Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73a1d652-153b-3347-a7fa-ac87c6e7a0e3.roa
File:                     73a1d652-153b-3347-a7fa-ac87c6e7a0e3.roa (raw, json)
Hash identifier:          0ERq/K5V+bcxMd2SqYG2gri4GVQlQRL2MH5fbeld1r4=
Subject key identifier:   ED:80:55:11:4F:0D:F9:6D:38:98:57:8F:18:5C:B6:43:0F:CA:8A:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B906A2A1C4E5683F71B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73a1d652-153b-3347-a7fa-ac87c6e7a0e3.roa
Signing time:             Wed 11 Dec 2024 15:18:00 +0000
ROA not before:           Wed 11 Dec 2024 15:18:00 +0000
ROA not after:            Tue 11 Mar 2025 14:18:00 +0000
asID:                     397202
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:90:6a:2a:1c:4e:56:83:f7:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:00 2024 GMT
            Not After : Mar 11 14:18:00 2025 GMT
        Subject: CN=6ee64d52-1e4f-4fc7-927a-bd8e3ce6da06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:56:0c:43:89:e2:56:7a:be:08:dd:b5:45:47:
                    6e:1b:06:27:4b:08:95:0b:b9:9e:a7:9b:a6:55:35:
                    c7:be:4e:b4:14:a6:58:3c:8b:1a:72:43:b9:ec:f7:
                    1c:ee:43:76:1b:23:15:79:df:b1:8e:df:17:8e:d3:
                    51:91:cf:c4:01:f3:e4:eb:13:01:4d:4c:9a:e3:68:
                    8f:38:f1:27:e2:d4:0a:df:c0:a1:49:f7:75:31:58:
                    46:d0:87:59:ac:21:80:91:d3:f6:e7:62:74:d7:7a:
                    dc:29:e6:a7:77:2c:bf:c2:b8:f8:c5:56:c3:46:2b:
                    a6:4d:e5:5c:28:6c:d2:e4:56:ef:05:ee:fd:f2:51:
                    24:10:89:d5:f1:ae:49:3e:64:65:d3:f3:2f:b6:f7:
                    24:42:d5:ee:e3:ec:10:b6:c6:2f:c7:df:77:9f:58:
                    fd:30:d0:8d:07:0d:e4:9e:6a:e1:8e:7a:64:81:bc:
                    84:21:a5:13:7b:8c:3c:b6:f4:dd:0e:a0:8b:9f:d0:
                    e5:12:63:8f:d9:3f:d4:58:cb:9f:f7:5a:c3:bf:e3:
                    50:b8:d9:2d:44:42:70:5d:3f:f8:99:82:81:e0:a3:
                    30:9a:e9:08:60:ff:c4:9b:3b:cc:2c:15:4f:95:fe:
                    ea:2d:3c:34:3e:ca:29:42:1a:a2:ff:1b:45:e6:29:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:55:11:4F:0D:F9:6D:38:98:57:8F:18:5C:B6:43:0F:CA:8A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73a1d652-153b-3347-a7fa-ac87c6e7a0e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:fa:eb:61:65:16:9c:08:97:c4:22:c3:28:b1:0d:39:bf:bd:
         db:19:d9:6f:89:2f:42:23:69:c5:f7:43:67:33:20:ac:bf:4b:
         04:68:ba:c3:41:e2:c6:89:ea:0b:69:19:c7:18:eb:05:be:cb:
         60:8b:87:09:8b:ac:5b:2b:87:a0:91:d2:dc:10:ae:0a:71:50:
         91:76:0c:ec:6d:0a:8f:bb:c0:85:11:23:36:5d:37:06:1d:7e:
         e0:85:bb:b5:f6:6e:1f:28:d1:56:0d:0d:3c:cd:23:29:d2:73:
         72:78:0b:aa:79:6d:b8:74:95:84:19:d1:0d:a5:0e:0a:d1:2a:
         c2:ed:ef:6b:86:4e:2c:72:60:b3:f2:45:4d:56:99:00:d0:74:
         b7:8e:02:dc:11:ae:e2:2b:df:5d:b4:af:ba:56:f4:1b:38:40:
         e1:19:90:56:4b:84:98:4b:2f:55:3d:57:31:ff:33:52:d5:f5:
         11:47:b1:60:91:47:9b:9f:1f:de:35:b1:9a:a2:ab:2b:e7:30:
         07:50:48:39:df:46:37:09:fd:32:17:96:df:59:32:14:f4:c1:
         62:11:32:14:bb:fe:d4:2c:f4:be:70:64:a5:ac:3e:66:dc:f1:
         29:2b:bc:de:7d:86:81:25:d1:e1:ee:18:db:be:99:f6:a6:74:
         20:56:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:51 2025 by rpki-client