Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa
File:                     f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa (raw, json)
Hash identifier:          mWGyBVuxQnyayWxWpCsyaaa46pfrK1s3N6k0hXZR5XI=
Subject key identifier:   56:44:4A:31:D2:07:7F:5E:43:EF:99:EC:5C:49:D3:D3:BC:A0:1E:2C
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858486C2B17F1E9188338A06AC820
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     394285
IP address blocks:        2606:a100:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:17:f1:e9:18:83:38:a0:6a:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=d17f80fa-fb74-417f-9a8a-538a32669f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9d:cb:76:f6:89:ce:d0:3a:f5:2a:ff:c7:85:
                    62:ca:ae:42:e6:7e:90:48:e4:d9:b2:4b:19:6f:d9:
                    db:ae:4d:8d:cc:0e:67:f3:87:0c:90:f4:2b:11:4f:
                    48:39:05:65:9b:cd:a6:c5:a7:dc:f5:18:d1:b0:15:
                    ae:40:66:8e:46:d9:6c:96:70:ef:9d:68:f3:34:af:
                    f1:c7:00:5e:d8:01:ae:29:e2:b4:eb:7a:cf:eb:2b:
                    4f:1f:fd:36:fd:fd:ee:fc:85:2f:4c:81:83:06:71:
                    12:73:a8:13:fb:2e:c1:60:5d:bc:81:0a:8f:c1:16:
                    ab:8c:5b:5b:fb:22:ed:9d:0f:dc:97:c7:22:9d:47:
                    85:2b:77:fa:e9:8e:94:6e:91:ef:cf:20:ea:1b:48:
                    ae:a1:72:ac:e2:0f:4e:b2:fc:9a:62:23:4c:03:41:
                    a1:69:10:8f:b4:d7:6b:7c:c3:6a:b3:67:62:50:51:
                    00:03:72:b4:d6:7e:2f:22:c7:2d:0b:92:fc:c2:34:
                    a2:4d:42:ff:65:7d:01:77:5a:83:43:e3:cb:58:42:
                    91:a5:44:dc:b8:2d:68:f1:82:11:89:11:ba:cf:72:
                    23:c3:a1:30:45:b5:4c:20:97:eb:9f:c8:d3:ec:0a:
                    0e:41:9e:9b:e5:ac:28:56:7d:9e:69:ae:97:1d:8a:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:44:4A:31:D2:07:7F:5E:43:EF:99:EC:5C:49:D3:D3:BC:A0:1E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/f339bdc8-a92d-30ce-8a38-de9d0640c5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:64:3f:d8:08:d2:ee:b3:e5:60:40:67:47:a4:7b:bb:87:2d:
         8b:d3:c2:c3:38:aa:cf:cc:5b:10:4a:78:32:d7:90:ae:2e:4e:
         b9:08:99:0f:af:ec:cd:6b:bf:f8:84:41:60:19:55:34:65:86:
         0c:9d:24:72:60:30:85:0e:55:32:87:15:12:49:b7:bc:b1:54:
         39:b5:7f:97:28:95:06:3f:b0:d8:ee:dd:f7:08:3e:ca:cb:1f:
         e4:97:27:bc:b8:d6:fc:39:39:9a:d4:bd:80:27:3d:a2:af:ec:
         b9:67:26:23:0b:2c:61:25:f7:1c:ff:2e:39:dc:35:0c:c9:11:
         45:e1:ff:fb:39:d5:2b:ec:12:dd:da:d7:3a:f3:31:49:f3:5e:
         93:64:ba:59:19:3f:66:0f:4f:36:b4:c7:8b:36:a5:77:5a:fe:
         32:44:f1:79:f1:8e:2b:7f:d5:ed:9d:ec:ff:f5:69:8c:ae:d0:
         ef:03:ac:48:9f:b6:34:b5:fa:56:52:81:8e:96:86:72:c5:11:
         8d:f8:3c:15:43:25:cf:38:5e:62:c3:ca:48:5c:d9:01:9b:7f:
         96:ae:96:8c:ce:75:7d:cc:a3:a4:d2:48:37:60:03:ec:b3:2f:
         fb:ee:a2:0f:9f:3a:65:4a:0f:e5:08:f1:c5:17:15:03:6d:e2:
         e4:b0:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:03:43 2025 by rpki-client