Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa
File:                     9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa (raw, json)
Hash identifier:          B9MpVsmnfwROGfDbo6aFZQQBY6p4ex6Qq5P765NWpys=
Subject key identifier:   33:AB:B1:C0:E8:2F:39:29:F1:52:4D:0F:EC:2A:16:41:B2:00:8D:0D
Certificate issuer:       /CN=39812a66-44de-45e0-a65d-fd3a7673a954
Certificate serial:       010D0C9F4328584873283C8B019621A175D4C100
Authority key identifier: 8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa
Signing time:             Mon 06 Jan 2025 02:05:55 +0000
ROA not before:           Mon 06 Jan 2025 02:05:55 +0000
ROA not after:            Sun 06 Apr 2025 01:05:55 +0000
asID:                     396422
IP address blocks:        2607:39c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:28:3c:8b:01:96:21:a1:75:d4:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39812a66-44de-45e0-a65d-fd3a7673a954
        Validity
            Not Before: Jan  6 02:05:55 2025 GMT
            Not After : Apr  6 01:05:55 2025 GMT
        Subject: CN=44835d9f-b27f-4911-ae10-4ea9151af3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:34:e6:34:c9:17:4c:a2:a5:a0:06:54:63:
                    18:9c:f1:87:d0:0a:bd:54:2f:54:0e:1e:9d:39:a7:
                    79:3e:aa:a0:48:ba:23:2c:f6:6e:37:e5:a5:43:cf:
                    28:20:72:c6:35:a8:01:7d:ee:15:9e:90:00:8d:59:
                    fc:72:02:fe:92:5c:71:53:57:b8:bb:48:be:ee:46:
                    26:8d:5e:db:f6:96:aa:07:4d:dc:b0:1c:b2:c1:15:
                    af:4f:2a:fe:ca:8b:10:33:02:43:dc:d0:2c:5e:ff:
                    1d:09:3f:00:ab:1c:63:e3:3c:dd:de:22:03:2b:16:
                    c8:a8:5d:23:0d:5f:73:d6:7b:45:53:be:53:63:ff:
                    85:52:9c:63:98:ff:17:c1:ac:75:92:52:34:c1:c1:
                    64:5e:90:b5:8f:e8:e1:a2:c2:69:d9:b2:63:f7:15:
                    fe:06:2c:d9:58:f9:07:4e:1a:2c:9c:1b:02:ca:c0:
                    ee:3c:f2:46:fb:43:44:48:d7:2e:6e:17:b7:32:ba:
                    db:2a:a2:a4:ee:58:46:b0:97:f8:bd:2d:52:6b:6c:
                    f7:01:5c:d1:e9:6f:52:05:31:9d:6f:d8:72:42:6e:
                    00:5d:bc:c2:7a:68:04:ad:96:4e:94:32:aa:91:b4:
                    35:bc:5e:47:a7:f0:bd:0e:1b:7a:f2:ac:21:97:6d:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AB:B1:C0:E8:2F:39:29:F1:52:4D:0F:EC:2A:16:41:B2:00:8D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl

            X509v3 Authority Key Identifier:
                keyid:8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:39c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c4:79:a0:25:33:50:5b:0e:e0:ce:93:74:27:05:ad:21:15:
         f0:b1:ba:d0:df:dd:60:70:ea:fd:05:4b:23:9f:5e:ba:20:f1:
         55:9c:b1:f2:d2:22:e6:fe:8b:4e:86:2d:14:e8:5b:6b:4e:9e:
         82:e6:06:c3:e4:c5:a8:9a:8d:35:1e:fd:ea:58:8f:3b:25:2a:
         c7:13:6e:f8:70:02:d4:02:bf:dc:16:80:41:55:7a:d6:f8:d7:
         f7:57:32:16:1f:17:87:17:40:4e:f9:f3:a0:17:19:25:3b:45:
         cc:5c:36:6b:bc:2b:a3:6c:2f:9c:8d:d2:9c:bc:9a:45:c9:d0:
         8a:8a:2c:8f:fc:29:69:f5:28:46:26:e3:62:4e:94:d5:b9:f6:
         2a:ee:a6:cd:a4:87:28:fc:95:09:f7:2f:8d:91:67:0d:ea:40:
         f7:a7:a7:3e:54:4b:99:e8:37:6e:e8:dc:7f:e6:67:3b:45:8d:
         3f:35:f1:19:64:7d:62:0e:cb:48:3b:3c:58:b9:54:c0:77:cf:
         0d:09:6f:d3:c8:61:ed:7d:dc:2e:96:b3:b9:ab:ff:c4:17:0a:
         54:0c:0f:8d:2b:c3:0b:7b:ff:34:fe:74:02:6f:19:f5:a7:b9:
         b5:52:9a:97:0c:23:65:48:2d:66:bb:d3:72:d4:7e:ac:0f:86:
         41:52:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:52:07 2025 by rpki-client