Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/873c6b5a-7cc2-33ac-9676-945449e1ac1d.roa
File:                     873c6b5a-7cc2-33ac-9676-945449e1ac1d.roa (raw, json)
Hash identifier:          fkKUr3Zu3a3Ewa3GacMki17QjnOO108cNZHALQ9+Mu8=
Subject key identifier:   A6:59:7C:AD:1B:94:A3:BD:ED:56:B9:7B:DD:74:BA:7A:8B:3F:9A:42
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858483885587455F8842213F20180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/873c6b5a-7cc2-33ac-9676-945449e1ac1d.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     0
IP address blocks:        2602:107:2900::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:58:74:55:f8:84:22:13:f2:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=a0ff629a-8c47-4554-86ff-ff7deb4b3b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:71:af:72:76:37:eb:fd:e6:37:2d:2a:e7:
                    94:93:fe:d2:0b:63:1e:a3:d0:ef:51:2c:99:bc:e8:
                    ba:45:25:44:8b:fa:04:fb:a4:f7:71:0b:68:81:3c:
                    6a:41:bd:ad:69:1a:20:03:6e:86:04:4e:15:5d:c1:
                    8b:f6:d7:ca:99:4b:a7:e9:85:bb:e4:36:dd:1d:d8:
                    5f:31:a4:b0:ff:3c:3e:2b:f3:c4:e7:bb:b2:a0:33:
                    36:7b:75:af:e7:68:e7:3d:0e:05:7b:2b:68:d4:52:
                    cc:9a:ea:f1:36:8d:81:9a:ed:98:7d:43:cd:5f:5a:
                    99:9f:6e:70:86:a1:2f:c3:fd:05:29:a5:4f:a0:77:
                    a2:8d:56:1f:28:f4:be:9d:59:8a:b3:7b:73:6e:62:
                    59:a9:ec:d5:8f:0c:dd:5d:e6:a8:8e:be:1c:5a:aa:
                    71:79:2b:ed:6d:b2:cf:e5:ab:bb:9d:db:a4:5b:99:
                    18:c5:b0:8b:d4:11:83:6d:39:d4:f3:05:ae:e9:07:
                    c0:ec:78:80:12:6d:de:83:2f:c1:b7:32:53:c5:c4:
                    1e:ad:6c:87:4d:2b:ea:c8:98:52:0e:d9:ca:cd:c7:
                    73:5e:fc:8f:27:e3:13:a9:ea:e3:b7:29:54:3a:c2:
                    c5:87:74:31:01:36:d4:be:a0:1c:89:f5:84:8b:e4:
                    8e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:59:7C:AD:1B:94:A3:BD:ED:56:B9:7B:DD:74:BA:7A:8B:3F:9A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/873c6b5a-7cc2-33ac-9676-945449e1ac1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:2900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:3f:01:c8:d4:57:4f:25:52:23:a5:c0:4b:ad:6e:ac:f7:27:
         d4:9b:a5:ef:22:2c:6e:36:ad:87:6e:be:da:d8:ed:d7:5d:a2:
         c6:57:cc:25:8b:a9:9a:78:de:cf:e5:33:4d:03:a2:fe:8c:a7:
         b3:5d:c6:73:73:07:81:0a:13:92:03:d0:86:1b:11:de:9c:20:
         73:9f:45:7e:07:6f:e5:cf:ce:a8:2d:53:b8:4a:45:d7:ca:11:
         4b:61:a9:04:55:17:97:ed:e5:31:7c:f2:62:4f:ae:fd:07:1e:
         95:d4:61:05:70:2c:b8:21:9c:d7:39:14:41:b7:9d:dc:bb:d0:
         6b:c0:a6:55:35:e0:c0:f8:58:7b:dc:01:23:ec:1d:c8:89:fb:
         2a:cd:29:a7:ca:ff:3d:bd:87:b4:0f:e5:1b:cf:40:75:5d:ec:
         80:df:cf:a8:23:42:10:f9:df:2b:ee:16:25:42:3a:e9:99:e0:
         7e:e4:9a:2c:8d:67:45:53:3a:6a:4c:19:f1:aa:5e:0e:0b:23:
         16:c3:78:9e:90:1e:2b:33:2a:eb:e9:5e:43:3c:a7:eb:4b:3a:
         e6:70:25:6d:91:fe:4d:d5:bd:ca:79:6f:35:68:8a:07:e2:ef:
         fa:7f:0d:7c:4f:db:ba:37:47:a8:d6:12:50:d0:96:e7:da:e8:
         12:80:0c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:13 2025 by rpki-client