Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35af795b-ae39-3248-b884-aa76cc67bc0b.roa
File:                     35af795b-ae39-3248-b884-aa76cc67bc0b.roa (raw, json)
Hash identifier:          GNWxhS+cg129A/O1M2oPYK/nmlgHOUePwhLUKgfjAk8=
Subject key identifier:   3E:22:21:D6:DF:1A:F0:25:C7:68:C3:E2:D2:0C:3B:DB:45:16:77:F5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB52277E83165F4643D6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35af795b-ae39-3248-b884-aa76cc67bc0b.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1005:b110::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:52:27:7e:83:16:5f:46:43:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=aa18f57a-6f98-419d-a38f-31f34fbdf347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ab:c7:c1:0b:d3:32:f9:b3:36:08:37:2f:6f:
                    e6:58:24:98:bb:7b:5f:58:53:93:2e:d3:0e:97:34:
                    2d:b5:73:ef:b8:33:09:04:6c:89:94:4e:87:6f:f1:
                    17:25:27:f7:c6:20:39:7b:b7:a8:af:e9:90:12:ab:
                    bd:69:b0:94:fb:4e:0c:37:08:23:71:79:cc:0a:97:
                    bd:c0:0e:1f:15:11:65:c7:88:33:0f:ff:fd:50:ac:
                    ba:95:be:bf:39:a4:e6:88:f2:eb:7e:26:79:3a:10:
                    d9:7a:84:78:9b:ad:03:4c:2f:6c:48:fd:17:a3:a0:
                    cf:35:68:db:8a:a2:c7:42:5b:07:a4:38:f8:1e:28:
                    de:19:18:f0:28:6d:40:bb:39:b6:f9:f9:69:5b:bb:
                    d9:fa:58:a5:53:0a:34:56:85:88:aa:b4:32:0a:bb:
                    52:02:a8:2a:84:ff:10:91:d3:55:a9:41:82:04:c3:
                    5f:95:98:d5:2f:c8:aa:5c:7a:cb:1d:71:1b:a1:6a:
                    be:be:87:ad:07:fb:34:71:b4:c4:e8:85:69:83:04:
                    6e:ce:cb:6a:88:00:dd:90:40:de:02:a5:e0:06:cc:
                    c5:63:9e:9e:62:07:05:64:9a:04:57:88:d0:51:fc:
                    6d:72:b9:d2:ff:ad:ba:83:be:d6:71:b6:71:31:00:
                    55:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:22:21:D6:DF:1A:F0:25:C7:68:C3:E2:D2:0C:3B:DB:45:16:77:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35af795b-ae39-3248-b884-aa76cc67bc0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:a2:44:64:93:2b:12:5a:4c:48:e7:94:1c:87:7f:cc:05:
         24:50:12:30:d0:83:9f:88:bd:c0:99:4f:a7:e9:45:ae:e0:af:
         62:8d:45:43:2e:39:27:04:66:e2:24:e1:b3:fa:9a:b0:37:df:
         bc:0c:de:ef:72:b3:34:1b:24:0b:39:dd:a8:95:78:d6:7c:fb:
         9c:41:72:e7:e8:68:0d:00:d1:c0:75:6e:94:9e:1c:2c:f9:6d:
         ac:6d:5a:f9:0f:32:42:c5:9f:fe:84:bd:57:40:bc:70:90:5b:
         72:86:24:08:9d:88:a5:f6:6f:41:f7:5d:88:e4:40:bf:b2:4b:
         b6:1b:ac:b9:35:2c:eb:8d:c3:a4:fb:9f:0f:57:2e:b4:c9:b0:
         5d:5b:60:2c:d7:63:03:73:11:55:9b:bd:98:bf:97:64:6e:96:
         7e:a5:b5:fe:7b:ff:24:e7:ee:d8:7e:42:38:9a:50:8a:6d:10:
         ac:fd:bd:a9:3c:08:12:11:f7:b6:91:da:08:29:c6:95:09:16:
         3c:8b:3f:36:c7:d6:3a:d4:70:2f:fc:9e:bc:fd:bb:66:55:b3:
         c3:42:7d:63:7f:a4:8c:fc:19:0f:b1:41:73:32:81:55:41:94:
         fa:36:53:9d:cb:3c:35:89:6b:df:04:5b:72:ad:3e:0d:01:5b:
         84:f7:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:05:15 2025 by rpki-client