Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa
File:                     5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa (raw, json)
Hash identifier:          T98kftn7fjZiL532pXhHlsFy3BFd18yA/J6PuGp1T/8=
Subject key identifier:   49:55:75:D7:74:DF:CC:8E:4C:7D:37:C9:22:3C:AB:22:8E:8B:A2:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B94769EA717916A358DB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa
Signing time:             Wed 11 Dec 2024 15:18:01 +0000
ROA not before:           Wed 11 Dec 2024 15:18:01 +0000
ROA not after:            Tue 11 Mar 2025 14:18:01 +0000
asID:                     396599
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:94:76:9e:a7:17:91:6a:35:8d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:01 2024 GMT
            Not After : Mar 11 14:18:01 2025 GMT
        Subject: CN=efbceeb4-99b0-4542-9293-01c31bcd201d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:f8:ce:61:a1:ae:86:01:23:6d:07:3e:e5:
                    03:9f:b3:08:be:6b:2d:b6:b8:f4:7b:17:97:d6:a3:
                    d3:76:4a:a2:69:b2:51:46:0e:76:8e:78:7b:93:f5:
                    ce:3a:57:5b:a0:7f:c0:fc:3f:7c:d2:3d:63:55:d1:
                    3b:9a:c7:21:92:a9:74:92:7a:79:74:cd:0e:ae:a9:
                    4b:c7:f8:2d:29:cc:83:b2:9f:93:e8:3a:6c:67:3a:
                    8e:3a:d7:81:16:39:3a:35:6f:26:6c:28:31:8b:af:
                    b1:8a:40:bd:0a:c4:06:9c:1c:1c:c7:cb:2a:67:9f:
                    1e:11:03:39:9b:5e:11:a4:15:ff:96:7f:71:8a:23:
                    8b:80:a4:72:2c:2f:3e:8c:1f:b3:13:4b:48:99:ef:
                    c2:94:0c:c9:e5:96:0c:14:92:6a:26:dd:c4:fb:0f:
                    22:de:5e:04:92:fd:47:c6:5c:6e:d4:71:6f:f9:eb:
                    d7:8e:ce:20:3d:bb:90:b2:1b:bc:25:60:72:42:48:
                    04:50:5c:64:3f:c9:ec:f1:93:7b:96:35:fd:32:71:
                    08:50:bb:c6:99:3c:27:e9:24:34:f5:8e:ea:4e:c5:
                    2e:38:8b:ca:02:76:f9:dc:ad:3e:b4:a3:b4:d1:dc:
                    92:f9:81:ba:ad:3b:5d:96:68:dc:c5:95:dd:5f:67:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:55:75:D7:74:DF:CC:8E:4C:7D:37:C9:22:3C:AB:22:8E:8B:A2:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:88:8f:00:39:81:cf:0a:e3:66:7f:c4:f6:93:21:1f:37:d5:
         6b:ab:de:ba:4a:e6:87:38:c2:8f:89:35:5c:03:2c:3f:4c:c5:
         d3:7b:c1:f5:a4:15:3b:36:88:de:f8:29:32:72:9b:61:3c:10:
         e0:7d:91:25:3f:93:1a:d0:35:e4:cb:5f:4b:52:2e:d0:27:92:
         5e:44:9f:82:05:02:1a:21:1c:63:55:9b:5b:f3:8b:ad:6b:73:
         9b:fc:65:c0:ca:05:21:4d:35:02:d9:21:8f:76:91:f6:6d:84:
         08:21:23:db:0e:26:72:f4:82:5d:62:cf:e2:74:2f:a1:d4:f6:
         11:c5:44:f1:d3:66:ac:00:8d:a3:35:e0:59:de:12:57:ea:17:
         85:b2:5f:72:c1:2b:72:1f:f4:5f:5e:ce:c7:90:93:2c:f6:81:
         84:25:0e:6f:55:a7:8a:52:fb:d8:97:85:0d:81:a9:43:a3:cf:
         2e:a2:c8:3c:50:94:e6:a0:d8:cb:64:95:ce:88:ec:62:c7:fd:
         82:13:22:d2:56:53:f5:6c:86:ae:0b:8c:a0:b4:d8:15:03:fd:
         e7:2f:ba:48:de:74:f8:d3:b5:4f:e8:b7:dc:6f:7a:71:b3:a2:
         14:ef:09:21:42:3f:05:8e:77:50:e3:6d:57:c3:cc:ff:02:e7:
         a4:2b:66:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:50 2025 by rpki-client