Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31f3ae79-5056-35de-83ad-f73be943c9f9.roa
File:                     31f3ae79-5056-35de-83ad-f73be943c9f9.roa (raw, json)
Hash identifier:          olDDozOskkaRWatudlH89yQSeFs5tJGudD3GLi9QBi8=
Subject key identifier:   E1:AE:FC:0D:46:3C:22:E9:D3:A8:83:56:5F:F1:9E:11:37:B3:5A:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEAEE1E6C0B96DDBCAB200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31f3ae79-5056-35de-83ad-f73be943c9f9.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1017:b000::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:ae:e1:e6:c0:b9:6d:db:ca:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=9138b802-6de7-4ea4-9934-e29f17134030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:95:ba:86:cb:1e:80:63:cc:c0:ba:d3:ca:
                    62:c0:82:de:1f:69:ed:e9:11:ea:a6:4a:07:38:71:
                    4c:7a:54:2a:78:92:1f:09:bd:57:72:9a:fc:31:4d:
                    94:05:72:17:96:05:7b:21:82:68:2a:18:34:1b:29:
                    92:81:cd:00:b7:cb:0a:32:83:1e:ea:bc:48:a9:20:
                    7e:e8:95:92:c6:c0:2a:c4:b3:e8:62:ee:bb:6b:c7:
                    23:ad:96:75:8b:72:5c:5b:25:33:d5:68:09:6e:64:
                    da:b9:48:38:f3:b9:bf:a9:f9:e7:14:3e:b7:44:31:
                    e0:81:5a:b3:0b:d4:85:93:af:5b:38:5c:86:d4:6d:
                    72:c2:33:5d:fa:62:09:be:49:a2:d7:e6:b0:bc:9c:
                    d8:4c:5b:68:b7:0e:5d:b1:63:f0:c8:f2:dc:08:3f:
                    87:87:2a:9d:72:1d:43:b0:84:58:7c:2a:43:e5:64:
                    f6:f1:55:8a:b0:08:17:70:d4:b8:ff:e4:df:50:43:
                    51:b5:f0:13:c3:db:45:a0:9b:ad:be:30:11:45:66:
                    83:20:22:c4:e7:7c:a9:34:19:86:1e:e5:70:c0:3c:
                    ea:2e:76:8a:91:05:aa:e8:ba:5a:e5:9e:fc:59:4d:
                    b9:c0:51:65:65:e2:f5:ca:05:81:e6:13:e0:0e:e6:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AE:FC:0D:46:3C:22:E9:D3:A8:83:56:5F:F1:9E:11:37:B3:5A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31f3ae79-5056-35de-83ad-f73be943c9f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:85:70:38:c3:be:78:aa:63:6a:97:0a:49:93:45:37:2b:88:
         33:eb:79:c2:28:53:97:7f:e8:ba:42:d9:dc:ad:c1:8c:f4:ce:
         83:29:1d:45:17:68:5e:7e:e3:91:24:b5:6f:c3:75:b7:20:03:
         62:d0:83:36:61:a0:03:f1:da:a8:10:67:01:2a:7f:ec:a8:8f:
         25:65:07:4a:42:e0:40:05:91:20:08:20:63:84:60:48:ad:01:
         df:7a:a9:dc:24:7d:f4:cf:15:19:e2:ac:98:85:44:1e:6d:f7:
         9d:3f:23:48:ed:2f:37:95:4b:b6:1f:9a:3d:08:48:27:b9:05:
         cc:51:82:1d:df:9e:6c:15:90:64:b9:07:e6:1c:df:d2:31:d2:
         99:92:f7:e5:35:20:4c:74:97:b9:d2:e8:14:6a:c0:87:42:52:
         93:79:88:c3:dd:fa:b4:6e:fd:d2:87:73:f7:63:15:19:b6:fc:
         f7:2c:47:26:a5:c5:41:dd:6d:72:43:c8:10:3d:57:d4:3b:7e:
         f9:cb:17:fd:be:eb:37:24:0b:c6:dc:c3:ce:a3:c0:ad:24:c9:
         ac:d7:18:9c:e7:c3:a5:da:40:3c:f1:d5:0d:d7:00:a3:34:6b:
         09:14:98:03:ee:52:e3:e2:17:c8:80:a1:47:4f:fb:f6:77:dd:
         5c:ce:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:39:51 2025 by rpki-client