Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43ef84b5-43ee-3a7e-b429-fc9e009ae826.roa
File:                     43ef84b5-43ee-3a7e-b429-fc9e009ae826.roa (raw, json)
Hash identifier:          cjQrQ58il7mojk6gdYF8KRmxOTnptNr3PxfNkhm2/Lw=
Subject key identifier:   74:32:6F:79:B6:4D:BC:36:41:3A:17:8F:48:31:90:A2:7A:44:C1:9D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858492184366A753EDC941EFBC340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43ef84b5-43ee-3a7e-b429-fc9e009ae826.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:8024::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:36:6a:75:3e:dc:94:1e:fb:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=a264e43c-7a20-4b09-a716-0ebcefff065b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:26:25:82:3b:7f:d3:d6:20:de:c0:73:c4:
                    2a:01:c2:52:78:1a:6c:21:ab:a8:41:46:66:86:37:
                    c3:39:20:bb:97:1a:77:79:6f:dd:62:06:51:26:86:
                    af:08:93:7e:e3:85:96:54:bf:99:23:92:f7:61:56:
                    c5:db:67:10:44:28:e9:d2:27:b5:ae:18:02:46:f7:
                    be:48:09:76:ac:c8:9b:e5:5d:c0:65:e0:66:6e:5c:
                    6c:c3:3c:6e:1f:29:9d:d9:7c:69:d7:0e:7d:a0:5f:
                    a9:48:28:c7:c4:c4:6f:51:e2:3a:d3:64:15:ba:24:
                    a9:62:07:ef:e7:8d:42:13:35:8c:cc:cc:10:c8:45:
                    fb:63:0e:f3:66:f0:3d:06:4e:c2:63:cb:98:49:dc:
                    62:72:ba:65:37:0d:94:85:ae:59:0a:ac:d0:f4:65:
                    6d:7e:c4:42:8d:07:16:8b:81:b2:db:f1:0f:e9:bc:
                    96:b0:70:bd:e0:5b:c3:bf:ff:7e:81:78:76:69:61:
                    a3:36:f0:92:8a:e8:0e:d5:3c:e6:7d:e1:f8:e4:6f:
                    cd:9c:dd:ed:74:dc:fe:e0:2a:69:d7:1c:de:a2:1c:
                    97:0f:6f:aa:3c:3a:2b:45:b3:e3:6b:61:08:be:5b:
                    26:15:87:15:e2:9f:1b:5b:51:87:00:5b:b0:23:91:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:32:6F:79:B6:4D:BC:36:41:3A:17:8F:48:31:90:A2:7A:44:C1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43ef84b5-43ee-3a7e-b429-fc9e009ae826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8024::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6e:89:6a:b5:ff:9b:d2:dd:62:b0:8a:02:b9:b2:eb:bc:02:
         b2:35:63:2e:6e:13:6d:67:61:10:5a:80:77:07:f7:fe:4e:61:
         6f:19:ff:b8:2e:9f:8c:99:37:c9:8a:a4:a4:13:67:56:b4:16:
         7b:7c:b9:77:e6:54:a3:6e:a8:64:af:a6:42:c5:a1:76:95:2a:
         4b:71:05:e2:8c:d9:5f:4e:43:a0:a2:a6:91:24:d7:e5:ff:33:
         10:e2:54:5b:a4:15:01:76:95:95:8e:fe:d4:15:af:5f:c3:2e:
         e5:93:8d:de:19:1d:44:f3:a5:c6:13:af:88:7a:2c:6f:40:69:
         7f:ab:fe:37:ea:0c:8a:ca:eb:1f:2a:b1:f0:61:8e:ae:c2:82:
         65:24:8c:2e:e2:3e:db:5b:7f:55:4f:00:58:1a:30:2e:dc:31:
         00:a7:74:d3:de:ae:e5:0d:4d:30:c9:ff:d9:38:fd:f0:8a:97:
         9d:e8:89:c8:9f:24:31:bc:65:4d:77:a2:38:5d:0b:b3:c9:94:
         7a:1f:1b:c1:58:e4:3e:bf:a4:50:e4:9a:9a:38:55:cc:a7:00:
         d2:5b:ca:b7:ff:e7:45:b3:14:ec:73:bb:d0:82:8f:17:55:8e:
         a4:4f:fb:39:ed:e6:b3:d1:11:f7:fd:75:69:7f:91:c2:c0:56:
         62:f5:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:10 2025 by rpki-client