Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9fd4477-e1a0-313e-9a74-34339e07d978.roa
File:                     f9fd4477-e1a0-313e-9a74-34339e07d978.roa (raw, json)
Hash identifier:          ZfZNol7WzfSMJ3QnHQoHC0p/5u0QNlis+oERUBmDhcg=
Subject key identifier:   CD:C3:73:B9:C2:43:7B:1C:7B:5A:10:3E:3E:26:00:4C:98:E3:F4:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB4E79540FB2F2C0DA2B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9fd4477-e1a0-313e-9a74-34339e07d978.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1002:b158::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:4e:79:54:0f:b2:f2:c0:da:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=b003702e-b7d4-4bb1-97bf-475e24b407f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:1f:bc:a4:1a:08:b8:ee:a8:de:d9:76:07:
                    70:be:66:f9:20:05:09:5f:30:f6:9c:ef:0a:76:27:
                    9c:04:03:28:cc:5d:64:7d:c0:06:a0:0e:03:69:84:
                    bf:66:fb:27:c0:53:81:dd:02:1b:1a:43:77:a4:7a:
                    b1:04:a6:e3:af:44:cc:2d:a5:03:0a:9d:9b:ef:75:
                    05:a0:54:ad:aa:84:2e:73:96:31:18:73:a0:ff:0e:
                    cf:70:da:43:80:fa:b3:35:4a:d8:f9:d0:28:4b:14:
                    e1:67:c1:09:9e:f5:55:4a:30:e3:c2:ed:8a:18:99:
                    f9:52:0b:00:9a:cb:53:4a:5c:11:a3:b9:91:86:86:
                    95:2f:07:e3:85:9f:da:81:dd:83:cb:84:9b:31:7a:
                    f9:2d:be:4e:e7:54:df:54:38:07:c4:ea:97:68:7c:
                    45:e0:1d:a2:cc:84:76:e5:3c:f3:f8:e4:50:08:16:
                    b4:77:df:8b:b4:3c:ac:f3:b8:8a:93:b7:6d:52:e2:
                    e5:19:85:e7:3e:ad:86:2b:f4:13:5f:f5:29:36:05:
                    2e:9e:6b:92:7c:59:83:57:44:b6:1e:5a:ee:ae:1a:
                    3b:a3:e4:be:38:55:e1:f3:68:be:07:56:05:2a:ac:
                    e9:8e:5b:b2:5c:74:ee:10:8a:92:4f:c0:25:9e:ec:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:73:B9:C2:43:7B:1C:7B:5A:10:3E:3E:26:00:4C:98:E3:F4:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9fd4477-e1a0-313e-9a74-34339e07d978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b158::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:06:63:a3:70:ac:79:e5:7e:a9:c6:4b:8d:01:65:9e:04:44:
         03:0d:bd:f0:03:12:4f:59:e3:4c:eb:bb:18:af:35:7c:95:5c:
         9b:40:b2:55:2e:42:d4:3b:af:33:49:1a:ac:29:d8:45:b1:71:
         05:f5:e4:d0:92:3e:77:f6:1e:a5:97:6c:42:c3:83:e5:5e:21:
         d8:87:33:ca:2e:90:b6:f1:0c:58:ea:4a:2a:ea:fb:55:ff:12:
         02:df:99:c6:5c:c9:1f:96:f4:64:6f:d2:04:4b:2e:3c:12:c5:
         77:2f:0a:93:01:2a:7d:18:00:70:6f:d2:b2:b4:42:d6:60:ec:
         03:4b:f6:15:3e:58:c0:84:63:a0:b3:a0:1a:92:38:0c:9f:fb:
         d9:55:4c:d0:fa:0e:c3:d5:8e:50:06:2a:a7:35:84:24:01:b5:
         64:eb:99:1b:87:ce:71:2a:83:63:10:73:d3:73:f6:64:49:81:
         96:0e:ae:76:e5:7e:0f:5b:9f:56:15:b2:dc:33:4e:56:d3:72:
         e4:59:87:40:cf:24:62:9d:f8:e6:2e:02:96:1b:0e:28:70:fd:
         2b:d0:7c:4c:e4:44:64:18:af:12:15:50:d4:08:6e:ae:3f:48:
         41:b6:b5:77:05:ec:cc:88:74:88:5e:6b:b9:55:2f:37:d3:18:
         8e:18:49:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:10:41 2025 by rpki-client