Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1/36e62348-8d75-3164-9b95-25e8c37b5367.roa
File:                     36e62348-8d75-3164-9b95-25e8c37b5367.roa (raw, json)
Hash identifier:          eBnPTOOva1BS07fW9ajK2QWjbGFw1vCp8ufjkt4ySBY=
Subject key identifier:   3E:E1:FF:D2:51:C1:7A:BF:5A:A4:62:67:79:6B:39:8B:45:93:5B:27
Certificate issuer:       /CN=37203f05-4142-4627-9338-1c8fecf7d1f1
Certificate serial:       010D0C9F432858486695C1A3D4DB0F5C53AD5AC0
Authority key identifier: FE:6E:47:59:88:1A:82:A7:4C:06:8B:CD:F1:AD:93:27:D6:7B:F2:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1/36e62348-8d75-3164-9b95-25e8c37b5367.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     6939
IP address blocks:        2602:fc71:fff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:c1:a3:d4:db:0f:5c:53:ad:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37203f05-4142-4627-9338-1c8fecf7d1f1
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=d8a7e038-9b16-421d-8e5a-be0df4657498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:df:b0:57:75:49:d3:10:9b:b0:ea:46:bf:
                    e3:20:6e:f8:e8:ea:11:b6:ce:67:c4:fc:0f:ba:c4:
                    c6:f5:37:9e:b0:13:6d:80:74:e9:2c:f6:3d:30:10:
                    51:5e:91:a5:e6:35:8b:06:27:77:4b:c2:16:32:2d:
                    90:97:ee:77:70:88:95:9c:de:1d:12:17:cc:72:ad:
                    01:5e:16:ac:54:72:7b:9c:dd:2b:20:b9:6f:dc:50:
                    70:c1:20:94:81:6a:66:1d:ab:27:53:e8:b6:63:ca:
                    56:da:99:16:15:9e:d7:ec:60:fc:63:18:5b:e6:77:
                    84:41:d8:55:ac:17:15:a6:f0:1c:c6:ad:12:5f:fe:
                    d2:aa:50:1e:f9:71:ca:81:d4:2e:da:e8:36:af:80:
                    f6:fa:be:db:9a:53:14:63:2a:82:49:b1:86:b1:cf:
                    05:7f:bf:78:a8:ee:cf:ba:54:06:28:48:d8:02:e2:
                    27:8a:f6:7c:e6:cd:8f:b1:04:58:54:18:69:0c:2d:
                    56:23:71:21:52:08:93:12:ce:48:70:6a:b0:0b:f1:
                    3c:b8:40:cd:6f:e9:f2:f4:f2:70:23:97:23:6b:e7:
                    11:90:a2:ed:6b:34:9d:aa:82:f1:b2:f7:02:a3:43:
                    74:4b:68:a4:5c:df:89:78:a4:5a:e6:47:0f:9f:12:
                    5b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E1:FF:D2:51:C1:7A:BF:5A:A4:62:67:79:6B:39:8B:45:93:5B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1/36e62348-8d75-3164-9b95-25e8c37b5367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1/37203f05-4142-4627-9338-1c8fecf7d1f1.crl

            X509v3 Authority Key Identifier:
                keyid:FE:6E:47:59:88:1A:82:A7:4C:06:8B:CD:F1:AD:93:27:D6:7B:F2:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc71:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:03:bd:7b:3f:97:b9:8c:ad:14:ff:e2:5e:c5:d2:6b:58:8b:
         23:7a:29:57:fa:9e:6f:d6:ce:83:6a:c4:20:26:0d:3c:f4:54:
         96:bc:7a:ad:4b:e2:cb:c0:c0:53:3e:ba:d5:db:fe:ef:ab:e0:
         8d:9f:f5:f8:70:58:a3:b6:e5:86:ec:0f:8b:c5:f1:e8:14:d0:
         c1:26:93:91:66:d1:e4:f8:ba:56:fd:ce:bc:f3:da:40:d3:40:
         63:da:32:46:50:38:0c:83:ee:8d:53:d1:83:18:78:1e:0f:74:
         4e:1e:48:d3:fd:28:da:17:35:26:1d:8c:a9:39:5e:52:6e:57:
         de:1b:c0:5d:5e:3a:b9:3e:0b:f5:e4:83:35:31:81:e8:6d:93:
         73:10:83:0e:83:22:ca:b8:ad:e4:f0:9b:33:11:a2:4c:9f:29:
         2a:78:fb:2f:d5:27:77:50:87:ac:d8:7f:25:3c:b6:29:9c:f8:
         ee:b7:c5:64:de:9f:fc:40:25:e3:52:03:d5:c7:bd:1c:50:1c:
         eb:0e:3a:38:a9:e7:4b:c9:a2:99:2a:7c:25:4a:19:d4:1c:5d:
         3d:ad:82:f2:c0:34:99:1e:2d:2e:e5:b7:65:7c:7b:92:70:e0:
         a7:a2:20:3c:7b:6e:33:33:58:1f:2e:80:79:69:30:fb:4a:90:
         74:bb:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:39:03 2025 by rpki-client