Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42248e33-c402-38d7-8e5c-418de6a01975.roa
File:                     42248e33-c402-38d7-8e5c-418de6a01975.roa (raw, json)
Hash identifier:          fR9henLshh+M/zUSjrB/5iTAGunTTTAppbzwEGuKaGc=
Subject key identifier:   64:B1:14:F5:D2:DB:C2:95:A0:A6:BF:A1:33:B8:48:F9:67:37:25:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB5A1C2A1E92429DF4D940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42248e33-c402-38d7-8e5c-418de6a01975.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1008:b030::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:5a:1c:2a:1e:92:42:9d:f4:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=e8ea14a6-630d-4b23-b424-a29c331e7679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:a8:f7:4f:e9:5a:72:77:91:f8:d4:70:c6:
                    66:75:05:d2:67:01:30:9d:21:92:b9:4f:5e:0d:bc:
                    f3:68:a4:d5:1a:b4:87:d5:d8:17:9c:2d:04:1f:00:
                    bb:74:0d:76:66:76:3f:8b:8e:95:fb:84:ac:10:8a:
                    1d:21:29:17:a0:07:e7:ae:4d:f0:45:b5:22:17:80:
                    8c:7a:09:c1:15:08:d7:0d:a8:ee:01:15:7d:8c:9b:
                    47:9c:4d:f6:95:e7:81:bc:97:25:01:68:ef:32:fe:
                    fd:92:aa:8f:d3:a0:ad:b5:dc:61:c2:8f:72:35:18:
                    2e:bb:a8:29:09:9d:4c:af:32:ee:d7:ae:a3:b8:22:
                    8a:75:94:60:f0:b1:0d:50:42:1d:0e:02:6a:fa:6e:
                    58:f3:75:5a:e0:99:00:c6:f4:df:7b:9e:76:a8:49:
                    ed:e7:bd:c8:e0:42:a5:c2:9b:cf:6f:04:a5:f1:ae:
                    16:e9:3a:1d:91:21:27:02:46:e0:9f:b0:43:c0:6a:
                    ec:c0:fe:2c:5e:ae:00:ee:57:d8:73:0b:21:9a:d5:
                    68:8c:0d:63:5f:81:de:24:32:74:6f:43:58:71:05:
                    3d:88:db:86:87:60:33:89:37:d7:b7:0b:4c:30:30:
                    3c:65:5a:ce:74:8e:4b:db:b4:06:ed:19:90:e2:81:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B1:14:F5:D2:DB:C2:95:A0:A6:BF:A1:33:B8:48:F9:67:37:25:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42248e33-c402-38d7-8e5c-418de6a01975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:71:c1:bb:da:3e:e9:4c:36:bb:97:a0:99:ef:83:6a:c0:86:
         37:24:14:cd:b0:20:92:83:9e:a4:ab:64:dc:50:82:75:b4:79:
         bc:12:20:5b:63:0e:55:20:4b:05:9c:a4:6c:26:56:b9:f4:80:
         db:8a:01:d3:1f:a6:a9:24:70:02:5b:9c:ff:a4:4d:85:9b:5c:
         34:21:aa:d7:09:7d:24:78:e0:c7:7b:7e:37:a5:f9:27:0d:19:
         27:76:aa:70:c1:70:52:42:78:7c:d4:21:26:06:b5:73:7a:ac:
         28:45:ed:3d:90:de:52:74:ea:de:bf:09:21:4d:96:90:78:f3:
         e0:5e:e6:b3:60:96:a0:ab:84:ee:e6:41:d8:65:0e:c7:dc:66:
         00:74:ef:7e:ab:d2:3c:fd:85:81:f5:f7:b1:a3:95:b4:a6:f3:
         c3:50:a9:7f:dc:61:3e:53:ab:67:63:39:90:63:fb:f7:f7:fe:
         8a:94:9a:fd:9a:db:eb:c3:92:8b:5d:28:0c:47:93:4f:b4:e2:
         cb:47:52:ed:24:4f:85:30:0d:13:bb:3f:4b:6f:42:85:e8:ab:
         2b:98:78:3b:52:50:06:94:44:52:13:6c:1d:77:d8:b3:f8:05:
         eb:d1:b3:b3:f4:e2:a9:55:cb:6b:19:73:e2:0c:35:ca:38:34:
         00:e4:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:29 2025 by rpki-client