Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa
File:                     92f50bb4-500d-3973-8016-ce46dbe2eb06.roa (raw, json)
Hash identifier:          fLI7rjKO4Rj0QHKMZqnNyK/x/SBTDMWJYoUa8c4sxC0=
Subject key identifier:   D0:BC:50:47:1B:E8:2B:22:0D:80:DA:F2:17:15:EE:86:10:20:BB:1C
Certificate issuer:       /CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
Certificate serial:       010D0C9F432858485CD02C2F2C72629213C85B00
Authority key identifier: 67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     54070
IP address blocks:        2620:dc:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:2c:2f:2c:72:62:92:13:c8:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=d460b8fc-b44d-4749-a220-6246e741e6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:c9:4a:6c:89:dc:28:c5:db:c7:14:f9:52:
                    75:74:59:62:10:27:c6:76:c3:6b:72:45:0f:65:07:
                    01:eb:b1:76:e6:26:d4:93:be:43:75:31:31:7d:e1:
                    1a:bb:b8:a6:de:22:74:fc:66:57:2c:65:80:21:b4:
                    b1:94:b0:27:ff:42:40:b6:c8:49:3f:df:5f:85:2b:
                    db:91:4e:80:dc:66:24:62:e9:df:ee:29:78:52:31:
                    e1:0e:2d:d6:bb:81:68:11:76:7c:44:77:6a:12:53:
                    00:a1:13:46:99:a6:46:a4:d5:11:c4:13:6a:e0:df:
                    c8:f1:11:83:39:26:dc:c3:f2:35:ac:9e:be:24:c9:
                    6f:69:a0:77:9f:68:44:ba:84:64:b0:9b:b2:a3:9f:
                    ad:ff:d2:49:f6:ca:89:6d:46:e8:51:a5:61:ab:8d:
                    53:ca:d1:56:92:18:78:31:e7:49:55:9f:fe:d8:80:
                    de:3b:ee:58:f6:e8:c3:ec:54:df:22:71:d3:d1:a9:
                    11:05:c7:e5:2e:a8:bf:aa:13:b5:e1:98:66:d3:9c:
                    7c:93:8d:93:bb:2e:12:b2:e7:a2:4b:3e:98:96:18:
                    a0:00:9f:68:79:63:f5:5b:16:6a:ec:d3:5e:f0:56:
                    e5:d7:83:fb:0a:bc:00:5d:06:9c:78:db:00:c4:77:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BC:50:47:1B:E8:2B:22:0D:80:DA:F2:17:15:EE:86:10:20:BB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl

            X509v3 Authority Key Identifier:
                keyid:67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:dc:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:7c:77:32:c6:2d:5c:ee:75:2a:fb:26:02:55:df:f6:65:8f:
         46:b7:e7:4c:2d:cd:2f:1f:b2:fc:13:bc:6d:35:f1:0a:18:19:
         bc:66:a6:19:21:6f:19:98:a1:0a:43:90:4a:6a:59:88:01:fb:
         86:94:e0:f0:6b:ab:6c:df:da:6a:0a:a6:02:ff:e2:c8:40:09:
         3e:66:d1:65:90:8f:d7:ee:ae:5e:fb:99:51:c9:0c:fc:4d:f6:
         57:a6:5c:08:79:59:32:de:93:d1:a9:0a:ed:4c:02:ba:d6:6b:
         70:93:8c:e1:9e:1a:40:57:f2:bf:6a:a2:1e:74:c3:d7:5f:57:
         01:2d:16:b4:41:1c:fe:7f:69:e4:2e:c8:29:dd:ee:8a:a3:85:
         fa:e6:24:1a:16:d6:66:27:30:e3:da:e5:e3:1d:90:23:10:82:
         32:87:64:2f:46:74:b3:c9:a6:ce:d5:b6:aa:06:b8:45:41:04:
         37:25:a5:99:11:b4:a6:64:bb:36:56:37:cd:07:79:bc:89:a8:
         80:c2:dc:26:0c:a8:d0:de:0f:4d:34:0c:8f:4a:ca:ed:72:bf:
         e4:53:d2:2e:11:62:6e:f2:c7:3d:be:58:33:db:43:3d:14:8e:
         58:ad:3a:72:54:2f:61:da:96:32:c8:d6:fd:93:5a:16:4a:5a:
         df:d0:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:49 2025 by rpki-client