Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa
File:                     b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa (raw, json)
Hash identifier:          XjxeSeLz6iH+ltEur9pyWJ4iul/bUcV2M+MANVIUB1k=
Subject key identifier:   3F:FB:87:BE:7F:90:CD:AF:90:BB:3D:DD:A9:EA:71:1B:07:16:FE:B2
Certificate issuer:       /CN=0a9d33e4-ed4d-4b47-b363-b42110f88557
Certificate serial:       010D0C9F432858484C1024E4652DF5CFF74091C0
Authority key identifier: 8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     395214
IP address blocks:        2602:ff3d::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:24:e4:65:2d:f5:cf:f7:40:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9d33e4-ed4d-4b47-b363-b42110f88557
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=6b2d85b9-beac-49ea-b825-de5800793393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:3e:d0:f4:00:82:ba:c0:2e:3f:d4:61:f6:
                    00:93:b6:54:5b:47:5f:dc:80:23:97:d7:3c:6c:05:
                    71:16:ed:50:53:62:ab:5a:0d:71:4d:9e:f2:d5:cc:
                    d8:97:e6:03:d5:ae:7a:23:9e:39:05:65:99:cf:1b:
                    87:ce:21:67:9f:96:79:7a:3d:2d:93:88:e3:fa:fd:
                    5a:94:b1:67:d2:1f:fa:1c:36:a2:cc:71:d0:19:68:
                    d1:9a:11:d9:02:a8:56:0f:9f:72:d3:17:5f:75:75:
                    26:99:d6:11:db:bb:64:09:40:48:f1:c1:77:2f:de:
                    f0:89:a6:18:34:59:4d:6e:7c:5a:d7:7e:96:0c:aa:
                    2d:36:44:e8:e5:1f:d6:bc:40:a0:4d:3f:36:20:48:
                    e3:2e:0c:c1:a8:43:36:0e:3a:70:fa:cd:58:7a:20:
                    a5:93:f2:cd:98:29:07:77:64:4f:e3:23:5f:b7:2d:
                    42:18:d8:0b:68:ad:06:03:55:1a:20:23:89:9c:72:
                    62:7a:ad:db:f1:31:54:f5:5a:ec:ca:bb:fa:6b:82:
                    82:ab:40:0b:55:7d:ae:7c:b9:92:d7:4a:96:2f:e1:
                    a7:7d:80:81:44:67:b2:50:3d:fd:9c:a6:c4:bc:47:
                    e8:7f:8a:d6:4c:e1:41:19:86:3c:0a:af:c1:82:83:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FB:87:BE:7F:90:CD:AF:90:BB:3D:DD:A9:EA:71:1B:07:16:FE:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl

            X509v3 Authority Key Identifier:
                keyid:8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff3d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:12:5d:44:b3:2e:f4:25:4f:a1:14:e3:02:52:e2:94:02:32:
         ca:12:8a:76:16:31:ae:d1:f1:5c:db:92:0a:39:f9:ef:70:0b:
         e6:e2:48:89:3a:87:96:44:87:44:9a:35:1c:db:f6:b2:b7:9f:
         39:1c:f2:ae:cb:98:ae:5c:79:fd:f3:47:9c:16:81:b4:6a:65:
         10:e9:cb:82:62:fd:2f:5f:e0:81:0a:e6:26:1f:af:28:9d:6b:
         f2:bc:fc:11:64:00:05:b0:c8:bb:8e:ce:bf:db:a2:d5:66:a2:
         27:cf:20:b8:1c:e9:22:d8:0f:29:15:1c:41:dd:48:d8:b0:93:
         37:24:c6:64:8f:3a:db:34:01:37:8c:30:b6:62:82:d0:29:25:
         d1:27:e2:a1:bc:00:cc:11:a7:ac:5f:cb:e0:dd:a3:08:fe:84:
         06:ed:4d:55:06:87:67:6f:1f:98:7c:26:5e:3c:f4:64:7a:ec:
         8b:74:b0:f3:b5:5d:24:d7:74:b4:3c:6d:9a:ac:0f:08:4f:64:
         8a:ba:ec:d3:df:90:2a:94:37:41:a2:54:02:16:42:fc:c7:05:
         5d:44:66:04:12:eb:78:e2:7a:f9:e4:05:5b:7d:b7:01:ae:96:
         f2:37:13:dd:67:40:96:15:a8:4e:7d:ce:56:81:b9:4f:8a:8a:
         f3:ce:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:01:37 2025 by rpki-client