Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa
File:                     8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa (raw, json)
Hash identifier:          sqrwu7l37WBdhaC3Pudkti9ZefjKcZfQ5z/tY4HmZbw=
Subject key identifier:   6F:8F:AC:C1:F9:3B:4C:BB:18:F1:8F:7A:DE:98:ED:EE:4D:B0:70:CF
Certificate issuer:       /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial:       010D0C9F4328584886B07D2953BB6618BF8B4A80
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     30513
IP address blocks:        2001:4968::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:7d:29:53:bb:66:18:bf:8b:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=58a52e16-5a98-439a-94b4-c689a8e6f318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:3b:55:f6:0a:0d:ed:55:97:5e:86:b0:02:
                    c7:56:be:bf:af:70:29:c5:21:97:3f:1d:9f:c6:92:
                    f7:52:95:ec:fd:35:19:85:7f:bf:05:3f:cd:73:d6:
                    e2:88:83:e6:d8:5a:42:1c:a2:29:a7:b7:fd:a6:6b:
                    5e:43:c6:39:c5:4d:27:8a:6f:56:35:47:c1:51:a7:
                    83:f5:9b:b5:d5:2f:57:93:93:48:94:e1:f5:db:4f:
                    df:f0:a9:65:3b:b0:ee:d5:0d:8d:0a:c3:c4:66:8f:
                    9d:e3:69:44:88:57:ab:d7:9b:0a:fa:0f:da:d4:6b:
                    6b:30:37:89:a0:bd:d6:12:e5:6d:2e:65:79:8c:04:
                    9a:6e:91:05:4d:b5:48:70:fc:f8:47:c9:16:47:70:
                    08:ac:49:fe:77:a7:3e:6a:2e:86:d7:5f:11:4d:94:
                    a6:f2:6b:69:ef:05:89:0d:03:9b:39:e4:f2:a4:f9:
                    a4:7e:31:c6:62:c7:49:c5:c7:e8:d5:04:98:cd:88:
                    71:3b:75:e5:6d:bd:02:33:72:ad:91:ad:15:38:30:
                    db:23:32:89:12:af:30:6f:99:96:a2:3a:16:8d:44:
                    41:26:e9:c6:29:e7:59:a9:a3:7f:e3:98:37:9c:9f:
                    02:c4:80:26:b3:96:ee:f6:6a:7c:46:b6:24:03:a2:
                    9d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8F:AC:C1:F9:3B:4C:BB:18:F1:8F:7A:DE:98:ED:EE:4D:B0:70:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl

            X509v3 Authority Key Identifier:
                keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4968::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ac:c3:3f:a5:26:12:a0:96:87:d7:e5:39:d3:4d:1a:5c:f6:
         97:e4:3d:29:fd:c3:47:34:32:8a:59:dc:04:4e:f7:da:50:c1:
         e5:f5:5d:c5:96:86:15:b3:e6:68:8f:00:c2:98:4f:88:ee:e7:
         35:c2:c4:07:71:69:97:4d:01:0a:6a:f7:f5:b0:6f:f7:59:2b:
         5a:13:62:11:ac:ab:c0:13:b6:88:4b:ed:bf:6c:ae:72:92:7c:
         69:12:da:3e:7a:92:e2:4a:a5:d7:92:42:f0:46:0a:4d:38:67:
         3c:b4:28:c9:7a:ab:59:64:92:de:0c:fe:ff:39:d8:8a:e1:fb:
         74:83:5c:0c:37:0a:2b:32:17:59:06:e4:e4:f4:6c:2d:b9:b0:
         da:fd:d2:c7:45:98:9f:0e:e9:35:71:89:58:24:79:36:14:d4:
         fa:9d:aa:54:0a:cb:8f:cd:60:bd:4c:af:66:01:9a:19:c4:8c:
         8f:ba:4e:d0:b3:c1:12:c7:75:2a:09:73:ef:36:95:79:4e:a8:
         1e:b0:c7:0c:9c:5e:6a:78:5b:d2:eb:49:91:6a:90:78:b7:78:
         27:6f:c3:bf:8e:bb:7b:45:60:dd:ad:cd:7f:dd:98:b8:f8:26:
         5a:f9:2b:87:93:97:b5:c6:bd:3f:58:b6:a3:72:1f:b8:ca:f4:
         9c:7f:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:16:30 2025 by rpki-client