Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
File:                     df5148de-ede2-3842-905b-9207fff8922c.roa (raw, json)
Hash identifier:          f7UAMY3Hx+J6KNPX2ked1l4o3vKZry2heXsPru6kDLM=
Subject key identifier:   16:93:BE:58:CA:E7:59:65:07:80:06:7E:1A:6B:67:EB:72:C8:EA:38
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F432858487755DEA775337803F7243BE0
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     21713
IP address blocks:        2605:c380::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:de:a7:75:33:78:03:f7:24:3b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=e822ca6c-e284-47bb-ba0a-9e87d354b67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:e6:db:7a:84:45:88:31:aa:31:c4:3e:ed:
                    e3:13:65:d9:58:58:3d:23:7e:6c:35:2d:14:06:75:
                    d9:6e:bb:fb:c0:71:31:47:2a:ba:0d:18:bb:dc:ad:
                    ce:e4:8c:3d:97:83:33:01:68:e0:a3:3f:09:dd:2c:
                    f8:08:b6:0a:b2:48:82:60:60:16:f0:e3:81:e3:2d:
                    3f:9b:3a:71:37:16:35:ec:2e:8a:70:51:00:c6:0d:
                    df:fc:02:75:bc:f7:0d:c5:33:d5:8e:03:57:a4:de:
                    72:bf:9a:22:58:39:e1:ff:ef:41:af:c5:14:37:49:
                    e1:19:f4:4f:9e:f9:fb:fb:77:12:c8:e2:30:04:d3:
                    db:2e:db:86:a7:02:6c:f1:aa:b0:48:e1:68:6e:a5:
                    95:ce:49:60:9d:55:06:3f:5d:13:a2:80:b5:a7:a8:
                    71:6b:21:6a:fc:88:c2:d7:a3:1d:fe:9b:4b:a2:bf:
                    6b:7f:c8:36:31:99:f0:e8:70:31:91:15:9a:3a:74:
                    e5:4d:ca:26:25:dc:1a:aa:03:8b:3f:84:d0:52:64:
                    4e:59:1d:8a:1d:fd:8e:e1:55:74:a7:42:4a:b3:86:
                    e4:c0:a4:76:62:54:58:3a:fb:9f:35:c5:64:9d:8b:
                    f6:25:97:b9:98:bf:82:9e:28:27:5a:bb:47:70:f7:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:BE:58:CA:E7:59:65:07:80:06:7E:1A:6B:67:EB:72:C8:EA:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f6:b9:42:f7:15:10:19:e8:55:37:98:9f:99:38:80:b5:9d:
         13:a1:d7:89:a5:83:bf:5f:18:04:75:41:e8:dd:73:ad:0d:e8:
         3a:21:cc:f4:d0:2e:13:41:2b:5e:3a:be:db:c8:fc:f0:2a:7f:
         7e:4c:a4:f3:83:75:2b:e1:87:6c:14:15:27:ae:32:a2:e7:dc:
         ff:02:77:dd:71:99:a8:b4:f5:a9:f5:09:11:38:75:26:a0:4c:
         68:71:42:0e:6e:c5:40:58:4c:3e:4a:98:cf:3f:95:b7:c9:01:
         b7:cc:87:83:5c:cb:df:47:c8:1f:d1:e8:59:41:a6:05:52:f7:
         ca:76:28:c9:cb:d7:eb:e1:49:79:b8:44:9d:6b:f2:be:74:ae:
         9c:dc:67:58:0e:74:81:16:b1:16:a9:db:72:d0:af:d7:73:1f:
         56:fb:47:b9:04:91:36:d2:6c:9e:02:21:c2:28:01:b3:19:36:
         b2:1f:2a:71:7a:55:04:9e:cb:63:6d:e0:f9:96:79:95:58:c5:
         48:ca:0a:ea:14:2e:50:97:5b:39:26:dc:19:62:25:3b:d9:b6:
         14:bb:27:1d:37:ea:70:40:c1:10:ac:13:76:9d:4a:25:aa:aa:
         b4:dc:0e:ee:f4:ad:a8:43:73:68:18:78:e5:2b:c5:4e:31:5f:
         46:54:92:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:18:42 2025 by rpki-client