Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa
File:                     7ee28a40-8cc6-3784-ab6c-7741c7816572.roa (raw, json)
Hash identifier:          7C78fLh0qNTC/vhRiVRqjPUxsyT2Zpw57D9/eORl5fY=
Subject key identifier:   D6:CF:E8:D5:D2:1E:F5:3D:05:54:9A:39:91:75:5C:47:1B:41:2A:25
Certificate issuer:       /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
Certificate serial:       010D0C9F43285848828081BA90BF741EDDA3C300
Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        2620:ce:e000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:81:ba:90:bf:74:1e:dd:a3:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=8f43c1f0-fe09-4ea9-bb2b-fef8a687b4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:14:e3:22:b2:bd:96:c3:63:d7:25:c5:42:
                    22:6f:59:eb:4a:00:98:f9:37:de:c7:42:46:14:b9:
                    c7:8b:e9:ed:0a:cf:9a:2c:46:14:5e:02:fe:60:38:
                    13:11:8b:7a:5e:0b:cc:eb:b4:5e:8a:82:ac:f4:82:
                    a4:bf:82:7e:13:62:0e:62:be:a9:f6:a8:7e:f6:84:
                    8c:34:23:80:14:2b:9e:ff:82:99:9d:f0:c8:a0:15:
                    0a:f4:a0:14:01:79:f5:d5:89:25:c2:0c:ef:99:ee:
                    37:14:fd:0f:1d:c0:3e:38:67:66:be:5d:c4:a0:7b:
                    2b:79:6c:21:19:b6:31:2c:0c:18:88:8e:98:db:f7:
                    e6:e2:5f:d3:49:69:da:e4:bf:24:58:8f:c6:68:3e:
                    88:72:50:c2:80:ac:86:2d:b5:c6:b8:bc:8b:a3:0d:
                    ce:a7:d6:e0:88:3d:29:8d:23:89:ca:67:5d:9d:a1:
                    0d:7c:f8:43:42:81:42:80:a2:04:92:5c:f1:ba:b4:
                    1d:5d:66:83:cc:0d:b8:6c:b1:74:87:2c:38:01:ee:
                    a1:0f:49:c9:b2:f7:ea:4c:72:cb:fc:4d:15:dd:b4:
                    66:dd:ef:53:77:a5:85:00:41:4e:0a:c4:2d:ff:ff:
                    67:7e:10:1b:a8:99:25:2b:07:cf:3e:7e:1a:b0:6a:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CF:E8:D5:D2:1E:F5:3D:05:54:9A:39:91:75:5C:47:1B:41:2A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl

            X509v3 Authority Key Identifier:
                keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ce:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:59:80:ee:f1:50:33:e6:96:0c:ae:83:34:da:dc:70:31:86:
         a9:ab:5e:2f:c6:bc:e7:1b:79:97:2d:38:8b:e3:24:72:a5:75:
         3c:a7:a7:8f:46:2f:51:27:cb:d1:6b:4e:fa:dd:d6:d0:c4:86:
         0c:21:a4:14:63:63:3a:ab:b9:f5:8a:1e:98:0a:df:a9:16:92:
         60:fc:c9:95:a9:c8:13:0b:53:69:35:86:04:2c:bf:97:5d:a9:
         37:1e:66:fa:53:4c:ab:b7:93:1a:f5:12:0d:6f:41:5f:58:75:
         bf:53:ac:29:55:ac:64:70:46:5c:18:08:22:aa:74:39:98:ee:
         27:01:ad:b1:04:30:25:35:3b:17:81:3b:9b:04:c4:62:ab:d7:
         98:38:83:02:01:2b:06:fd:0b:65:48:2b:05:5e:0f:38:c7:3f:
         f8:f7:10:3d:29:ab:6b:3f:9e:81:e2:e8:6c:60:dd:65:35:ae:
         15:93:06:1c:c5:62:ab:d3:4d:fc:61:b2:bf:2b:55:53:a8:c1:
         57:bd:04:6e:8c:1d:68:b2:22:5d:6e:ee:4a:f0:2a:c9:26:99:
         31:93:32:68:ae:0d:36:be:0c:35:f3:cd:89:d0:c2:eb:c8:f0:
         dd:d2:7e:e4:d3:82:49:70:21:41:3d:28:08:69:2b:28:9a:86:
         f1:84:4e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:37 2025 by rpki-client