Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6987cfd-05d8-361f-8c6a-563f8944778b.roa
File:                     f6987cfd-05d8-361f-8c6a-563f8944778b.roa (raw, json)
Hash identifier:          8ONIxT9uMkPefR0hTIFr0O2jXghgoMgPLB2OIQScW2Y=
Subject key identifier:   D6:E4:C4:FA:44:93:FA:02:8D:BD:3F:75:70:64:AD:3D:E2:A3:C5:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB58AA75CECFA74BE8A680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6987cfd-05d8-361f-8c6a-563f8944778b.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1007:b1fe::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:58:aa:75:ce:cf:a7:4b:e8:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=22bc2fe8-5d11-4f07-8d48-657e28a03209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:6a:de:46:78:a6:63:0d:95:cf:fd:7c:28:
                    09:25:a5:3c:8b:00:13:b1:59:47:df:e1:fb:5e:92:
                    40:5b:31:10:6c:2d:35:76:dd:67:dd:27:2f:47:da:
                    1d:85:9a:23:14:bb:40:70:ef:19:e0:62:6d:3f:d2:
                    86:07:40:02:56:df:4d:db:d8:a0:be:64:34:d5:f4:
                    aa:81:bf:a8:a6:2f:5b:58:79:90:55:cd:9e:46:98:
                    13:37:1e:c6:8c:4a:ce:5d:bd:ac:7c:66:70:05:38:
                    8f:64:84:f3:e4:5e:0c:2e:37:6b:f1:0b:55:df:0c:
                    56:42:c0:fd:e9:88:ca:3f:54:22:4b:6e:14:b9:30:
                    63:6e:51:d7:b3:f5:61:e2:a8:0a:94:0a:2a:c5:1a:
                    41:15:b4:c6:f3:2a:be:7b:df:1f:ef:13:1f:6c:6c:
                    b6:9e:7c:bd:48:83:af:d7:4a:c9:58:a7:e9:43:e0:
                    ad:35:33:46:4c:d4:2d:1d:60:93:3b:35:22:0a:bd:
                    af:70:29:f1:90:23:e9:74:46:51:46:41:3c:1b:ed:
                    2c:c7:e1:fa:3b:d5:10:ef:72:8c:c6:8a:7d:f7:df:
                    e7:48:6d:93:0a:5e:67:1b:8d:c5:15:12:63:45:c3:
                    47:ca:82:20:f5:a7:b2:89:22:3b:80:04:4f:b9:95:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E4:C4:FA:44:93:FA:02:8D:BD:3F:75:70:64:AD:3D:E2:A3:C5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6987cfd-05d8-361f-8c6a-563f8944778b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b1fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:06:8e:43:a2:1b:12:fc:3e:14:74:de:a3:b3:e6:4c:7a:c2:
         9f:71:db:fb:a5:29:3d:30:0d:9d:8e:6c:ac:21:f7:fd:d8:b7:
         af:c2:e4:6e:a5:0f:68:a4:99:28:a0:1f:ad:58:56:2b:fe:3e:
         2e:8e:10:5a:05:e3:d4:63:46:d5:2d:fa:9c:85:b1:56:5a:61:
         e5:a7:3e:c9:2e:8f:30:21:d1:f4:2a:e5:a8:00:aa:b6:ca:1b:
         11:30:75:c1:30:2f:c5:a4:4f:2f:a4:be:de:8f:71:09:ef:5c:
         f7:ad:bf:c6:35:75:f3:03:12:61:60:12:4b:9b:d8:43:58:f9:
         3c:80:c2:98:41:35:e9:e3:ad:a4:dc:d2:2d:03:cf:c2:db:e7:
         57:b6:16:44:b3:cb:44:a2:23:77:f1:9f:64:0a:56:69:03:4e:
         07:3f:c1:b3:e0:62:ab:75:5f:d9:ca:25:83:41:b4:3f:4b:ac:
         49:43:93:94:28:c7:eb:98:bd:60:f6:d8:fc:23:5b:8e:f4:61:
         cf:bb:42:37:11:9a:f0:21:f2:12:7d:38:24:7f:76:7e:82:27:
         e0:a2:2e:c2:5e:4c:ab:03:16:31:52:75:cd:8c:7a:9b:21:39:
         16:fe:3a:f9:0f:cb:16:73:71:ae:a4:16:c9:b5:a7:80:32:a6:
         90:cd:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:44:43 2025 by rpki-client