Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/0c110f2a-6337-3348-92ef-65d12df9beca.roa
File:                     0c110f2a-6337-3348-92ef-65d12df9beca.roa (raw, json)
Hash identifier:          0ykCSBWVT+seUNp02GQeEVN3PZaLQVMhQCmGcPUxbFA=
Subject key identifier:   D1:9E:B5:32:AA:01:C0:72:2C:C7:5B:10:BC:69:83:86:B1:AE:4E:26
Certificate issuer:       /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial:       010D0C9F43285848977087048CC11747245DF000
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/0c110f2a-6337-3348-92ef-65d12df9beca.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     209242
IP address blocks:        2606:2c0:20::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:87:04:8c:c1:17:47:24:5d:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=482e4d9a-433e-491d-8374-15ff9bd0472f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:f1:0c:c6:b6:17:9d:3d:2a:1f:11:8e:e4:
                    48:94:56:79:fe:4d:f6:4f:5a:1b:7c:a5:41:da:4d:
                    31:60:7b:39:98:f2:7e:10:df:12:0d:36:2d:dc:29:
                    0e:52:4d:1a:a2:6d:67:08:5e:14:e8:7e:15:44:2c:
                    4c:a2:1e:fd:e4:3c:05:cf:4a:4c:37:da:b7:89:62:
                    41:cf:db:3a:f4:88:37:0f:2c:a3:b4:b3:f7:4d:15:
                    dd:f7:17:26:12:bf:3f:13:e1:61:c8:82:1a:2c:33:
                    52:1c:16:db:47:d7:80:28:3a:68:bf:99:16:58:40:
                    cd:e5:49:a3:7b:32:92:fc:ef:67:85:a4:77:d2:ba:
                    f9:c0:44:25:36:45:02:f1:e5:68:af:ff:07:b5:7e:
                    94:5c:b9:ea:95:5d:82:26:77:b7:94:db:ff:d9:9b:
                    65:22:39:77:6c:6d:5d:5f:fb:db:b1:45:bd:88:aa:
                    9e:ef:95:73:6b:a6:e1:11:29:ee:e0:ac:48:9a:2b:
                    57:0b:a0:10:58:21:1e:d5:bd:11:ee:78:22:19:ba:
                    0b:a1:76:99:45:07:05:5f:9f:55:a6:37:b3:21:35:
                    06:1f:13:fc:fb:22:21:c9:aa:55:fa:65:d4:2f:ac:
                    5d:9f:1e:10:59:ae:b6:3e:aa:1f:ee:db:5d:0a:75:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9E:B5:32:AA:01:C0:72:2C:C7:5B:10:BC:69:83:86:B1:AE:4E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/0c110f2a-6337-3348-92ef-65d12df9beca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl

            X509v3 Authority Key Identifier:
                keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2c0:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:bc:f6:d4:0d:5e:15:6d:cc:5b:e1:de:28:bb:e6:9f:d7:
         66:90:9c:1e:a0:56:65:67:d9:04:46:06:c9:63:31:09:22:42:
         54:a8:31:76:d6:71:c8:7f:f3:00:e5:99:0d:36:08:01:0e:48:
         2b:ae:b3:12:00:f6:eb:22:0b:ff:ad:0b:c5:28:04:04:f9:1e:
         04:86:df:00:b7:85:5d:b9:62:1b:53:f3:cf:9b:85:d6:84:5b:
         3a:f7:6d:ee:1c:7a:f5:e9:23:12:9d:2f:77:20:30:6c:55:55:
         f4:73:c2:97:ef:22:f6:9e:ba:89:9f:fb:49:36:60:c6:6e:e8:
         be:fa:31:84:0b:85:ca:93:e3:3f:aa:6c:8e:9c:be:0a:5a:cb:
         83:cb:01:4f:a0:90:b8:2d:bf:04:9d:16:24:5e:89:98:fd:cb:
         5d:9b:d5:06:2f:66:af:b4:0d:f9:cc:81:ca:3c:94:c4:32:d3:
         23:04:26:e6:63:58:97:7f:1b:49:e6:85:2a:d5:a7:41:a4:79:
         12:0f:e5:c4:c2:42:cb:d7:dd:7c:e0:19:c8:eb:de:78:b4:32:
         3e:ff:5a:a6:7d:44:d8:63:49:46:a6:a0:39:49:6b:17:9d:5a:
         b1:24:50:0d:92:16:99:c6:36:d9:d9:59:14:46:a4:5e:99:d5:
         0c:9b:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:26 2025 by rpki-client