Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1118821-6ed0-324c-8b97-1cc3534add85.roa
File:                     f1118821-6ed0-324c-8b97-1cc3534add85.roa (raw, json)
Hash identifier:          bXeuzizbInHcxBaL09fLkDVgG+MBz4WXPZzj6Fr1vuk=
Subject key identifier:   01:1A:5D:17:EB:1D:68:89:34:05:03:DD:84:03:86:F2:EF:57:FE:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BA209840E1EF975BBC200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1118821-6ed0-324c-8b97-1cc3534add85.roa
Signing time:             Wed 11 Dec 2024 15:18:08 +0000
ROA not before:           Wed 11 Dec 2024 15:18:08 +0000
ROA not after:            Tue 11 Mar 2025 14:18:08 +0000
asID:                     22547
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:a2:09:84:0e:1e:f9:75:bb:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:08 2024 GMT
            Not After : Mar 11 14:18:08 2025 GMT
        Subject: CN=f9cc688a-353d-40bd-b71a-d669d9c4ce25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:07:40:ea:5a:24:1f:1c:fb:45:34:8b:cd:
                    80:ef:82:0c:ee:52:c5:ad:5e:65:f7:77:5e:e6:48:
                    ee:64:a6:80:f9:b7:34:58:51:89:a4:5a:4f:2f:7c:
                    51:9d:95:6f:c1:87:44:c1:86:96:e7:d0:6f:b5:3b:
                    52:72:44:b3:86:6b:ce:30:46:4d:53:4c:d8:6b:dc:
                    05:b8:5c:e3:f8:79:88:7b:a3:65:c3:57:c6:13:75:
                    0a:86:c5:9a:1e:ba:79:76:a4:f4:ac:49:d9:77:bf:
                    b1:51:68:24:65:e4:29:12:46:9d:01:2c:47:12:65:
                    88:30:bf:a3:89:18:13:23:87:b7:42:97:24:d6:06:
                    ea:7a:87:14:44:b5:36:e6:32:a1:ce:97:0a:01:16:
                    33:82:39:27:54:ec:41:10:a8:ba:b8:68:b0:f1:8c:
                    9d:03:d0:e3:8b:ef:cb:c8:6b:f9:f2:68:4b:00:c9:
                    c3:2a:8e:37:cf:c7:20:b2:d5:3a:cb:ac:a7:7c:3b:
                    51:47:f3:13:52:2f:2f:3f:90:29:1d:04:22:36:45:
                    ff:74:02:59:cd:d8:66:48:6e:61:e2:3a:3f:52:68:
                    16:25:90:18:1c:87:44:88:c2:56:46:12:85:8d:60:
                    dc:02:7d:ed:94:19:86:05:16:ba:49:96:11:a3:89:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1A:5D:17:EB:1D:68:89:34:05:03:DD:84:03:86:F2:EF:57:FE:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1118821-6ed0-324c-8b97-1cc3534add85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c9:c3:32:f2:71:db:de:90:2e:93:61:e4:f3:de:fa:80:6a:
         7a:33:16:74:45:23:85:c9:36:ae:f1:c2:b2:cb:a8:36:09:9d:
         33:f6:3f:6a:f7:40:47:8d:bb:a5:c1:aa:1e:da:b9:e0:4a:de:
         bf:f8:e9:0f:cb:d1:0c:17:f2:4c:50:49:69:05:89:fa:6c:84:
         4c:4a:fa:ee:50:93:af:a5:c0:8f:32:20:4f:d1:4b:62:d6:51:
         99:77:15:92:76:29:26:0c:38:7d:b0:36:55:80:ab:46:cd:0c:
         72:e2:fe:52:a5:50:bd:59:fb:30:07:4b:d6:00:83:dc:ef:69:
         86:67:1f:a3:3d:d6:3e:5c:3b:67:ef:d2:4c:4b:4f:c5:a7:98:
         9f:cc:f9:ac:1f:88:17:05:36:e4:5c:d8:82:f9:31:b1:54:40:
         38:7f:35:aa:22:80:df:c3:66:ad:94:cd:88:39:79:b7:a8:9a:
         92:73:28:f9:89:af:15:bb:30:73:47:05:f9:e6:7c:60:42:ce:
         9a:29:73:44:01:d8:22:ab:83:49:61:c9:95:31:db:dc:2c:86:
         ef:04:84:29:91:21:b7:66:1e:be:2b:18:f0:dc:aa:1f:0a:67:
         e4:2d:ef:4d:51:f1:df:d8:bf:17:8e:2c:02:ff:1b:93:17:13:
         25:05:78:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgsG6IJhA4e+XW7wgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgwOFoXDTI1MDMxMTE0MTgwOFowLzEtMCsGA1UEAxMk
ZjljYzY4OGEtMzUzZC00MGJkLWI3MWEtZDY2OWQ5YzRjZTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkcHQOpaJB8c+0U0i82A74IM7lLFrV5l93de
5kjuZKaA+bc0WFGJpFpPL3xRnZVvwYdEwYaW59BvtTtSckSzhmvOMEZNU0zYa9wF
uFzj+HmIe6Nlw1fGE3UKhsWaHrp5dqT0rEnZd7+xUWgkZeQpEkadASxHEmWIML+j
iRgTI4e3Qpck1gbqeocURLU25jKhzpcKARYzgjknVOxBEKi6uGiw8YydA9Dji+/L
yGv58mhLAMnDKo43z8cgstU6y6ynfDtRR/MTUi8vP5ApHQQiNkX/dAJZzdhmSG5h
4jo/UmgWJZAYHIdEiMJWRhKFjWDcAn3tlBmGBRa6SZYRo4moSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAEaXRfrHWiJNAUD3YQDhvLvV/7XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjExMTg4MjEtNmVkMC0z
MjRjLThiOTctMWNjMzUzNGFkZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC3JwzLycdvekC6TYeTz3vqAanozFnRFI4XJNq7xwrLLqDYJnTP2
P2r3QEeNu6XBqh7aueBK3r/46Q/L0QwX8kxQSWkFifpshExK+u5Qk6+lwI8yIE/R
S2LWUZl3FZJ2KSYMOH2wNlWAq0bNDHLi/lKlUL1Z+zAHS9YAg9zvaYZnH6M91j5c
O2fv0kxLT8WnmJ/M+awfiBcFNuRc2IL5MbFUQDh/NaoigN/DZq2UzYg5ebeompJz
KPmJrxW7MHNHBfnmfGBCzpopc0QB2CKrg0lhyZUx29wshu8EhCmRIbdmHr4rGPDc
qh8KZ+Qt701R8d/YvxeOLAL/G5MXEyUFeO0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:50 2025 by rpki-client