Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa
File:                     54268940-4af9-39c9-bd94-1f4f53099856.roa (raw, json)
Hash identifier:          GjBlBVGg2xUcjpuk2zY3ldSyCfemYGwXi/3UYm7RM2w=
Subject key identifier:   DF:12:82:8A:7D:38:25:07:45:85:33:39:D9:A2:13:DB:31:BA:67:F4
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584839EACFDA47C710DF8B310B80
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     5006
IP address blocks:        2604:3000::/32 maxlen: 48
                          2604:d380::/32 maxlen: 48
                          2605:6d80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:cf:da:47:c7:10:df:8b:31:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=71565299-6005-4da0-ba39-7dea70b3fd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:d8:46:55:95:ee:b2:51:02:a6:57:cd:40:
                    ba:55:13:7c:00:e4:1d:f8:99:24:eb:97:b8:e0:07:
                    9b:14:1a:04:28:1b:29:3c:42:03:e9:79:09:e4:41:
                    2d:fe:53:d9:e4:61:ac:a8:3d:c4:24:49:13:4e:1f:
                    dd:c7:69:fd:65:19:1c:de:7e:a7:ea:da:99:8b:c2:
                    21:d2:a4:7e:6b:94:cd:60:05:e0:1b:32:18:ff:cf:
                    79:c9:de:f4:8d:67:cc:e8:25:5d:4d:b8:00:89:b0:
                    83:88:93:28:99:1c:72:7f:06:e8:0b:38:f8:3d:c7:
                    f3:e6:86:d7:c7:da:e6:23:1b:3b:33:59:52:62:17:
                    af:a5:71:9f:80:98:56:a8:a5:70:39:d2:e5:2a:8b:
                    ef:ca:7f:a5:5d:d7:e7:13:9e:f2:22:f8:3a:f6:58:
                    a9:0c:37:2e:09:ee:fc:9f:7b:b0:87:09:2b:0f:43:
                    c0:0f:df:90:07:7b:dd:bd:b8:7e:a2:4f:b3:65:bb:
                    6d:fd:a9:67:fb:78:03:5c:a1:ee:26:c2:c6:24:cb:
                    3f:bb:d3:f5:c6:f2:31:74:7a:07:60:0e:1f:d5:1d:
                    66:29:0b:14:3e:d6:21:8d:8e:a7:7e:d6:e5:b3:74:
                    5a:90:74:e2:55:8c:0f:39:e0:5b:4e:2e:a3:b7:82:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:12:82:8A:7D:38:25:07:45:85:33:39:D9:A2:13:DB:31:BA:67:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3000::/32
                  2604:d380::/32
                  2605:6d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:53:d1:18:cb:9f:5a:93:8f:55:d9:b8:66:9a:01:eb:8d:b7:
         d7:ab:e6:ad:07:e9:ef:9b:f3:4c:22:3f:70:85:3a:66:38:e4:
         a2:e0:01:17:79:d1:64:1c:cd:25:b4:07:57:91:b7:f1:94:2c:
         6d:7b:f1:76:2d:f0:dd:5a:4a:f3:b9:41:f9:b0:ac:fd:1d:66:
         17:00:2e:93:47:61:ec:b0:5e:1a:70:be:d2:b7:3e:af:fb:54:
         c3:db:33:2c:5e:70:60:d4:32:98:8f:cc:d7:e6:9f:0c:6e:56:
         4e:e9:0c:bd:3c:68:02:21:d0:11:71:aa:28:80:b5:26:6a:78:
         53:39:94:59:c9:a4:7a:f7:2e:71:c5:15:f9:87:48:81:a8:fd:
         99:ea:ae:4e:24:f0:c3:b7:33:26:21:4a:cd:75:55:bc:80:ce:
         84:33:c9:ef:ed:7a:be:4f:b7:d7:6f:e6:20:19:c1:e5:34:07:
         fc:65:01:49:d5:33:0b:bb:ef:4b:a3:28:9f:27:7a:12:76:42:
         3e:88:fc:8d:ea:31:19:fd:f0:25:87:4c:92:e4:03:79:8a:4c:
         48:41:e8:b1:99:44:6b:d0:2a:81:a0:fa:55:7e:89:bc:8f:0c:
         3a:d4:ac:13:7a:11:8d:7c:83:a7:27:8c:d8:15:a9:71:50:0a:
         28:69:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:38:47 2025 by rpki-client