Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa
File:                     854c42fa-3e10-360c-b939-919df3fc02c0.roa (raw, json)
Hash identifier:          QXYBJ9EQ/skFzmmioeJ/j6OTjfnXdsEWnmoXXpjdCsU=
Subject key identifier:   B4:49:37:28:BB:7C:3E:3E:00:A3:63:20:13:A6:9B:71:5D:E8:A7:12
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584820CA90FA4E7648ACA2A1ECC0
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa
Signing time:             Sat 07 Dec 2024 14:00:51 +0000
ROA not before:           Sat 07 Dec 2024 14:00:51 +0000
ROA not after:            Fri 07 Mar 2025 14:00:51 +0000
asID:                     399077
IP address blocks:        2606:4dc0:ffff::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:20:ca:90:fa:4e:76:48:ac:a2:a1:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Dec  7 14:00:51 2024 GMT
            Not After : Mar  7 14:00:51 2025 GMT
        Subject: CN=c3b0930e-aefb-4c18-8125-36824c423a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:25:02:d9:1c:ce:ec:10:63:70:ae:35:1d:
                    f2:d8:ca:e9:95:dc:26:26:8c:cd:93:99:cc:d3:81:
                    e7:f4:af:ca:7e:6f:4f:cf:14:f6:91:7d:ab:0e:88:
                    a9:f6:12:bb:0d:07:24:aa:b6:1d:01:b4:d0:fe:e6:
                    05:fd:c0:3f:ff:e3:40:7a:07:4f:0c:68:9b:fc:87:
                    e1:03:00:67:f2:b8:83:e1:40:2c:67:15:a2:a6:0f:
                    d8:85:5d:d3:72:60:f8:2a:72:c3:b7:b9:0a:e5:50:
                    64:e5:3a:2a:b9:81:b7:b8:2e:ac:38:79:0e:72:ec:
                    a2:3c:74:88:c3:b0:f7:45:5a:85:c2:58:73:7d:cc:
                    8d:0e:5d:2d:ff:5f:e9:95:9a:08:ae:fe:0b:78:f5:
                    7d:59:45:21:df:39:3f:33:6f:90:8f:da:5b:a2:c0:
                    bb:a8:3d:e6:1f:70:46:2f:dd:fa:05:b6:c5:91:72:
                    6d:54:4f:1f:c3:96:02:3d:fe:df:c0:66:f3:99:41:
                    cc:61:11:bb:8b:0b:30:46:d8:7d:da:71:4f:5c:33:
                    32:24:65:34:f1:43:0a:d8:65:37:1b:ba:2d:70:07:
                    85:0a:fa:52:9b:6e:92:3b:7a:4f:bd:9b:f1:09:90:
                    3e:d6:f4:55:4a:19:2c:73:12:66:de:80:96:d3:32:
                    c0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:49:37:28:BB:7C:3E:3E:00:A3:63:20:13:A6:9B:71:5D:E8:A7:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:56:b6:9f:56:15:5d:29:bd:72:22:f7:54:45:6f:a1:ff:1a:
         d2:50:86:8c:6b:d4:79:d4:e5:ba:f7:1b:a1:be:90:da:af:72:
         b1:01:23:4b:9a:59:41:17:3f:3c:d9:f7:ea:bc:aa:b4:3f:da:
         05:0e:8c:cd:53:05:86:54:cd:3b:7c:15:51:cf:5b:1b:45:c2:
         2e:0d:21:ba:3d:49:3d:df:ac:28:d2:e3:37:9a:42:e2:4f:d2:
         ab:ce:3d:9b:2e:66:86:30:e0:7f:4f:c5:28:1e:c8:59:23:62:
         b1:b4:2d:ab:8d:f4:06:79:ae:fa:6f:32:23:e3:1d:44:84:1e:
         6b:11:72:3c:55:7e:f9:eb:e1:88:da:3f:32:63:c6:b8:ff:b1:
         22:5e:5a:29:69:a2:dc:1e:f9:a8:9f:63:71:ae:64:b0:d2:c2:
         9d:49:25:cb:a0:26:33:ae:6f:44:b7:a6:88:41:48:5c:82:e4:
         a8:39:8c:79:d6:ae:34:c6:4c:d6:ab:77:b6:ba:a2:ca:c2:2f:
         dc:d3:c5:ff:6a:c0:da:ee:95:54:a1:a2:a9:0e:52:26:28:c6:
         99:3b:ca:00:29:13:23:35:5e:19:6c:0a:45:c0:a5:65:82:eb:
         d5:cd:4b:77:c5:89:64:7e:b9:ee:8d:5a:99:33:1a:31:e5:79:
         1b:d5:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:00:20 2025 by rpki-client