Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80199b93-6f23-3bcb-af9d-2e883dcf00bb.roa
File:                     80199b93-6f23-3bcb-af9d-2e883dcf00bb.roa (raw, json)
Hash identifier:          gWKkjQp1MjbRJLcHEqUpRRKvJsWjW7z8uWwK9HGSA2I=
Subject key identifier:   CB:2A:02:05:C6:D3:FD:3C:42:F5:BB:E4:E3:59:22:B6:64:FA:CE:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BA5E877B7956DAF65B900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80199b93-6f23-3bcb-af9d-2e883dcf00bb.roa
Signing time:             Wed 11 Dec 2024 15:18:10 +0000
ROA not before:           Wed 11 Dec 2024 15:18:10 +0000
ROA not after:            Tue 11 Mar 2025 14:18:10 +0000
asID:                     396540
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:a5:e8:77:b7:95:6d:af:65:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:10 2024 GMT
            Not After : Mar 11 14:18:10 2025 GMT
        Subject: CN=19624262-0fd9-447c-baf5-36d42bf217b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2c:94:7c:d7:49:5e:73:8f:78:5b:e1:b6:a4:
                    e7:a1:ac:fc:3c:fb:fe:26:f1:b4:6e:c0:da:e6:9e:
                    9e:d4:44:34:39:5f:0b:4e:cc:77:4f:b7:e5:21:cf:
                    b2:03:61:0b:6f:10:03:67:30:93:50:9c:50:58:cb:
                    fa:46:22:4c:1c:fd:88:69:d7:6d:09:3a:6d:20:b6:
                    c3:63:b9:24:49:42:6a:7c:1a:81:b4:a8:61:85:eb:
                    72:e6:1e:85:ec:c6:27:75:3b:37:63:11:ce:03:3f:
                    c3:d3:18:6f:0b:0e:ed:fb:83:1f:36:c0:0d:f3:c2:
                    54:23:ca:a5:37:2b:e9:4f:84:ef:16:26:54:68:14:
                    1b:83:60:42:40:3f:d7:f0:5c:e0:89:ea:a7:6a:1d:
                    ee:32:b7:88:25:a8:11:8f:48:9e:34:ed:99:1a:ea:
                    c0:e1:d6:0e:7b:6d:bb:69:80:3b:c0:d6:34:7b:f7:
                    da:ae:aa:77:50:00:fc:50:d7:9c:97:c7:f9:e4:2c:
                    a1:3d:49:ea:7b:db:78:e8:0d:87:c0:ce:ca:e6:91:
                    08:b8:e3:5d:20:e3:d0:d5:c2:61:5e:42:9b:49:05:
                    38:da:43:a5:ec:b0:87:b2:e4:06:04:2f:3d:1b:5a:
                    95:9c:fd:1f:7a:5e:d5:ed:7f:03:cf:33:56:29:34:
                    e4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2A:02:05:C6:D3:FD:3C:42:F5:BB:E4:E3:59:22:B6:64:FA:CE:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80199b93-6f23-3bcb-af9d-2e883dcf00bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b6:f0:d5:f3:ba:f2:e3:38:97:b4:30:6f:b4:ad:c7:9d:d4:
         b7:c0:3c:b0:7b:da:86:a5:31:59:a6:6c:5e:6d:3a:05:33:e3:
         f6:1e:16:e9:0b:ad:cc:ea:bc:b5:83:50:cb:f5:f3:64:10:c4:
         7e:61:db:4e:af:4d:c6:0a:de:07:20:d6:76:49:94:6d:e2:0a:
         a8:47:05:39:e0:79:a1:01:3c:b2:58:03:b7:0d:3e:2b:c4:aa:
         cd:4e:f9:0c:43:d3:b6:97:a6:e0:69:a8:76:33:09:74:e1:58:
         0f:1e:4f:2b:f7:42:aa:ac:02:ef:3e:52:99:40:66:4a:2e:e3:
         a7:0b:a4:25:e4:25:44:09:44:94:63:1b:4d:ca:cc:64:77:22:
         d1:47:42:de:24:10:ec:b2:88:ff:e3:86:de:19:e4:e9:fb:23:
         3b:97:fa:d6:94:6c:f6:f1:53:2b:a7:85:53:9c:a7:11:08:c6:
         aa:3b:4f:50:c7:e0:6f:7f:90:76:20:f2:16:aa:e7:19:91:2f:
         e7:48:2c:cd:50:fa:dd:d3:47:7a:7e:45:97:86:22:68:5f:be:
         7b:e0:e0:0a:f3:69:bc:62:2b:10:5b:0b:43:a9:f8:56:66:37:
         f5:9b:d2:ee:fe:81:d7:e2:c8:e4:50:2c:13:c7:68:22:be:2c:
         10:a1:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----