Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/58f07506-97c8-3904-8b06-4a0f88e44d70.roa
File:                     58f07506-97c8-3904-8b06-4a0f88e44d70.roa (raw, json)
Hash identifier:          1qUPPmygs1tuzWZsu9TpKI6pAC5dba/P4j5KreFhzK0=
Subject key identifier:   81:69:A6:00:72:9E:8E:51:23:87:6E:52:62:BB:C8:C5:0B:CA:42:F6
Certificate issuer:       /CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Certificate serial:       010D0C9F432858482D5A9232CA08F333E36482C0
Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/58f07506-97c8-3904-8b06-4a0f88e44d70.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     31942
IP address blocks:        2607:61c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:92:32:ca:08:f3:33:e3:64:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=1b3710c6-e646-4d18-8f7b-922476e533e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:f0:a5:7c:4b:93:4c:7e:01:90:d0:a4:24:
                    62:59:a1:a1:a7:47:4f:4a:e9:01:ca:27:14:da:cd:
                    7f:a7:98:56:fa:63:ec:77:43:cc:36:1e:3f:fe:dd:
                    56:aa:71:c4:8a:fd:ee:ad:df:86:82:11:a6:7e:ba:
                    e8:29:5c:be:93:fd:8b:30:10:38:60:84:12:cb:f5:
                    1b:a5:c2:3a:93:4b:8f:87:f4:77:5e:bb:bc:e4:33:
                    b2:d2:6c:6a:df:9d:0f:87:3e:3e:2e:c7:fe:e8:b7:
                    2a:48:a0:ec:49:15:9f:61:c6:b7:bd:fb:dd:d7:1c:
                    cb:c3:cf:3b:3a:2e:4d:ff:bc:bd:91:4c:4f:bc:c5:
                    a6:03:b3:af:02:47:76:54:3f:85:0f:8a:9e:ff:a1:
                    00:2d:a9:03:c6:43:8d:f0:57:bf:7c:0b:ea:d0:2f:
                    eb:30:2e:85:c0:49:e7:6e:dd:0f:52:20:08:32:29:
                    2c:68:a8:bb:95:f3:8c:b3:72:19:e0:c8:b3:01:7b:
                    26:8b:fc:b8:d6:48:15:e8:15:35:cd:63:19:9e:03:
                    46:a3:d1:eb:e0:ad:f0:dc:6c:77:f3:65:ec:18:d1:
                    86:c4:11:ac:0f:48:9e:cf:ca:30:7a:49:d6:9c:4c:
                    66:62:87:a7:5a:b2:a5:af:be:ad:96:7f:08:46:14:
                    5d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:69:A6:00:72:9E:8E:51:23:87:6E:52:62:BB:C8:C5:0B:CA:42:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/58f07506-97c8-3904-8b06-4a0f88e44d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl

            X509v3 Authority Key Identifier:
                keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:61c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4e:54:19:bb:b5:41:35:55:5f:cb:f9:32:41:a6:1f:49:ab:
         90:fe:9e:5d:5f:0b:09:c4:fc:b1:6e:ef:24:19:34:8e:c5:a7:
         51:aa:e2:65:1c:58:d0:ec:fa:9b:67:e0:ea:07:32:f8:a1:4c:
         e4:2d:d9:19:b4:43:fa:59:dd:d6:f9:9f:c5:1f:50:c1:92:d3:
         b8:81:70:74:f3:cf:a1:3d:72:a9:eb:61:b8:7e:b3:24:d4:51:
         ed:a5:68:4f:e7:3c:b7:fc:79:0b:8b:a0:56:4f:6b:a7:6c:6a:
         7c:04:df:49:c2:16:b1:72:58:22:72:1b:e5:74:16:83:43:de:
         12:0c:c4:30:0d:49:38:36:06:b0:87:19:d8:25:28:57:88:a5:
         64:de:cd:b2:bd:27:83:59:b2:f4:1b:ad:e9:cf:7a:da:dd:c0:
         6e:b5:37:6b:6a:7b:74:ef:78:9a:58:d3:72:89:57:50:23:90:
         c8:bf:91:7f:35:e0:56:f9:cd:26:8b:f2:50:0a:c5:4f:96:b9:
         ca:04:34:71:44:9d:69:f9:9b:77:e4:72:1a:ee:a1:ed:20:11:
         4c:cc:09:5a:b8:4c:c2:c8:c5:14:7a:c3:e3:59:81:4d:6b:3c:
         fb:37:18:f8:28:07:c9:82:07:b8:28:3b:d6:9f:89:ba:2c:16:
         fa:5f:4b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:18:54 2025 by rpki-client