Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa
File:                     a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa (raw, json)
Hash identifier:          BQJYGA9zMsBA5XLWrsrM0SobzJRroBg/Lc2jYhH6G04=
Subject key identifier:   81:38:26:A1:B1:8C:21:8C:B8:FF:DE:C3:64:A9:D4:7D:FE:9D:90:A1
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F43285848037A49863C1C2501175FA280
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     36001
IP address blocks:        2605:bbc0::/32 maxlen: 48
                          2606:3d00::/32 maxlen: 48
                          2606:ab80::/32 maxlen: 48
                          2607:580::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:49:86:3c:1c:25:01:17:5f:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=72e982e6-163a-4656-a34c-0124239256f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fa:db:8c:f3:55:eb:95:4e:47:2b:c6:59:3b:
                    99:27:a2:d2:58:9c:f2:36:0e:0f:02:87:6b:cd:ea:
                    29:2b:3b:d1:b4:1c:df:9f:43:dd:4e:bb:26:96:3f:
                    5b:fd:9e:a9:26:9a:4a:5c:8f:8d:7b:f9:d6:69:eb:
                    91:2b:3f:69:51:04:1f:a6:8d:9d:c8:eb:c5:b6:46:
                    b6:f2:25:36:52:10:b9:cd:15:c4:ff:23:cd:a9:41:
                    cd:91:7f:46:5e:80:ca:cd:04:45:b5:d0:c3:3a:c6:
                    e8:0e:c1:89:ce:14:03:1d:9d:7e:61:5f:e0:63:b3:
                    3c:cd:5e:11:c8:eb:54:89:39:60:65:21:4d:41:13:
                    19:4f:4a:e1:cd:cb:6f:77:dd:e4:bf:d1:c8:bc:6f:
                    05:e7:05:5f:f3:8c:24:e3:49:2c:57:da:94:5e:d1:
                    c6:b4:3b:fc:e6:d3:19:69:24:37:3f:d2:3d:93:4e:
                    4a:2f:0d:d2:2a:a3:28:92:cd:5c:27:eb:18:20:c7:
                    28:36:02:41:92:11:e2:75:4c:42:d3:99:c3:12:a8:
                    fa:ae:fc:65:2e:78:57:d6:dd:59:cc:d2:f3:d0:84:
                    24:c6:c0:54:ca:8a:99:4d:b3:92:d1:4e:ab:18:02:
                    bf:46:8c:76:bb:fa:52:78:21:98:a1:64:3e:65:bf:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:38:26:A1:B1:8C:21:8C:B8:FF:DE:C3:64:A9:D4:7D:FE:9D:90:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bbc0::/32
                  2606:3d00::/32
                  2606:ab80::/32
                  2607:580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:62:04:df:05:71:f7:95:e8:d3:a3:df:ea:17:7b:fb:d3:
         2e:60:86:da:18:54:ae:21:75:9a:24:fc:7e:ef:33:78:e8:f5:
         d5:59:38:5c:66:35:eb:9a:6d:82:ba:6d:a8:c1:0e:16:d5:38:
         71:0a:28:a3:c0:01:c6:b1:a1:1e:44:5b:79:d2:f9:ab:1b:9d:
         60:9e:3c:34:77:d5:94:9c:e2:37:9f:5e:cd:8b:36:ef:82:f7:
         d7:dc:4e:8b:f4:e0:2c:1c:ee:92:6c:69:49:d7:9c:11:94:bb:
         52:85:37:37:6b:3a:8f:80:65:38:47:ba:87:85:f5:6d:66:15:
         b9:c1:9d:a3:34:91:95:4c:03:22:7e:10:13:1b:6d:e2:51:2e:
         a0:30:4f:fd:38:98:4a:91:56:36:13:7b:c4:7b:2f:02:60:bf:
         29:db:e8:8f:bb:dc:f9:5a:63:a4:e6:09:c7:6c:3a:7c:cd:3e:
         93:4c:36:78:d7:f8:b2:44:d6:f6:e4:08:3d:6e:2c:6b:d6:e0:
         ce:38:59:ba:f3:5f:bf:29:0b:02:51:3d:2b:8e:87:f9:14:fb:
         14:75:63:f3:20:53:88:ce:88:c3:e0:5d:18:59:53:42:4e:bd:
         fb:28:df:8c:bb:81:16:0b:be:e4:69:53:32:fe:8d:ab:56:36:
         75:4c:14:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:22:36 2025 by rpki-client