Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/edf9317d-d023-3670-9f97-477e94fcb8b3.roa
File:                     edf9317d-d023-3670-9f97-477e94fcb8b3.roa (raw, json)
Hash identifier:          SSMlmVYB1kuThQfBaye5oeRK4Sap5QBGTDQFEdMJnwU=
Subject key identifier:   B3:AB:C8:C7:12:0C:1C:D8:66:6A:A6:71:96:6A:3D:F3:4F:BF:5B:2D
Certificate issuer:       /CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
Certificate serial:       010D0C9F4328584855D59C96EEB4976BDD9379A0
Authority key identifier: 59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/edf9317d-d023-3670-9f97-477e94fcb8b3.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     13737
IP address blocks:        2620:11f:7000::/44 maxlen: 44
                          2620:11f:7000::/48 maxlen: 48
                          2620:11f:7001::/48 maxlen: 48
                          2620:11f:700a::/48 maxlen: 48
                          2620:11f:700b::/48 maxlen: 48
                          2620:11f:700c::/48 maxlen: 48
                          2620:11f:700d::/48 maxlen: 48
                          2620:11f:700e::/48 maxlen: 48
                          2620:11f:700f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9c:96:ee:b4:97:6b:dd:93:79:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=8732c9e9-6f4b-49e7-9e5e-4c9a18b90618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:05:7c:06:db:0b:88:51:84:21:53:19:4d:71:
                    bd:04:45:92:92:ce:0b:ae:ca:ca:19:68:d4:1d:a4:
                    07:37:c2:28:f8:d0:02:66:55:52:e4:8b:75:81:14:
                    89:99:09:1b:fb:e7:14:46:e7:07:cf:a6:3b:ad:46:
                    64:01:fe:5d:fd:65:38:8a:98:19:58:70:1b:e3:ba:
                    42:a1:07:6e:6e:f1:31:71:e3:2b:b9:b8:69:98:ad:
                    e9:f5:05:6a:90:30:5e:4c:2e:a5:41:54:43:f6:9f:
                    5b:a0:73:e1:92:ed:72:87:23:19:ed:cc:c5:80:a4:
                    e8:6a:29:0a:8a:ec:e8:00:8f:64:12:d1:4a:37:69:
                    61:ec:8f:35:58:3d:91:14:3c:66:be:fa:8e:ea:49:
                    ca:c3:9c:cb:36:ba:2a:d9:ea:d6:c9:58:00:de:1c:
                    60:ff:bd:bd:8c:4a:8d:bc:2d:16:18:9c:51:c0:ff:
                    24:9d:50:d9:49:6e:1c:5d:7c:cb:ba:3e:d1:e8:1d:
                    06:e2:e7:f8:d9:ad:fc:7d:86:a6:dd:be:0c:2e:8f:
                    ea:96:76:c0:ee:bc:5d:67:c9:6e:3b:76:da:24:0d:
                    f8:40:2f:95:cb:e8:22:9c:4b:43:dd:50:ef:87:36:
                    4e:82:5d:b4:46:da:65:1e:42:fd:e3:7b:17:c7:49:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AB:C8:C7:12:0C:1C:D8:66:6A:A6:71:96:6A:3D:F3:4F:BF:5B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/edf9317d-d023-3670-9f97-477e94fcb8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl

            X509v3 Authority Key Identifier:
                keyid:59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:0c:63:81:01:df:07:44:78:0d:9b:ce:d6:d2:34:2b:b5:5d:
         76:33:66:da:ba:41:07:32:39:9a:38:bf:b9:be:8e:94:8b:60:
         04:d5:23:cf:b1:4e:81:55:de:a3:23:cb:08:8e:1c:b1:d8:df:
         fa:4b:3c:72:81:56:51:40:e8:a2:65:29:cf:6d:af:98:d2:d8:
         d3:0e:89:b0:53:04:1b:e9:f7:5f:b9:af:e4:13:6f:0b:df:a2:
         db:51:5a:c3:ca:3d:e1:60:a4:65:22:59:8e:f1:95:c9:7e:69:
         c6:2d:f3:94:ad:6b:e7:29:66:65:9c:a8:2d:c8:c6:4a:4b:bc:
         57:2a:e2:bc:52:9d:f2:11:15:b7:ee:59:8e:1d:d7:24:89:71:
         35:26:1e:92:64:dc:ce:a5:f8:67:7e:30:4c:06:ea:80:22:81:
         0c:78:23:b8:68:1a:06:d1:e9:e0:20:9e:9a:ac:c0:96:eb:42:
         10:ec:63:0a:38:b0:c4:cb:c2:8e:ef:32:c9:1c:bf:e9:cb:dd:
         7e:72:09:1e:40:b6:04:e8:34:46:d2:b7:35:dd:1c:97:dc:ea:
         e5:9d:fb:fb:34:d6:05:fa:ff:62:df:b2:49:cc:77:ab:65:e4:
         43:d0:d5:ca:02:95:88:15:de:37:d7:43:6d:2f:37:da:ae:75:
         77:fa:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:06:07 2025 by rpki-client