Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/64330574-c8be-38a4-9915-f2974fb16123.roa
File:                     64330574-c8be-38a4-9915-f2974fb16123.roa (raw, json)
Hash identifier:          MyI+iySSyF6BXHs5ZfReIpWe6WhKkW2pbxWII6QOQBU=
Subject key identifier:   65:07:0B:3C:89:5D:7C:71:7C:B3:B3:33:AF:3F:AA:DE:0B:31:50:6A
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F432858484D7594E332AE9FF30BFF9E80
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/64330574-c8be-38a4-9915-f2974fb16123.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     3356
IP address blocks:        2620:a0:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:94:e3:32:ae:9f:f3:0b:ff:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=db4b589b-be4f-4e2a-8b50-e7e9d0e4726b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:03:86:53:f5:1b:09:5a:7f:33:0c:9f:ed:
                    41:9c:a2:ab:bb:d7:95:37:50:f7:2f:7d:94:0f:8d:
                    c5:dd:57:d6:b8:50:36:1f:92:25:e0:ba:e2:cf:96:
                    21:f1:49:6c:b1:65:98:4b:a6:5d:dd:d1:0f:f7:14:
                    ad:cc:a0:9d:20:2b:2c:e2:79:07:eb:06:34:52:dd:
                    9c:c3:d4:4b:9f:97:1d:b7:2f:6c:27:43:70:c8:40:
                    ac:39:2a:a9:8e:c9:e0:fe:3c:bd:3f:ae:6b:1f:20:
                    80:56:17:b6:34:5b:3b:3f:89:82:a4:94:de:3e:7c:
                    bc:f0:65:76:72:08:b6:55:18:9c:21:6e:7c:d5:cc:
                    36:ca:9b:14:3b:4d:75:aa:3f:8b:34:b2:80:b2:ae:
                    3a:7b:c6:3d:12:a6:54:7e:18:39:21:c0:18:1f:5a:
                    8a:e5:73:3e:13:ae:ef:81:71:58:53:7d:68:dc:38:
                    75:11:44:21:6d:b0:02:d0:8f:3d:8b:b8:69:e3:90:
                    4f:6c:4a:1d:41:f9:6d:ca:22:5e:cb:75:b4:85:b7:
                    d0:6d:6b:33:48:56:9b:3e:10:f9:3c:b9:3f:6c:ea:
                    18:0b:4f:f6:b9:1e:a2:11:8e:9e:ed:c4:b7:45:42:
                    90:28:8d:c7:95:e4:27:ce:a0:1c:41:1e:98:fe:0a:
                    9c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:07:0B:3C:89:5D:7C:71:7C:B3:B3:33:AF:3F:AA:DE:0B:31:50:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/64330574-c8be-38a4-9915-f2974fb16123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ee:65:3b:73:c8:d0:ba:a6:f4:f6:13:90:c9:a2:8b:89:15:
         e2:64:d3:e0:d2:aa:99:d1:85:d9:17:13:07:41:07:55:bd:5b:
         d6:dd:07:04:59:ef:f2:db:7d:f0:f5:60:95:35:2b:91:31:a1:
         86:d6:d8:30:f6:f0:a6:35:ac:20:f7:de:56:5b:d3:64:2a:c9:
         ec:73:5d:27:21:70:eb:b2:92:3b:b1:af:4f:63:3c:33:97:af:
         5c:fa:f4:ad:d5:22:0f:5e:43:56:4b:1d:37:05:a6:3f:b8:c2:
         76:5f:6c:e9:5f:a2:a0:23:4b:43:ce:e5:d5:94:be:3f:a9:24:
         e7:e5:65:be:19:17:80:92:bf:80:22:d9:af:f9:a5:bb:93:ca:
         16:d7:7e:ea:ba:4e:42:dc:a8:bd:41:bf:45:7c:b8:34:cf:0a:
         b4:9f:da:2d:55:55:d4:dc:c5:d7:0f:50:48:fc:16:e3:3a:f8:
         f2:73:90:e4:80:e4:55:75:97:4f:14:7c:f8:7b:91:66:03:0c:
         84:43:c2:f9:14:f8:b3:07:cf:ca:09:46:a5:af:f0:ae:21:83:
         c4:38:c4:3a:39:7f:ec:77:16:45:75:11:b7:c5:80:57:89:17:
         80:0f:09:90:4b:e7:72:70:61:9f:ef:a3:75:fa:74:f5:06:fc:
         f7:3e:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:21:50 2025 by rpki-client