Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9da84b8d-731c-3fc2-95b2-d3092cfc3745.roa
File:                     9da84b8d-731c-3fc2-95b2-d3092cfc3745.roa (raw, json)
Hash identifier:          GYlcafJB57qjJw6ggpuWroHPRFRclkFgXLPqchEzHHs=
Subject key identifier:   DF:CA:3E:A9:EF:C2:EC:0F:06:C5:4A:5F:DA:37:4E:79:FD:FE:03:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BA16656F517FD17664700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9da84b8d-731c-3fc2-95b2-d3092cfc3745.roa
Signing time:             Wed 11 Dec 2024 15:18:08 +0000
ROA not before:           Wed 11 Dec 2024 15:18:08 +0000
ROA not after:            Tue 11 Mar 2025 14:18:08 +0000
asID:                     396605
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:a1:66:56:f5:17:fd:17:66:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:08 2024 GMT
            Not After : Mar 11 14:18:08 2025 GMT
        Subject: CN=91ac8d74-3c2c-4987-9de6-5f55dbc6d5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:54:c8:1d:e3:6c:cf:21:48:93:16:ed:d1:
                    83:21:61:c4:27:13:c3:07:1b:16:9a:6f:01:c8:3a:
                    d9:c4:8c:2b:a5:1d:57:19:0f:69:eb:05:ce:00:bd:
                    df:06:c9:96:2b:d3:49:04:ea:86:98:d2:56:c7:85:
                    57:25:79:b4:ea:6d:39:e9:cc:41:44:16:24:26:4c:
                    77:d6:b1:f2:24:f8:aa:8d:82:23:31:4f:bd:9c:ca:
                    4f:24:f5:a7:be:c6:b5:fd:8c:61:f0:90:ef:69:ea:
                    ea:3e:0b:1c:ad:fa:71:7a:48:62:29:cb:0c:6c:26:
                    0c:94:f3:54:67:93:b6:5b:ab:fd:90:48:0e:b2:fe:
                    f6:20:2f:fb:d5:72:e1:45:40:ff:18:c2:e3:1c:c2:
                    06:04:2c:8b:20:19:19:b1:96:4e:b5:01:37:26:78:
                    39:81:0f:f3:a2:ef:5a:0b:ed:60:63:38:75:eb:11:
                    d4:d6:d5:80:f5:79:56:85:a6:80:c3:77:b5:3a:da:
                    6b:b9:ac:b6:f1:8e:4f:23:c8:d2:b8:06:bb:1c:4e:
                    52:70:6c:44:17:bc:77:95:2b:83:8c:cc:e7:df:25:
                    a9:40:33:2b:c3:85:56:a3:6a:3d:d0:9f:02:cb:95:
                    8f:0a:19:ce:c6:ad:4d:b6:1f:26:c6:85:fb:81:57:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CA:3E:A9:EF:C2:EC:0F:06:C5:4A:5F:DA:37:4E:79:FD:FE:03:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9da84b8d-731c-3fc2-95b2-d3092cfc3745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f8:92:cb:cf:a6:8f:1d:a2:a7:50:46:b2:3d:4d:48:b3:39:
         4c:6f:a3:b2:5a:c0:e8:fb:ef:76:40:db:9e:8b:fd:f8:15:ac:
         1e:74:be:5a:fa:c1:38:27:a6:42:7a:6a:84:ba:99:b8:01:49:
         68:8d:e7:62:2d:fb:6c:24:8a:29:40:bd:66:ec:50:38:47:3d:
         71:87:e1:b8:78:e7:23:af:62:10:5a:d9:18:db:d9:f5:75:5e:
         3b:f5:87:cc:7d:0e:88:6d:f6:06:33:6b:41:14:2f:f9:6b:4b:
         9e:6e:e3:ad:e2:76:66:7c:5a:6f:34:a7:d3:de:e3:cf:a2:2f:
         f5:3c:55:72:c9:b7:ec:c3:94:c0:7a:19:ab:e7:53:38:50:54:
         26:20:37:d1:ab:8d:e6:84:ea:34:61:fe:31:2a:58:2c:3a:4c:
         39:07:a0:88:ac:4c:60:85:fa:b2:40:e6:1b:c3:3d:a4:a1:cf:
         76:1b:b8:7a:8c:98:b0:dc:18:ac:0d:82:a6:14:42:ed:b8:9c:
         86:a2:ba:63:02:f5:5a:33:79:d4:f4:24:f0:02:87:2d:48:b0:
         53:41:e4:13:9b:c5:bb:b5:d4:5f:db:d7:a3:b9:ee:c6:95:a9:
         d3:f2:5c:92:7e:03:cf:01:a7:47:63:cc:00:6e:f6:ef:99:43:
         66:04:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----