Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66adf273-841c-3924-b660-4fb21d6ac25f.roa
File:                     66adf273-841c-3924-b660-4fb21d6ac25f.roa (raw, json)
Hash identifier:          JG/PNOCbi+PebzHOLAtZsDDOO3TyKF3JCxZr67tiG3A=
Subject key identifier:   B6:68:1D:C9:7F:3C:9B:F0:E3:34:C0:B6:03:8F:37:8D:2A:EC:C8:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858492184396275CEDC9DD4C63F70
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66adf273-841c-3924-b660-4fb21d6ac25f.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:a650::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:39:62:75:ce:dc:9d:d4:c6:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=910ed536-b56b-4b55-9db5-3e95060551b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:47:77:8c:15:84:bf:54:b7:f9:1f:e8:e1:
                    e2:6e:a3:71:80:a1:94:2c:77:56:58:6d:03:1f:5a:
                    2a:ef:06:5f:88:be:b0:03:98:30:0b:33:45:69:10:
                    ed:8f:38:e6:33:90:8a:96:cc:9a:72:c9:ad:c6:c3:
                    80:7c:b4:91:f4:44:b5:29:45:cb:47:52:f1:b9:aa:
                    59:65:e4:6a:fb:d0:ef:56:37:0c:24:31:4e:9d:68:
                    82:82:36:86:2c:85:0a:ab:47:dc:f4:77:83:1b:03:
                    f2:27:7f:29:ee:85:cf:a9:8d:0a:55:33:01:6a:b2:
                    ec:42:42:e8:2d:cb:76:c0:4c:23:24:3c:37:40:73:
                    1d:0d:83:93:58:67:77:f8:21:f3:0d:19:8b:36:d4:
                    f8:8c:6e:c0:0b:c7:14:59:32:0a:d5:84:ab:3a:9f:
                    ed:2b:33:05:4d:4f:0f:a8:8b:e2:05:2a:26:b8:57:
                    f7:72:4c:ff:e5:ee:95:b4:32:8f:b4:c7:e8:e0:12:
                    d6:f6:34:5f:d3:55:6e:11:40:79:bc:21:bd:6d:a5:
                    e2:26:49:4a:49:b2:ba:b9:78:fb:d7:5d:c9:51:a5:
                    45:af:b9:c3:14:b3:00:db:da:15:d6:62:12:d7:d5:
                    d7:af:e8:47:e5:85:04:dd:9e:62:38:9d:59:d6:0c:
                    e9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:68:1D:C9:7F:3C:9B:F0:E3:34:C0:B6:03:8F:37:8D:2A:EC:C8:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66adf273-841c-3924-b660-4fb21d6ac25f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:a650::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:b2:30:1a:aa:4e:df:fb:75:fa:6e:3b:9b:ae:1e:09:9f:
         1e:89:a8:d9:06:06:d6:25:9c:41:24:d0:01:5b:63:b8:0c:95:
         f9:a5:ed:f8:30:6e:9b:4e:2b:0e:67:30:5a:9d:7f:cc:dc:19:
         fb:42:06:31:2c:e8:a8:67:aa:94:2b:0c:94:45:5e:71:57:0b:
         31:c9:6b:6a:70:dc:07:ae:95:e2:78:01:f7:3b:ec:7f:2e:e5:
         e1:c1:6f:63:30:e7:92:fe:c9:19:cb:c8:10:7b:83:72:29:10:
         64:c6:e9:b7:14:dc:c8:65:6f:3e:f7:3b:9b:da:2f:ed:12:2b:
         fe:74:d9:00:d2:fb:fe:12:9e:d2:15:3d:90:1f:c8:f3:4a:44:
         45:56:f7:e4:e8:1e:6a:16:e2:47:ed:04:8f:29:c5:43:19:35:
         93:2a:bf:d7:53:2a:05:e3:28:f9:e1:76:b4:5f:7d:67:1c:78:
         ed:f7:e2:b4:ef:78:79:b6:15:70:e1:b1:7f:8b:1f:73:f0:82:
         3d:26:04:a9:82:5d:a2:c8:23:7b:37:ae:99:54:02:2a:69:f5:
         a6:24:2d:c4:16:8e:28:85:52:73:4c:ee:74:91:f0:b4:75:b4:
         86:4e:6a:ef:86:7e:21:e7:71:ed:b0:0f:84:0e:45:bb:4f:c3:
         f7:ec:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:56 2025 by rpki-client