Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0da78fad-d003-3f4b-b3d2-ef23d8bc213d.roa
File:                     0da78fad-d003-3f4b-b3d2-ef23d8bc213d.roa (raw, json)
Hash identifier:          KpT/8opdwrOZFY/oFg7Z7dBajmiKEPyxyGBIKjnOmLs=
Subject key identifier:   C3:8D:F0:21:1A:02:EC:F5:E3:C6:4B:8C:E0:ED:15:15:EA:F5:C7:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BA1D3529748EC8B1F5E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0da78fad-d003-3f4b-b3d2-ef23d8bc213d.roa
Signing time:             Wed 11 Dec 2024 15:18:08 +0000
ROA not before:           Wed 11 Dec 2024 15:18:08 +0000
ROA not after:            Tue 11 Mar 2025 14:18:08 +0000
asID:                     396565
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:a1:d3:52:97:48:ec:8b:1f:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:08 2024 GMT
            Not After : Mar 11 14:18:08 2025 GMT
        Subject: CN=5a588424-1328-498c-81d3-5c8e8987d5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:21:fa:b2:d7:41:b0:76:cc:d7:b3:9a:cc:
                    c1:fc:ce:df:74:aa:3a:72:6c:15:54:a3:74:12:a2:
                    90:29:3c:20:9a:54:c1:82:34:c2:8d:36:f9:c7:45:
                    2b:02:04:06:84:fb:20:69:9e:f0:e7:c9:a1:b3:03:
                    03:1e:7d:a6:84:26:be:88:00:27:60:71:ab:34:f6:
                    f8:08:22:49:3f:dd:82:5a:f7:e3:18:8d:93:7e:e8:
                    ad:5b:7e:e1:18:e1:b0:f1:f2:0b:4f:a0:dc:40:13:
                    d7:2b:45:e3:5e:43:f1:87:28:cb:0d:f7:3f:45:7f:
                    04:40:24:77:1d:24:55:f7:bd:80:af:cc:f4:eb:5f:
                    5d:2c:10:c0:1d:bc:04:6e:2d:c3:7a:30:21:57:f2:
                    e1:47:44:61:ba:95:cf:b5:97:91:17:c7:6d:4d:44:
                    dd:34:18:23:4a:d9:2c:9f:10:5d:94:3e:96:8b:87:
                    74:37:68:d8:f8:37:d6:d1:9f:a0:14:3c:75:8d:41:
                    f3:45:62:db:5e:b7:b5:17:3c:f4:92:09:4b:a9:79:
                    f8:23:e1:c3:97:76:48:a9:3e:23:cc:1d:02:df:e3:
                    db:4a:5f:5c:b0:7a:aa:ef:b5:62:39:80:c5:09:12:
                    cc:90:08:49:21:b9:42:35:f2:9f:08:70:23:85:97:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8D:F0:21:1A:02:EC:F5:E3:C6:4B:8C:E0:ED:15:15:EA:F5:C7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0da78fad-d003-3f4b-b3d2-ef23d8bc213d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:db:2f:6b:d9:4b:56:c9:82:bf:a1:62:da:54:f6:f1:43:b7:
         47:8f:a8:b8:44:4a:0a:00:77:b0:9c:1e:fb:ab:ff:95:e5:71:
         3a:24:70:a8:e1:a8:bf:dd:24:1c:8f:99:6f:23:e8:2f:5e:61:
         ab:f0:b6:93:7f:47:eb:da:42:5e:d6:8e:67:46:6a:32:8b:8b:
         49:d7:e2:f8:37:07:cc:14:ec:43:90:45:15:46:65:6e:5c:36:
         38:57:06:9f:49:b7:b2:8b:0c:c3:05:5a:7a:65:df:19:cc:0b:
         1e:e0:7d:20:fa:74:56:00:cb:25:7f:bf:a7:04:75:0a:3b:9c:
         12:37:08:74:35:99:fe:85:b5:88:31:59:8a:e4:69:80:b1:a3:
         10:64:1b:90:e8:6c:db:c6:bc:7e:f1:13:71:a5:d4:8b:7a:60:
         ab:ab:0b:f9:74:e8:f0:45:2f:12:07:21:18:59:a9:0e:1a:20:
         a8:e8:7d:1d:5b:30:16:e9:b8:15:be:97:93:83:f9:a9:81:46:
         2f:c5:67:e0:68:e2:a7:a8:3c:ff:ef:88:8a:54:13:11:c2:5f:
         a8:86:36:4c:e3:91:09:af:cb:bd:03:61:31:bf:d8:34:1e:ba:
         8b:bf:5f:56:56:51:91:fe:48:f2:f7:35:85:47:13:d6:77:8c:
         b4:74:c6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:17 2025 by rpki-client