Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa
File:                     bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa (raw, json)
Hash identifier:          DogafKKURZOGvm/+xHFdyxOmnNNbMk3zr0lqPPGQiLQ=
Subject key identifier:   43:87:30:2B:D6:61:76:6D:BE:32:9B:4F:BB:49:A1:EA:B2:40:FA:E3
Certificate issuer:       /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
Certificate serial:       010D0C9F4328584827C53F677DC7FF8D944B3650
Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     14159
IP address blocks:        2604:aa00::/32 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:3f:67:7d:c7:ff:8d:94:4b:36:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=1fb3139b-1cc3-4c12-b47d-8034c9c83639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:a5:52:d9:4e:d5:90:f5:80:a0:37:28:09:
                    e6:4d:60:6b:38:29:b0:70:ff:b2:ed:94:bd:93:87:
                    db:8e:62:bd:72:5e:00:47:c8:7a:fe:de:6e:c1:ec:
                    c5:af:ee:66:1c:35:57:00:bd:6b:cd:72:01:34:c2:
                    c7:a2:49:5c:08:9c:72:dc:8a:e8:59:0d:17:2e:08:
                    44:6f:08:da:1e:7d:9e:5f:06:7d:ef:af:65:ce:08:
                    00:28:7b:11:72:57:0a:10:89:fc:0f:21:3d:80:96:
                    93:d7:fc:89:32:a0:59:b9:24:54:4d:c5:20:ab:d6:
                    38:71:86:e2:a6:64:25:7b:12:c9:0f:ec:d0:84:a4:
                    b8:50:5e:9f:30:1e:95:77:45:76:7b:98:fc:6f:4e:
                    bb:f5:9e:0d:1e:df:6f:ea:f3:cb:ef:39:56:3e:25:
                    09:78:5c:c2:3e:b3:92:65:0e:01:ef:92:a1:2a:64:
                    ec:0b:af:07:ea:5c:e0:5b:09:4b:6b:54:49:6f:fb:
                    b0:ac:9a:f2:33:b7:d1:86:81:b5:de:e9:dc:77:fe:
                    20:9f:83:08:c8:b4:6f:32:48:a8:e9:df:fd:48:05:
                    57:67:d0:d7:bf:4d:86:07:a3:43:0f:7c:12:af:55:
                    f3:71:bd:8e:d4:75:05:6c:1c:33:25:b6:40:84:7d:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:87:30:2B:D6:61:76:6D:BE:32:9B:4F:BB:49:A1:EA:B2:40:FA:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl

            X509v3 Authority Key Identifier:
                keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:aa00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:7f:1e:21:9d:ef:3f:3e:f8:42:ff:fc:0d:09:a5:96:88:
         b1:74:9a:11:d7:04:21:83:f3:94:78:98:be:1f:aa:37:c9:18:
         3d:2e:16:f8:91:b2:d6:30:9f:9e:fb:e3:48:25:61:58:05:f9:
         54:10:b4:ce:e1:35:19:6f:cb:60:bd:96:93:46:4b:80:6f:99:
         2f:30:de:31:0e:41:4f:60:fb:96:c6:c2:36:d0:6e:88:61:d2:
         40:8a:0b:42:d9:e2:b7:0d:dd:c8:46:a6:e0:49:00:2f:9f:bb:
         d1:89:24:67:d7:1e:f6:52:b0:70:f9:24:59:0d:8d:3a:ea:95:
         d6:70:eb:92:88:23:8a:f2:5d:b3:b3:9f:bd:8b:13:ce:09:55:
         65:14:24:3d:41:1f:16:ea:c1:e8:ac:6b:11:b7:7d:78:5a:dd:
         99:18:b7:2c:b6:35:74:02:e2:cf:d4:87:5e:2d:ce:7e:d9:42:
         d1:3c:71:00:5b:d5:31:85:a8:41:10:25:2f:97:68:cf:c4:de:
         ef:d1:c2:a2:82:31:47:38:9c:24:8e:96:50:9e:14:17:3b:47:
         ff:d2:c5:09:24:ab:f9:16:34:c0:cc:7b:f2:69:b8:3e:f1:50:
         3a:8c:db:60:3a:c7:03:b3:86:91:0b:7d:3c:f8:c4:84:61:f7:
         82:8d:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:36 2025 by rpki-client