Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa
File:                     e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa (raw, json)
Hash identifier:          ONkg4+nT4LGS3IzhVa7bkW+ls0TA9FEw3t56TBMu16c=
Subject key identifier:   CB:0B:5C:73:14:DD:79:BE:D6:DB:E6:6B:6C:B2:11:AA:CF:93:20:40
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F432858490B4C1E4728EE9BC07FB61D00
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     17045
IP address blocks:        2605:84c0:54::/48 maxlen: 48
                          2605:84c0:55::/48 maxlen: 48
                          2605:84c0:56::/48 maxlen: 48
                          2605:84c0:57::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:1e:47:28:ee:9b:c0:7f:b6:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=b549c0bc-26bc-456c-a548-5ae98bf68095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:e0:6f:5d:a7:10:ba:75:1e:24:7b:50:fe:
                    c2:f9:eb:01:ae:ce:e7:6c:18:c0:fe:df:34:49:ef:
                    a5:15:d2:39:d4:73:bb:11:05:09:7d:eb:05:9b:3c:
                    36:c5:65:62:10:a8:78:3d:a9:29:e1:f6:e1:8b:1f:
                    07:cc:57:3e:e9:4f:8b:ef:a3:12:72:30:64:ff:bd:
                    51:09:0d:bb:e0:70:6c:5b:9f:52:05:32:ee:e4:8d:
                    9f:13:9c:81:fc:35:b4:41:76:0d:c8:f6:35:be:e2:
                    5a:35:e4:ea:f7:ab:b2:43:d5:fa:d8:26:66:c5:1f:
                    67:03:18:fd:75:0c:01:7f:24:ec:8a:b8:6f:3a:41:
                    0b:5b:ca:b0:f9:c4:8c:f9:b9:e1:e2:71:cf:74:7e:
                    70:de:7d:63:a4:50:c5:3a:d2:94:c1:f2:f2:5a:09:
                    b9:fb:8d:87:1e:fe:8f:57:1b:c6:3d:db:42:21:76:
                    68:a2:f0:be:81:d7:82:89:b7:9f:a1:13:07:71:9c:
                    c9:a6:da:90:24:f9:37:86:0c:79:d1:29:44:6c:b5:
                    db:35:ce:f7:a7:56:86:8f:13:e3:18:c4:1e:bd:87:
                    75:77:7e:3c:1f:5e:c9:3b:e5:92:50:8b:75:6f:82:
                    6c:f6:74:1d:e9:9e:3f:e5:c9:c9:39:bb:f7:26:1b:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0B:5C:73:14:DD:79:BE:D6:DB:E6:6B:6C:B2:11:AA:CF:93:20:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:54::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:64:24:4c:53:af:c0:e8:36:55:51:f5:01:86:1a:66:a8:3e:
         c5:76:0c:00:04:51:9b:11:5e:71:b8:b8:80:84:73:5a:7f:18:
         12:d4:5d:e9:b2:45:fe:f2:8e:2c:1c:a1:02:60:e8:f1:05:d9:
         04:58:fc:bc:44:fa:4b:80:1d:72:d7:76:9a:3b:db:ac:77:8c:
         a7:cd:8f:62:d1:e8:26:89:b7:68:5e:fd:94:20:7a:71:07:cc:
         e5:7e:61:45:64:d5:c4:8b:35:a8:df:da:e1:d0:8d:d5:21:e8:
         73:ab:04:60:96:60:e6:7a:96:b0:c0:28:bc:c7:bd:5f:fd:37:
         c6:de:17:65:79:25:fd:7a:63:dc:21:d0:ad:1d:8c:28:8b:8f:
         6a:4d:01:31:80:d5:2c:46:1f:fc:17:d7:1e:79:51:80:2e:46:
         e2:d1:6e:82:31:94:ef:d1:73:30:a3:57:c4:38:1f:40:f3:73:
         d0:34:f5:91:ae:e2:e6:88:51:4d:8b:f0:21:bf:65:f9:74:41:
         34:5f:8a:e1:be:ca:6e:9e:00:6d:f7:01:79:7a:4c:ae:1b:7b:
         18:3e:6f:b0:d6:89:6c:fc:41:07:43:62:37:ed:31:cf:6f:59:
         d6:b4:52:a4:02:e7:ba:34:60:b2:47:be:8b:b2:a2:8a:16:98:
         68:e9:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:26 2025 by rpki-client