Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bc444d-fc17-342e-a87d-42693e9d75f4.roa
File:                     41bc444d-fc17-342e-a87d-42693e9d75f4.roa (raw, json)
Hash identifier:          ZxbN2556LzIXpuP98he2q72Ky0yBM3+8EWtaV8sO6KQ=
Subject key identifier:   4F:75:41:05:FC:7C:80:23:1C:74:79:72:28:D1:9F:A0:0F:30:F6:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA0F9EFDBE626973ED680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bc444d-fc17-342e-a87d-42693e9d75f4.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1014:b020::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a0:f9:ef:db:e6:26:97:3e:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=f068afd0-158f-4ca6-8040-4e90709115a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:b2:26:eb:cc:f1:d1:4a:21:5e:32:06:8f:
                    21:32:38:81:3a:bd:39:b1:3b:ed:ac:d1:80:10:02:
                    00:12:54:7b:4e:06:43:68:34:f4:12:67:57:15:f5:
                    79:6a:fe:28:92:f6:72:ca:43:96:81:97:60:5c:f8:
                    d4:37:48:2a:24:35:11:55:79:95:d6:5a:11:40:92:
                    cb:ea:35:c6:79:78:94:b9:be:09:7d:1f:13:75:5e:
                    20:3c:36:01:27:a9:69:6a:01:30:55:d4:3c:81:1e:
                    02:48:9d:ee:fd:ef:37:70:0d:f4:9c:05:4b:14:ee:
                    11:6f:33:9a:08:48:63:85:34:52:98:4d:f7:54:7c:
                    93:25:c9:4b:b0:ba:59:92:70:cb:a2:b8:07:b5:c5:
                    9e:59:42:07:46:bc:83:87:09:7a:72:89:b3:1e:03:
                    89:d7:c8:ad:ab:15:50:e0:46:78:9b:47:42:22:88:
                    0a:3e:75:e6:a4:49:47:7a:d5:c3:1d:42:25:74:32:
                    9a:e8:cd:0a:b8:d4:a6:cd:86:47:68:b2:a8:60:61:
                    3d:4b:29:4e:c3:da:f6:3e:a7:8c:c4:58:39:4e:38:
                    c3:f8:bd:14:20:53:3e:3e:c7:a2:93:3d:b8:8e:8b:
                    7e:f8:52:ee:e5:e7:41:27:99:bd:33:f9:b7:5e:53:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:75:41:05:FC:7C:80:23:1C:74:79:72:28:D1:9F:A0:0F:30:F6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bc444d-fc17-342e-a87d-42693e9d75f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f7:70:9a:92:7b:a4:af:c4:66:80:72:53:af:f2:06:38:24:
         d7:06:86:f8:bc:3c:56:b3:f3:5e:67:84:f2:b9:a4:d7:07:30:
         64:29:73:38:ea:55:b9:91:66:f2:3b:b1:89:59:b2:0a:85:2f:
         d7:17:4f:c5:25:9b:12:c7:73:dc:bd:be:fa:5f:83:d3:9b:df:
         96:da:ed:48:33:82:42:8d:6f:16:d0:8d:af:65:0b:fa:56:2f:
         c4:08:c1:51:75:8c:ea:90:fc:0d:44:3e:c1:06:8c:66:d0:9b:
         eb:17:33:cb:f7:22:dc:b5:38:2b:ba:0b:f6:e4:5f:b5:1b:1e:
         07:20:72:a4:91:62:6f:7a:e3:bd:9e:21:60:d3:c6:79:89:10:
         d9:40:ae:a7:cf:cb:cc:d1:ad:9e:3e:ce:55:fa:28:25:6a:1a:
         0f:5b:46:ca:b7:d5:ae:0d:d9:18:5f:ea:96:ed:1f:4d:09:08:
         04:f3:c6:88:0e:fc:bf:20:93:0b:d5:3c:00:7d:2d:17:3c:16:
         ac:62:ab:85:df:d8:50:b9:42:fb:89:fd:45:f4:5c:22:b8:1a:
         36:0b:8e:8b:e9:89:a2:d9:3b:89:18:3a:bf:1e:29:7b:82:7c:
         8a:59:42:ce:e3:13:46:32:bc:7f:09:05:ef:d4:dd:79:04:63:
         5d:86:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:42 2025 by rpki-client