Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa
File:                     95d67456-7bfe-3633-bb8e-6f617a5bea59.roa (raw, json)
Hash identifier:          uHFDa2fMe947kwvEfelLbMRql7mOUujJou/NifS0ngA=
Subject key identifier:   AB:12:76:58:E7:8D:7A:D5:94:07:A6:DF:A9:E8:84:88:FB:77:D3:E4
Certificate issuer:       /CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
Certificate serial:       010D0C9F432858483B4FF64E66BD90E835FEDDA8
Authority key identifier: 32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     55194
IP address blocks:        2604:5480:20::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:f6:4e:66:bd:90:e8:35:fe:dd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=7d1c1cf6-17e6-42b2-8805-3f4dea38ea28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:d9:64:86:b8:6e:be:c0:3b:c2:e2:b2:d3:
                    9f:8f:91:96:34:0f:4b:4d:6d:97:70:8f:db:5e:98:
                    c7:24:40:bd:94:d3:4c:a0:48:c1:eb:de:a1:ed:a6:
                    76:f7:7b:d6:fc:52:4c:dc:b7:25:28:bd:6a:c8:52:
                    c6:32:10:a9:16:46:b1:7a:f7:8c:0e:a0:1c:83:16:
                    8e:cc:6b:8a:48:7f:8a:04:e5:3b:10:b8:d8:dd:f3:
                    03:1c:7d:b3:29:d3:3c:82:ed:3c:f1:d6:7e:36:c3:
                    81:d4:49:b5:d5:e2:cc:86:9f:83:46:05:5d:96:fd:
                    87:8c:0d:e2:77:37:e1:02:7f:50:21:21:a8:d8:78:
                    02:05:f0:18:f3:7c:ed:08:dd:35:52:3c:c1:00:d0:
                    89:fc:ef:24:b3:90:15:fb:20:aa:5a:a1:ad:0b:b1:
                    8a:99:43:8b:d8:16:1c:b6:c1:d1:bc:4b:4f:4e:62:
                    e6:34:7c:fe:57:70:fd:3b:d6:8b:c0:50:1d:cf:e6:
                    31:0d:8d:ea:40:45:39:11:9c:0a:5d:53:c8:d2:11:
                    b3:97:f7:52:74:7c:bd:a8:85:58:3f:24:7a:ee:d1:
                    dd:7f:5c:77:16:0e:21:e5:49:eb:8f:bb:15:f8:2f:
                    f4:1e:be:9f:7e:6d:bb:ac:33:7b:52:29:fd:21:78:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:12:76:58:E7:8D:7A:D5:94:07:A6:DF:A9:E8:84:88:FB:77:D3:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl

            X509v3 Authority Key Identifier:
                keyid:32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5480:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f0:1a:06:11:7f:8b:b8:c6:42:71:31:5c:85:9c:43:02:70:
         87:f1:5c:98:5c:94:89:d3:30:b0:ca:dc:bd:6e:7f:88:98:ff:
         ca:f4:ec:1c:4b:ac:4c:0e:30:9d:2e:ae:29:4f:fa:4f:d2:06:
         74:fa:2b:2c:22:24:cc:3f:43:10:48:73:f1:93:4d:48:f1:24:
         a9:46:f9:15:0c:94:c5:12:c9:6f:12:3d:cf:55:e2:38:55:ee:
         7a:78:b4:3f:55:fa:4d:79:31:28:5d:06:16:d9:eb:dc:25:a0:
         35:10:2f:02:5a:6b:f0:55:2e:e2:d4:6a:e9:f7:a7:33:e5:f3:
         df:d6:bd:15:19:f1:66:4b:df:b9:c7:f8:1c:67:f1:83:e6:d1:
         96:a4:be:0a:c9:06:67:8f:43:1c:cc:b1:24:bd:43:6b:2b:01:
         de:05:50:10:17:e9:dd:f6:3e:63:ba:c1:8e:2e:2f:ce:e6:bd:
         b3:70:a8:89:45:4a:64:28:4c:f4:22:f5:d6:c4:20:63:e8:4e:
         4b:01:4d:2e:0c:e6:1e:64:da:43:3d:2c:2c:31:9b:e7:dd:fd:
         00:8e:8c:4d:93:e1:06:f4:6e:36:61:35:8e:0e:2a:1a:37:b9:
         ae:c7:9d:49:7f:0a:05:46:2c:51:45:3b:e4:3d:61:40:24:ef:
         40:e3:c3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:22:26 2025 by rpki-client