Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0071e2f8-8116-3e25-9f37-442f7314327f.roa
File:                     0071e2f8-8116-3e25-9f37-442f7314327f.roa (raw, json)
Hash identifier:          Fnuw0xsOlipOdPrseXEP1tci1mV7fjNIIVEORmus2hw=
Subject key identifier:   2F:67:6F:D5:F7:EC:CE:5F:36:A3:7E:B4:7C:BD:E7:41:70:81:CB:39
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F43285847F2BA305B0EBFADF61B565A00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0071e2f8-8116-3e25-9f37-442f7314327f.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     396982
IP address blocks:        2620:147::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:30:5b:0e:bf:ad:f6:1b:56:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=616d69e4-9aab-4c63-9a53-79ca17177bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:4c:6e:68:36:7c:74:22:9b:13:55:ad:b0:
                    e0:f8:56:56:f8:1d:3e:65:6f:a0:66:4d:5b:83:5d:
                    d5:a6:85:5c:a4:73:a6:e6:26:fc:45:8c:c1:61:83:
                    42:ce:1c:b0:3d:95:fa:48:a1:e4:05:fa:4d:84:15:
                    3d:0f:7d:83:aa:17:38:88:1e:de:b5:f9:55:2a:6d:
                    e0:f3:64:7f:b7:49:8e:ea:0e:08:94:38:70:41:e1:
                    13:00:80:7c:bf:5e:82:28:f4:b3:e1:e4:47:d7:03:
                    e1:6d:83:dc:87:dd:e1:db:76:5a:58:d9:73:74:f7:
                    af:c8:97:e5:1c:ff:18:c0:dd:b2:b5:31:f0:9a:91:
                    ab:79:ce:e4:0d:6c:b4:1d:33:8d:83:00:07:ec:1e:
                    5d:fb:fc:41:d7:3f:50:38:61:c2:dc:d3:48:94:d8:
                    c6:dc:32:92:68:8b:d7:84:d8:60:7a:74:2a:4c:e1:
                    c5:ed:5d:64:5e:d8:f0:57:fd:e0:7c:94:bf:50:9f:
                    37:80:6a:05:61:38:9d:51:c2:e8:7d:2e:1f:6e:31:
                    2c:e2:23:fd:93:f8:e9:53:50:47:30:6d:58:69:34:
                    fd:32:1d:ff:51:8b:d3:0c:fa:b0:cc:c1:2c:c6:59:
                    1c:bf:74:f2:4d:f7:ce:03:f6:58:79:86:8c:12:64:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:67:6F:D5:F7:EC:CE:5F:36:A3:7E:B4:7C:BD:E7:41:70:81:CB:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0071e2f8-8116-3e25-9f37-442f7314327f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b8:aa:bc:aa:f2:44:90:15:62:06:34:a9:fa:af:5f:4f:ad:
         ac:44:55:df:eb:a4:12:60:95:31:22:6e:6f:71:2e:b9:aa:2c:
         17:2d:27:ec:6f:12:25:f2:69:d6:bc:3c:4f:47:f2:6d:0f:d5:
         46:9c:65:f8:90:e0:c4:aa:7b:99:04:67:35:45:d2:e4:f9:1a:
         02:08:94:94:65:0f:1e:38:f2:94:34:4a:f2:bf:e4:70:65:2c:
         a4:e8:c6:5e:47:d1:f5:89:5c:d9:b3:f9:83:e2:e3:ea:b9:ab:
         b3:a7:99:90:0c:3d:a7:25:77:da:c4:8a:6b:60:b2:da:18:84:
         ab:54:15:eb:d6:37:4f:11:59:10:30:0b:55:0b:b3:ce:c8:11:
         f6:70:c9:92:7e:88:45:05:5a:dc:ef:84:3e:b2:c4:83:f2:c3:
         b2:7c:b7:82:eb:c9:ad:1b:a1:3a:58:88:c3:8f:97:2f:58:38:
         47:2e:27:eb:ec:93:2a:69:81:2c:75:fb:e0:71:0e:22:c9:ca:
         98:4e:dd:1a:93:6a:10:56:77:77:6c:7c:99:dc:72:46:a3:09:
         f2:6c:63:13:c0:21:ab:b5:5b:34:0f:5d:34:f7:37:69:e8:32:
         5a:65:14:3c:57:9f:a0:13:d0:b3:86:38:61:21:70:7b:ac:a5:
         79:e9:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:16 2025 by rpki-client