3:f0:55:
         0c:91:d2:a4:49:99:e5:eb:7e:8c:37:a6:dd:8b:cb:1f:b2:0f:
         7b:dd:11:8f:0c:0f:3c:2c:ca:c0:96:f8:4f:6c:bb:84:1c:c1:
         a0:71:b6:ad:13:01:69:42:9d:42:22:2c:a3:a7:a4:f9:4b:42:
         de:17:d5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:28 2025 by rpki-client