Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
File:                     35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa (raw, json)
Hash identifier:          XEbplc7neQFdLW7HM2f+siq/sZOL5CORv11jKCcDAyM=
Subject key identifier:   46:2C:0B:21:14:3B:5F:C1:3A:8E:23:FD:92:89:5B:13:59:20:D2:DB
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F432858487755D596359D253E6CD41480
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     12212
IP address blocks:        2605:8900:f000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d5:96:35:9d:25:3e:6c:d4:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=96ee4f02-3470-4b03-b020-e7b3e95a5124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e5:6f:33:4e:4a:1a:29:96:d2:92:73:df:ef:
                    7a:36:9c:36:e0:3f:79:fa:92:22:fd:35:f4:c7:1b:
                    3e:29:9e:99:c1:2f:f2:ee:eb:e5:f7:8c:8f:55:b5:
                    c4:c9:f6:f9:dd:23:68:86:19:72:43:2d:34:27:ba:
                    e4:4c:be:b9:ec:5d:a9:2a:0a:40:71:17:81:19:ba:
                    c8:7f:53:da:48:30:8d:40:2f:19:24:92:1c:08:71:
                    d1:d7:9a:31:52:cb:5f:f8:0e:99:af:2d:18:70:81:
                    64:3c:82:c1:a9:90:60:95:75:d5:34:07:56:a1:d9:
                    ad:0e:80:1d:57:ec:ea:2c:f3:8d:ca:f2:62:44:7c:
                    36:42:0a:55:58:13:d2:3d:11:e4:43:4e:5e:e9:f4:
                    a3:55:6b:93:da:68:24:7b:a9:89:8e:b7:60:78:8b:
                    3a:5b:d0:98:15:79:99:bb:76:a2:8f:6c:4c:54:0c:
                    5b:ef:52:68:cd:34:61:b7:40:f4:f3:20:79:67:57:
                    be:9e:aa:d3:13:84:ef:fb:7f:c5:8e:f2:21:75:97:
                    fa:99:e9:f3:36:b8:1a:0b:26:b4:fb:f9:49:47:18:
                    08:7c:61:cd:a4:c9:3e:64:2d:cc:c6:79:f4:3b:f8:
                    9d:c7:97:74:19:1d:90:ee:11:7b:ab:4f:e7:db:4d:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2C:0B:21:14:3B:5F:C1:3A:8E:23:FD:92:89:5B:13:59:20:D2:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:06:b9:5d:5f:68:36:76:da:17:c3:75:26:b8:04:93:e2:
         23:6d:38:10:87:7f:9c:ba:7a:5e:df:7c:95:6f:21:98:e2:cb:
         cf:b9:ec:93:9d:d0:f6:d3:e8:44:59:4c:90:5c:f5:2f:2b:9c:
         8e:8c:42:12:5d:8c:fe:6a:55:6e:46:b7:0f:bd:1d:42:e6:ec:
         08:49:47:f4:b7:39:9c:0d:ee:53:60:83:03:ac:74:3d:6f:f2:
         47:0c:55:14:93:cc:73:b6:b5:53:09:0e:06:a9:5d:91:bc:5d:
         0c:52:a3:63:9b:85:10:3b:4f:97:94:a3:22:b3:d4:4d:7e:e4:
         6d:63:a5:3d:ac:ea:28:08:04:8e:b7:72:8a:85:3e:49:8a:0c:
         89:28:66:0e:08:99:cd:7a:2c:9a:94:57:38:ea:00:11:0b:a1:
         65:46:03:ee:56:0c:60:1c:0f:2a:f7:d1:6b:d8:9c:45:e2:aa:
         20:e2:f0:0b:82:78:d6:49:0b:0e:4f:9f:d4:a9:28:55:a8:c7:
         ff:3f:7e:00:05:cb:ce:66:5a:97:90:35:be:ba:8d:0b:a2:ab:
         6c:59:8c:f1:6b:4c:a3:eb:5e:da:2a:55:38:f3:a3:c6:03:7c:
         6b:87:23:7d:55:fa:d9:51:10:a5:8f:db:22:9e:d8:d5:3f:28:
         16:e1:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:59:07 2025 by rpki-client