Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/229c2621-344f-3399-b465-15c4c4e14b30.roa
File:                     229c2621-344f-3399-b465-15c4c4e14b30.roa (raw, json)
Hash identifier:          hyaQe5QEvH1wPFGVoHGgHtzbEpwR6FWQfNKRJZP9nc4=
Subject key identifier:   51:D5:03:B2:3A:37:15:D1:E2:25:AF:63:39:37:8A:57:5F:AD:4C:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB3FC8409EDB308F18DC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/229c2621-344f-3399-b465-15c4c4e14b30.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     701
IP address blocks:        2600:4040:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:3f:c8:40:9e:db:30:8f:18:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=03b02b86-eb29-4026-b0e6-75878d6a3200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ac:aa:3f:58:c9:0c:de:78:b9:2b:71:ae:af:
                    db:0b:0b:0a:51:d6:8f:27:04:ce:e3:4e:7b:b8:cc:
                    de:fe:87:11:07:ef:aa:0a:de:5b:d5:4e:3a:a4:c1:
                    58:00:78:d1:0f:1a:20:b4:75:93:75:80:5c:47:48:
                    d5:56:e8:e4:bc:fc:fb:b1:94:43:e5:ec:89:6b:a5:
                    2b:ca:32:dc:0c:5e:f8:8d:03:21:61:23:bc:b6:a0:
                    01:1b:0c:6f:83:6d:6f:ce:32:97:72:90:9c:9c:a2:
                    49:d5:26:97:b1:55:97:8d:8e:17:29:3d:79:f0:85:
                    0a:80:2b:9c:a3:c9:ec:12:e5:1c:74:4a:1c:e9:8a:
                    03:b0:c3:80:06:47:c9:95:db:7e:42:fa:9b:33:7c:
                    6a:0d:f6:ef:b8:ea:55:2d:94:d8:20:3b:f3:98:6c:
                    65:02:8c:28:e5:d7:37:6b:38:4c:eb:10:8f:41:47:
                    41:17:aa:39:e0:6e:ca:44:18:63:39:c0:88:0c:33:
                    47:c3:96:45:d8:75:2d:e4:a2:26:1a:64:1d:b8:89:
                    78:bf:84:28:1e:69:3a:d8:8e:f9:80:37:c0:24:da:
                    cd:eb:99:cf:d7:7b:7f:03:ac:3d:64:0b:1d:ce:9d:
                    b7:42:84:73:55:66:53:6a:8a:d8:e4:93:2f:32:9a:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:03:B2:3A:37:15:D1:E2:25:AF:63:39:37:8A:57:5F:AD:4C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/229c2621-344f-3399-b465-15c4c4e14b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:cb:f4:91:c4:ba:a0:e1:ee:a3:71:af:65:16:50:2e:0c:13:
         64:f1:ae:67:6e:a6:5a:61:05:e4:e4:34:fe:38:4c:cf:f9:8e:
         dc:a7:a2:fc:84:b2:aa:ad:cb:ed:46:5d:56:8b:12:c8:bb:0e:
         3e:e6:f3:46:b7:e7:ee:68:09:dd:0c:35:b5:b0:b3:4c:71:8e:
         f7:2e:91:97:2e:56:c4:0f:6b:fc:b6:cd:32:fb:22:78:39:4f:
         78:1b:cd:83:29:97:e5:7d:a5:63:82:f9:42:3d:03:52:18:6c:
         51:cc:ee:52:64:57:c1:a3:fc:dd:ad:6d:05:fc:e1:05:13:e2:
         c0:1f:84:16:1a:9a:e3:be:87:0c:06:3a:b8:ec:63:6a:c8:8f:
         52:c1:2a:47:bf:7e:dd:47:a5:c3:22:2a:9b:5a:ef:1c:a9:ae:
         2e:bf:92:fa:31:63:bf:d6:8e:dd:55:1a:a3:c1:2d:d2:c1:29:
         17:4c:b5:41:79:a5:1f:16:4e:66:4b:09:6b:99:67:5b:6c:33:
         67:e6:68:69:ca:8b:fa:e1:b1:4d:d2:00:7d:8d:19:51:91:c4:
         05:b1:4c:4c:ba:8b:bc:d0:78:8b:18:fe:12:63:0d:66:8b:eb:
         c7:12:10:ec:39:65:af:a1:56:52:65:5a:57:f2:4a:fd:05:0c:
         cb:cd:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:15:22 2025 by rpki-client