Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdf304d-a1e6-3519-95bf-9427e16881bd.roa
File:                     ccdf304d-a1e6-3519-95bf-9427e16881bd.roa (raw, json)
Hash identifier:          6IQ2mbvywYyrxVuZsru+NoOw3+b1mfDQvNR8+mAn3js=
Subject key identifier:   67:2B:18:6F:EE:8F:74:60:4B:57:2D:0E:29:68:F4:4E:22:4A:A3:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B97808AA73A55F2B46740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdf304d-a1e6-3519-95bf-9427e16881bd.roa
Signing time:             Wed 11 Dec 2024 15:18:03 +0000
ROA not before:           Wed 11 Dec 2024 15:18:03 +0000
ROA not after:            Tue 11 Mar 2025 14:18:03 +0000
asID:                     397208
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:97:80:8a:a7:3a:55:f2:b4:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:03 2024 GMT
            Not After : Mar 11 14:18:03 2025 GMT
        Subject: CN=6a8609e5-4353-428c-bd94-25d17d1c0054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:92:e0:e1:17:57:b4:50:4c:41:e1:a8:a0:28:
                    b2:e9:25:7a:34:75:95:49:c3:7b:fe:e4:1c:29:0e:
                    ab:8e:49:30:16:6c:b6:2e:32:60:15:0c:c5:84:5c:
                    58:f3:b0:f7:a2:94:57:09:c2:8e:19:bc:fd:dc:ca:
                    48:f1:67:d0:48:83:f8:be:54:8f:1c:38:4d:ee:30:
                    6e:fb:83:c6:02:54:f5:12:b5:45:8a:d5:c8:fe:a8:
                    b0:a5:42:81:22:06:96:20:be:f7:91:bc:33:7a:4b:
                    5b:61:a7:6b:8e:dc:70:63:a6:46:48:fa:e5:23:29:
                    44:ce:43:26:10:c8:56:19:4e:5e:65:01:d2:0b:9e:
                    af:46:cf:c3:0f:18:42:14:1a:59:c5:06:fa:fe:93:
                    4a:c1:37:24:1d:a5:6e:cd:8e:b4:77:f9:d3:e5:39:
                    ce:27:c5:72:b2:90:66:f7:4b:3e:5b:57:89:38:8f:
                    29:3b:59:b6:f2:1b:08:20:6d:8f:1e:86:75:64:85:
                    66:8d:8f:dc:02:fb:d2:14:98:6c:8d:59:dd:3e:41:
                    e8:1b:68:64:68:96:65:a8:4e:f7:c7:18:6c:22:fb:
                    c1:29:be:3f:b0:d8:36:06:75:43:38:19:87:9c:52:
                    c3:8c:57:7a:d3:fd:36:e8:5a:00:87:a4:02:59:ef:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2B:18:6F:EE:8F:74:60:4B:57:2D:0E:29:68:F4:4E:22:4A:A3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdf304d-a1e6-3519-95bf-9427e16881bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:d2:c1:39:22:ab:cc:f5:fc:26:87:5f:a8:4d:cf:48:fa:d3:
         26:6d:19:b9:44:23:c4:5c:10:c6:83:b8:04:ff:b0:17:57:17:
         8f:61:6f:01:68:24:4b:df:d9:20:87:f6:18:05:69:75:87:df:
         d1:e3:15:dd:53:44:44:77:b1:0e:6b:8e:51:25:5c:2d:9b:01:
         c0:dd:cc:d1:0a:e0:43:5d:1c:7d:6e:b0:f5:d6:6b:03:d3:a9:
         33:0c:27:75:ed:fe:bb:b9:c6:f0:3d:b7:5c:b9:ba:ed:51:d1:
         89:27:6d:84:0e:dc:c6:9d:ce:0a:43:00:f8:c5:4e:61:37:df:
         9b:4f:46:26:1a:c3:0e:35:ee:c8:93:fa:82:bd:13:4e:8e:2f:
         49:19:c9:29:c5:b6:6a:db:bc:fa:6c:07:e0:26:8c:62:23:1a:
         05:b6:31:f1:54:04:2f:fb:14:33:22:fc:c1:c7:4c:81:ca:40:
         ba:0d:c7:23:8b:1f:4a:b7:43:15:a1:ba:a3:e7:70:38:00:9b:
         24:fa:a8:86:f4:9e:36:69:e9:cb:59:87:af:1f:2e:4f:5f:06:
         4e:96:00:a2:ec:75:b0:49:ee:f5:51:2e:09:33:1d:6a:f4:8b:
         29:6e:32:1d:44:44:34:04:0f:14:e4:46:25:46:f9:a7:3e:27:
         9f:f0:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:39:59 2025 by rpki-client