Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa
File:                     71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa (raw, json)
Hash identifier:          XuFxFmQY6RlYVY8tBeymQ+Or5g9PvfEBarqKszBYqSE=
Subject key identifier:   AD:99:DD:FC:8B:7D:7F:F4:B1:8D:60:15:CE:AF:F5:5D:93:33:3E:2D
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584851A5761A32CC273AF68F7180
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     36829
IP address blocks:        2602:fc64:a000::/48 maxlen: 48
                          2602:fc64:a001::/48 maxlen: 48
                          2602:fc64:ca00::/48 maxlen: 48
                          2602:fc64:ce00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:76:1a:32:cc:27:3a:f6:8f:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=6cb6d9d1-c897-48e3-b016-e18db2e04458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:84:56:ca:5e:c2:cd:2f:93:bc:70:5e:e0:
                    07:de:f8:e9:a9:c8:3b:56:bb:eb:a9:83:70:ed:06:
                    1a:07:4a:e7:e3:6d:e2:2c:36:fc:8f:39:bf:4c:ff:
                    3b:07:ea:39:f1:49:24:35:45:67:dc:24:ca:8b:85:
                    52:d6:bd:af:4c:c4:62:91:c0:77:29:04:ac:03:35:
                    28:8a:7a:7d:68:ae:87:34:75:7c:4d:b0:12:3d:ce:
                    9f:fc:fd:91:8b:4d:d3:0c:44:1d:2b:14:48:64:5e:
                    7f:4c:4d:b7:17:3c:ce:91:6b:bb:f0:ec:c2:8b:5a:
                    b7:12:f2:3a:b1:3e:d3:d2:54:31:bd:f7:93:d2:a7:
                    ba:29:53:71:8d:48:db:dc:b7:bd:d9:0a:4a:1a:50:
                    f8:46:a1:16:35:b0:c2:ab:d0:57:a0:e1:e6:14:6c:
                    53:20:63:1d:64:0b:39:de:64:c2:10:eb:80:81:85:
                    a0:e6:5e:bc:75:e6:f2:8b:04:b4:71:e2:b0:cd:7d:
                    70:ac:f2:5c:b5:2c:06:a2:ff:b8:e8:06:b7:4d:a5:
                    aa:ec:14:cd:99:6e:3a:28:4b:7b:62:50:e0:8e:05:
                    91:58:65:e4:40:e7:7a:ff:d4:2f:8a:23:aa:ea:c1:
                    3b:3f:f8:c4:b7:e3:de:6c:a8:ed:5d:59:92:93:08:
                    f8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:99:DD:FC:8B:7D:7F:F4:B1:8D:60:15:CE:AF:F5:5D:93:33:3E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc64:a000::/47
                  2602:fc64:ca00::/48
                  2602:fc64:ce00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8b:c4:06:89:00:ed:94:6c:e4:20:28:84:ac:f4:a3:86:14:
         6e:ff:e8:bf:26:a9:ad:c9:43:ac:05:a0:4f:79:3a:ee:15:16:
         71:95:ca:e8:08:e2:50:79:82:13:16:f3:bb:44:14:64:11:fe:
         05:1f:96:1e:62:65:a3:51:86:4d:59:bd:03:56:4b:16:45:01:
         b8:76:35:8a:16:2a:80:3f:d1:8d:e3:f3:06:21:d9:de:9d:cc:
         53:e2:32:55:53:9c:37:23:a8:33:aa:31:ef:c4:ae:bf:1e:7a:
         00:f9:20:00:86:23:5f:83:66:e5:7d:3b:b8:fd:e3:29:23:ac:
         e3:b1:04:84:4d:c4:ea:23:5b:a4:c6:21:a0:db:e0:05:55:12:
         ef:e3:c6:17:81:49:a9:9b:85:bf:d6:14:ea:f0:bf:54:8b:c5:
         f8:0e:49:50:7b:ca:0e:cf:0b:0e:8d:c6:7c:4e:12:c5:95:da:
         91:47:54:71:17:1c:d8:cd:f3:cf:7c:47:f4:c7:ce:14:62:90:
         47:02:c6:fc:f5:46:8b:b1:85:98:6e:5e:6a:8a:f4:61:26:99:
         64:86:14:a6:7c:81:58:ab:56:60:26:f3:78:ba:40:dc:2e:ea:
         58:94:b1:f7:9c:f6:88:22:63:8e:99:f8:6a:0f:86:04:a8:e8:
         34:fc:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:41 2025 by rpki-client