Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d28518e-839d-322d-a84a-5b6911c0c511.roa
File:                     3d28518e-839d-322d-a84a-5b6911c0c511.roa (raw, json)
Hash identifier:          x52M9Q6Zy6cyjvmPfeZA/NElJVpthQkOXVL+5v9edyE=
Subject key identifier:   14:6A:D1:DE:04:48:23:A9:88:74:4C:00:DF:42:88:94:24:6B:CF:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B8E4615D48DE564B1A480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d28518e-839d-322d-a84a-5b6911c0c511.roa
Signing time:             Wed 11 Dec 2024 15:17:59 +0000
ROA not before:           Wed 11 Dec 2024 15:17:59 +0000
ROA not after:            Tue 11 Mar 2025 14:17:59 +0000
asID:                     396739
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:8e:46:15:d4:8d:e5:64:b1:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:59 2024 GMT
            Not After : Mar 11 14:17:59 2025 GMT
        Subject: CN=128ccf6f-0535-4eed-9812-5c184126fbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:d3:d8:27:30:87:74:3c:67:7c:9b:7a:fd:
                    e4:5e:c5:02:9c:14:5d:d8:b6:cd:cc:90:c4:1a:5a:
                    05:26:65:ae:0b:59:64:2d:ba:76:ef:5f:55:bc:30:
                    32:a9:bf:9d:ff:de:a4:bb:19:b0:4a:90:52:bc:7c:
                    14:13:d5:6f:f1:f7:d9:2c:b6:0c:e0:f0:4a:b5:98:
                    a2:d5:d4:62:a0:81:cd:02:e6:b9:43:96:89:7a:3b:
                    21:04:46:b1:f0:4d:71:d8:50:c4:9b:95:c7:69:72:
                    7b:71:35:d2:69:3e:78:33:cc:98:7c:00:ff:c9:b1:
                    3d:e0:9c:8d:86:cc:94:83:ec:96:2e:45:20:87:b9:
                    1a:1e:69:c4:73:2b:ed:38:91:2d:a5:09:70:b7:82:
                    89:19:5d:ce:b6:04:da:90:b1:f6:10:3c:a8:24:e5:
                    38:bc:b0:46:a0:ce:63:6a:4b:9a:f1:9f:db:7c:8b:
                    10:fc:8e:ba:8a:e4:10:ac:0c:e4:8b:40:1e:c2:65:
                    d5:0f:4c:c3:a4:48:b8:3c:a1:39:b5:fe:20:8a:ac:
                    45:ad:ab:d5:4d:db:e6:51:56:0e:b8:3d:5e:91:37:
                    31:a7:fe:be:21:d7:cc:35:06:80:4e:72:e6:6e:87:
                    2a:bf:95:2f:bc:5c:01:e5:7f:b8:20:0e:99:02:51:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6A:D1:DE:04:48:23:A9:88:74:4C:00:DF:42:88:94:24:6B:CF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d28518e-839d-322d-a84a-5b6911c0c511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:f8:38:2f:a2:72:cf:50:98:49:6a:3a:94:51:e7:10:e1:43:
         bc:ee:77:66:42:82:9e:7c:e1:27:e6:a0:9d:40:ff:b3:54:b8:
         92:e3:bd:33:dd:34:f5:3b:b5:77:a5:b4:c4:b5:2c:c2:0d:2e:
         be:c8:bc:6e:c8:6c:da:ad:17:ce:fd:cb:b4:c3:43:00:93:5d:
         44:4d:0b:f3:39:2a:a5:37:48:7e:a4:a6:80:7b:70:7e:3b:2e:
         c6:9d:ff:8d:4f:5f:02:5e:be:ba:be:be:c3:67:d7:cb:49:8b:
         7d:4f:93:84:a3:9f:e2:4b:7e:8d:32:61:10:4e:96:ed:08:a9:
         10:f2:6d:78:b9:cd:4a:f4:63:f6:1d:4d:97:ef:58:53:ab:4f:
         65:94:7e:80:a5:f8:11:ce:a8:3b:8d:a6:14:94:93:3a:be:9e:
         65:b7:09:81:0e:af:8a:81:63:b8:9b:1e:f1:af:05:87:cc:da:
         3b:ac:20:fb:75:06:68:2b:41:2a:43:f2:c1:bc:bd:15:f0:92:
         15:6a:51:d1:9b:90:de:9c:05:55:6e:8f:51:5f:c7:e6:a2:15:
         5a:c2:eb:e5:0b:50:d6:43:59:09:61:f8:8b:b2:3a:cf:8d:bb:
         fc:b3:3a:b2:25:cb:c5:45:53:17:81:28:b1:5b:9e:ce:cc:d0:
         97:52:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:52:05 2025 by rpki-client