Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e72dda9-ff50-3d62-b06a-9caf1a1470ae.roa
File:                     6e72dda9-ff50-3d62-b06a-9caf1a1470ae.roa (raw, json)
Hash identifier:          yVFTgVoO2tfBrVdhtHpx2vEhiTlY4Ujv6g9VT+YdpMY=
Subject key identifier:   DD:72:E0:6E:04:A7:F0:C4:98:7E:03:45:7A:6C:B1:DE:2A:19:10:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B8C6536ECE3AEDCBAB380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e72dda9-ff50-3d62-b06a-9caf1a1470ae.roa
Signing time:             Wed 11 Dec 2024 15:17:58 +0000
ROA not before:           Wed 11 Dec 2024 15:17:58 +0000
ROA not after:            Tue 11 Mar 2025 14:17:58 +0000
asID:                     396569
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:8c:65:36:ec:e3:ae:dc:ba:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:58 2024 GMT
            Not After : Mar 11 14:17:58 2025 GMT
        Subject: CN=c0738dc4-c25d-48ac-a802-d1ab06f325cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:28:f8:77:29:07:2f:f7:70:7f:66:2d:ae:9e:
                    ac:3c:2e:03:79:dc:cc:73:f0:9c:05:4e:a9:e5:2a:
                    76:05:f7:5c:dc:e0:7b:53:62:1b:93:fa:a0:3f:98:
                    13:97:56:e9:49:2b:f3:20:35:05:24:a6:bf:e8:b8:
                    65:5a:4c:8d:d4:7c:e0:3c:c1:b2:56:31:36:c6:a7:
                    25:4e:bc:7b:61:c6:44:79:e6:36:8f:45:6b:80:72:
                    0e:c8:09:ed:06:e2:5c:86:75:7e:3e:9c:9b:3e:ae:
                    8e:8c:db:73:70:83:96:93:91:a2:da:ce:af:46:90:
                    da:75:d0:4d:9b:10:9c:d5:ce:c1:fb:b4:49:8d:7f:
                    a6:eb:50:a8:f6:25:7c:6e:51:8a:f1:22:2a:72:28:
                    68:97:9c:ce:57:31:e5:8c:53:3b:b7:58:44:c1:89:
                    55:31:a6:c9:31:cb:53:64:79:4f:03:60:76:60:27:
                    2e:f5:bc:ee:08:05:4e:56:e0:71:e3:80:0f:6a:b6:
                    82:60:88:64:8b:76:f0:8e:ea:f3:3d:56:0d:87:df:
                    c4:ef:bf:be:9d:d0:af:c1:e2:53:60:28:45:4d:12:
                    b2:df:26:14:33:17:58:e9:6b:9a:64:bc:d1:d4:ec:
                    90:c7:b5:b6:03:7f:44:36:c7:35:fc:04:b7:bd:90:
                    d4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:72:E0:6E:04:A7:F0:C4:98:7E:03:45:7A:6C:B1:DE:2A:19:10:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e72dda9-ff50-3d62-b06a-9caf1a1470ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:02:f0:9e:f2:88:5b:a1:94:cb:ea:f1:4e:2e:cb:84:5b:63:
         fd:66:52:27:f5:d9:0b:b8:a8:bf:e5:3f:5d:7b:b8:48:83:25:
         18:81:34:2e:63:36:55:25:4e:62:ff:65:08:a5:23:d6:a7:c1:
         e3:be:f3:8a:3f:90:79:aa:b4:56:5b:3b:92:fa:15:3b:f0:b6:
         ca:51:5e:2f:a8:10:dc:f7:a0:08:69:a0:f7:f7:73:b8:68:2a:
         a9:7d:83:0f:1f:73:7f:82:dd:e3:0f:b5:9d:6b:50:91:bd:88:
         ac:ee:f9:44:91:67:9e:64:15:82:ab:dc:f6:ba:26:68:bd:73:
         db:cb:20:63:2e:7e:2f:15:a2:42:e4:08:1e:ec:60:32:56:ab:
         f0:68:77:dc:20:9c:8a:14:97:ab:d7:4d:1d:96:7e:50:c9:22:
         ad:b1:bf:a8:8c:f3:47:81:d0:97:2f:b1:0a:e5:6e:4e:df:71:
         fa:70:9f:57:02:18:5b:00:2c:45:f8:11:6c:18:72:79:6d:2f:
         36:a4:5e:ee:ef:36:d2:b8:ca:8b:d6:42:3d:41:2c:e7:ed:35:
         2c:7c:3f:e5:e6:fe:6f:d6:95:b1:62:e3:de:90:51:d0:0a:f9:
         cf:3b:e6:28:d0:a4:40:51:20:dc:1a:7d:af:10:ab:7c:ed:ed:
         83:0f:78:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----