Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a5b022-c5b6-36d5-b423-644f9048d819.roa
File:                     d6a5b022-c5b6-36d5-b423-644f9048d819.roa (raw, json)
Hash identifier:          TFAbVvO+f8gmrLTcOtnX8VYC23/2rUGaQ4BAPOpkfSA=
Subject key identifier:   FB:C0:EC:E0:6B:77:B1:20:07:49:A1:57:3C:45:C8:70:86:FF:8B:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B8DAEDC7975688052F180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a5b022-c5b6-36d5-b423-644f9048d819.roa
Signing time:             Wed 11 Dec 2024 15:17:58 +0000
ROA not before:           Wed 11 Dec 2024 15:17:58 +0000
ROA not after:            Tue 11 Mar 2025 14:17:58 +0000
asID:                     396552
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:8d:ae:dc:79:75:68:80:52:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:58 2024 GMT
            Not After : Mar 11 14:17:58 2025 GMT
        Subject: CN=3db79b69-ee51-4f1b-b3f4-b9d0a99f335e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:b0:8b:93:1a:87:47:44:e7:f2:c0:9a:d9:
                    e5:46:18:6e:99:38:5d:2a:2b:b9:2d:3a:cd:76:f2:
                    52:ca:da:a7:0b:6b:cb:21:99:da:00:00:14:10:45:
                    a1:40:29:2d:06:cd:0f:9f:38:3a:54:f3:66:f1:d7:
                    0f:2a:89:36:95:ed:06:d8:a3:e1:64:de:36:56:64:
                    cf:54:24:4c:db:9e:88:dc:00:0c:75:e3:8e:13:95:
                    03:13:c3:21:9b:c9:75:61:ee:a6:1a:53:47:25:75:
                    11:5f:2e:e3:f4:cb:1f:24:50:a2:15:b8:bf:0e:10:
                    e6:7a:da:ae:c8:e9:b5:a2:a1:d0:23:b6:ef:63:5c:
                    be:43:30:72:98:0f:a5:a4:18:1c:47:08:76:89:5f:
                    12:d8:73:9d:24:5a:21:52:89:85:91:3f:4f:a6:40:
                    cf:5c:1b:26:e1:c6:cf:47:63:49:64:75:34:f5:48:
                    39:03:99:25:36:ac:fa:60:03:66:1c:0f:aa:4f:62:
                    dd:b8:5f:84:84:f8:8c:be:e3:05:c1:16:25:a4:46:
                    31:36:41:b9:6d:cc:97:61:54:87:b3:53:4a:71:2b:
                    57:b2:93:9c:61:34:fb:d7:79:08:8b:3f:8f:7d:3a:
                    56:10:35:40:82:df:76:25:b5:de:3b:d4:6b:cb:8c:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C0:EC:E0:6B:77:B1:20:07:49:A1:57:3C:45:C8:70:86:FF:8B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a5b022-c5b6-36d5-b423-644f9048d819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:62:95:6b:54:89:0b:84:9b:ca:71:a0:39:39:e1:da:f4:39:
         84:df:1a:68:07:a4:20:91:ef:f2:bc:f9:bb:90:be:c8:36:25:
         ef:9a:3b:0d:91:bd:ab:15:ae:41:04:72:1d:37:e0:db:e7:44:
         25:0a:ae:26:8b:42:93:21:de:3a:7a:76:c6:93:94:89:44:bb:
         81:24:39:e3:d1:19:b5:e7:be:58:2d:ed:ab:b1:f8:88:ea:c5:
         05:d0:4d:b3:25:43:3e:76:ab:09:c0:c7:c5:7a:4c:52:93:62:
         f8:9a:79:58:bc:6a:66:3b:2e:42:3d:77:35:25:1b:5a:aa:48:
         83:99:e5:f9:60:30:03:c8:6c:71:d6:a2:cf:04:df:dd:1a:48:
         c1:ae:9d:40:b9:4c:e1:62:2b:5d:a0:44:4f:24:db:72:12:7d:
         ac:36:90:54:e6:e1:20:b6:e9:7d:bd:23:7a:2f:a7:13:1c:b9:
         eb:0e:b7:ab:27:8a:5b:8e:83:0e:af:14:43:12:49:55:ae:ca:
         30:7c:ce:c0:f6:61:3a:4d:51:9b:05:87:3a:78:ed:ef:ff:0d:
         de:bc:0d:1b:95:6d:95:b2:a5:9f:79:66:9a:65:20:92:20:65:
         c7:a0:32:bc:df:2c:27:2b:f1:09:91:65:37:8a:77:48:4d:1d:
         60:fa:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:09:56 2025 by rpki-client