Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/008ec763-1f2c-3c63-abad-3c072de7b1ed.roa
File:                     008ec763-1f2c-3c63-abad-3c072de7b1ed.roa (raw, json)
Hash identifier:          iuvY8D21iXiWyRTQLDcJKIRdstebU6Uv+PZQB4ExYl4=
Subject key identifier:   D5:EC:5B:ED:70:EA:EF:55:72:AA:AA:B1:05:DE:55:87:BA:BE:99:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B921ABE68695AC5ED0DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/008ec763-1f2c-3c63-abad-3c072de7b1ed.roa
Signing time:             Wed 11 Dec 2024 15:18:00 +0000
ROA not before:           Wed 11 Dec 2024 15:18:00 +0000
ROA not after:            Tue 11 Mar 2025 14:18:00 +0000
asID:                     396577
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:92:1a:be:68:69:5a:c5:ed:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:00 2024 GMT
            Not After : Mar 11 14:18:00 2025 GMT
        Subject: CN=b9ead009-471d-4930-bf10-9b57b1c672d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:58:55:71:fd:da:47:7a:85:ee:95:9f:d9:
                    ab:63:89:9a:0a:41:23:c4:11:8b:96:12:fc:fe:65:
                    d7:02:cb:b3:9a:c8:73:56:ac:3e:f5:34:74:20:4a:
                    d2:63:b2:d4:b5:54:a9:83:2c:44:e5:b9:59:2c:aa:
                    3f:dd:ba:f6:eb:67:6f:aa:34:76:a5:17:99:c1:27:
                    26:32:ed:35:1f:7a:4d:49:8f:79:a1:3c:cf:48:7d:
                    7c:23:51:2e:16:bd:b9:1a:b7:42:11:ed:9d:b1:3e:
                    64:ff:58:2f:5a:1d:d1:32:49:aa:26:ad:ab:48:13:
                    0b:b5:7a:85:90:18:f7:2d:7f:ad:b3:a4:37:c2:bd:
                    da:fc:29:19:34:23:67:68:7f:68:83:26:f0:32:79:
                    ba:b1:c6:40:63:ab:09:63:cd:a7:52:47:ce:00:73:
                    14:f3:9c:35:de:6a:09:47:c4:e0:e4:38:14:17:f5:
                    65:f6:4d:dd:54:7b:4f:37:7f:e4:d7:96:6c:65:5d:
                    0e:2f:8a:46:61:66:2a:db:fe:f3:ee:49:8d:03:b7:
                    15:27:03:5b:00:cf:6e:19:12:f7:d9:ac:ce:b5:96:
                    e2:59:7e:74:19:fe:5a:9e:dc:73:4c:e8:07:4b:b6:
                    a8:3e:6a:05:ae:85:8e:2b:5e:33:96:44:b0:fa:68:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EC:5B:ED:70:EA:EF:55:72:AA:AA:B1:05:DE:55:87:BA:BE:99:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/008ec763-1f2c-3c63-abad-3c072de7b1ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:ed:6f:28:f3:13:5b:5d:8a:8b:2f:02:2a:ad:3c:d1:9c:
         cd:14:03:d2:a2:93:9a:30:e7:72:99:4f:b7:de:0a:b5:a1:7b:
         ea:63:96:4e:ac:38:b1:86:25:fa:fc:72:c6:ce:62:6e:31:a6:
         b7:2e:ca:6b:0a:41:7e:51:e4:c0:02:36:97:a5:53:f2:6c:87:
         42:a8:21:58:7f:50:24:fe:eb:6e:da:c1:f4:21:fb:ca:28:19:
         e0:62:84:90:1f:27:6f:06:7b:ad:ac:50:d7:26:32:d2:be:59:
         10:9f:28:df:59:df:b9:9e:66:6d:64:31:5a:42:51:9b:7c:20:
         72:7c:19:0b:0a:bb:2c:7f:13:da:37:88:e3:35:5d:40:6a:bb:
         fa:97:19:a8:e0:ec:e0:b5:36:79:1b:40:93:90:d4:2c:3f:b1:
         f1:d2:1d:77:d2:82:81:a0:31:2e:2b:f7:5a:4d:74:7c:86:59:
         0b:14:d8:40:0c:4a:22:11:bd:6b:b4:2e:54:28:51:de:c4:c6:
         f8:8b:98:81:97:17:15:96:e8:68:e8:6f:20:17:f0:6d:c9:09:
         63:bd:f9:e8:f4:9c:1b:06:ee:ce:94:c5:aa:06:fe:cc:5a:a7:
         bd:73:8d:cb:c7:9d:5b:b9:a2:5f:18:ee:a8:dd:09:8d:87:58:
         b3:d0:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:08 2025 by rpki-client