Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75cefced-83f1-339a-a60a-e61a07ae4ffa.roa
File:                     75cefced-83f1-339a-a60a-e61a07ae4ffa.roa (raw, json)
Hash identifier:          ww93a89jgaH1QDoZo5MpNuYtpT9pwrD2z8eG8joXGRk=
Subject key identifier:   47:A3:62:FB:51:3E:C4:01:68:BB:B4:CC:A6:7B:47:4B:00:2D:C9:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848696087137858F3E735EC9480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75cefced-83f1-339a-a60a-e61a07ae4ffa.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1017:a110::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:87:13:78:58:f3:e7:35:ec:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=6f2d1f06-6b44-47f2-9e6a-c98caec38d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:a3:54:56:9d:da:50:0c:e1:de:d8:fd:6f:
                    b5:47:e9:73:51:8e:45:a7:b0:78:04:19:62:68:f5:
                    5a:0c:fd:ab:27:ed:94:e7:05:31:a2:7a:a2:67:f2:
                    fe:34:69:5c:22:95:d5:25:85:1a:59:41:bf:7e:97:
                    bc:05:0f:d1:34:4c:a0:16:bb:92:ad:ea:b6:96:6a:
                    50:c7:8c:99:ab:f4:6d:b0:14:44:de:0a:1c:29:a4:
                    20:7a:8f:6c:dc:d0:86:a6:0e:83:96:e1:0f:d8:68:
                    10:b7:3d:04:92:a4:6c:87:ae:ce:71:84:a3:b9:a9:
                    43:27:a0:a9:69:3c:0c:35:10:b0:b0:43:34:b6:6d:
                    db:89:0e:ee:23:a0:cb:1d:f0:4e:51:50:03:20:ce:
                    e1:b3:71:aa:1a:73:5f:9b:e4:dd:43:ce:82:f2:70:
                    36:74:d9:ad:0e:ff:c0:b2:cd:a5:01:83:f9:1b:47:
                    e1:3d:67:8d:f0:4b:0b:91:6b:a6:03:45:bc:84:d7:
                    85:74:d0:c1:bf:56:72:e0:6c:4a:15:07:26:b6:b0:
                    a4:d1:0c:e0:a2:b5:d5:17:1a:fd:56:76:c5:ea:e0:
                    f2:9a:de:33:b4:37:08:97:cc:72:e9:4c:16:62:fc:
                    1a:3a:f8:39:3d:92:84:34:1c:7d:75:91:c1:a5:d6:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A3:62:FB:51:3E:C4:01:68:BB:B4:CC:A6:7B:47:4B:00:2D:C9:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75cefced-83f1-339a-a60a-e61a07ae4ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:64:32:42:1c:f3:60:92:7c:81:33:a7:33:0d:1c:20:50:79:
         38:5a:34:4b:24:64:d9:2e:ab:81:c2:92:49:8f:aa:1e:1d:a1:
         43:6b:2c:87:48:15:35:59:17:14:81:96:39:e2:74:03:b5:9c:
         21:f9:d4:8f:e8:4e:7b:f4:9f:07:91:66:ee:ed:7f:b7:bb:5c:
         7c:b2:08:4d:d7:13:0f:64:44:2e:cc:ae:af:da:c4:19:91:97:
         df:32:07:95:ff:b7:6b:cb:8c:5b:ac:b5:d1:38:59:36:22:ef:
         ca:f9:9d:fa:9a:86:6d:2f:55:a2:9d:f4:8d:92:5c:bc:7b:79:
         ff:59:03:82:99:2c:f9:ee:51:1f:ea:f6:8e:6d:70:86:cc:59:
         ac:5f:1a:09:43:d4:58:8b:72:b6:89:a7:f7:1c:db:98:f7:44:
         09:db:95:7b:28:85:01:4c:dc:c1:cd:a8:42:2d:48:80:02:fa:
         74:89:92:e0:8d:7e:a5:3a:1c:6d:94:f9:98:60:ef:08:4f:9c:
         01:a2:f4:e3:dd:92:d8:b7:12:4d:fe:8c:99:1a:26:44:9b:95:
         4e:d9:07:8a:9d:c0:95:ca:9a:c3:38:ee:30:a2:0c:1b:90:4a:
         61:df:ec:42:24:86:90:0b:72:51:6f:4c:42:b4:58:e9:57:93:
         ed:8e:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:15:57 2025 by rpki-client