Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/52831a0c-29bb-307a-a992-f3c12342fc26.roa
File:                     52831a0c-29bb-307a-a992-f3c12342fc26.roa (raw, json)
Hash identifier:          jI59c7NXu/UBj0BUL5iVZdRU9KTwzy2hEmRmie0P6ro=
Subject key identifier:   CB:C0:87:8A:2E:41:25:40:48:4F:DA:D0:01:D1:2F:D2:41:5D:4E:A2
Certificate issuer:       /CN=97b601f7-3a05-408c-a0f4-e54bf926b696
Certificate serial:       010D0C9F43285848494573B467285E8F1115FF80
Authority key identifier: CE:44:E5:87:17:80:18:EA:25:A2:2C:A5:FA:82:56:C4:AB:CB:1C:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/52831a0c-29bb-307a-a992-f3c12342fc26.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     17095
IP address blocks:        2620:c6:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:73:b4:67:28:5e:8f:11:15:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97b601f7-3a05-408c-a0f4-e54bf926b696
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=9d9596da-ae71-41e2-b273-d7f46db74ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:d0:70:02:b6:c2:61:af:62:1f:77:75:4a:
                    bf:21:a7:3f:86:ad:5c:f9:3c:5d:36:58:52:55:a6:
                    e8:53:a1:fd:9f:e9:c8:2a:0f:b8:f1:f6:a6:72:89:
                    e4:b6:ae:1a:a0:5a:93:be:94:cb:50:5f:36:a7:16:
                    08:52:35:4b:82:df:10:77:f3:71:ed:6a:ec:73:c6:
                    30:b6:f6:21:eb:d4:54:69:74:a1:07:cd:fb:ac:3c:
                    d8:a9:d3:f2:04:69:60:db:f7:31:bb:da:9f:dc:66:
                    aa:cb:5d:ff:f0:52:0c:26:eb:2a:cc:3a:58:95:ef:
                    86:cb:51:07:93:fe:76:64:6e:fb:eb:21:9a:be:b1:
                    71:6e:0b:94:27:17:0d:4f:40:2d:13:2a:db:85:5e:
                    31:20:a6:90:50:1b:e1:96:46:64:e4:39:e4:60:fe:
                    e9:2a:db:d0:14:2f:fd:49:f0:2b:c0:6e:01:4f:d9:
                    5f:7f:9d:dc:ef:d0:75:0c:dd:a3:30:28:0c:6a:e2:
                    5b:a1:13:3f:95:c3:42:bd:4c:14:4d:8f:e6:9b:fb:
                    97:f8:20:a6:bd:94:60:a9:92:4b:07:84:3e:17:20:
                    98:bd:0c:bf:e1:70:74:37:42:88:07:29:0d:ed:6f:
                    45:19:33:9d:de:b0:13:75:da:0e:42:76:16:9a:6e:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C0:87:8A:2E:41:25:40:48:4F:DA:D0:01:D1:2F:D2:41:5D:4E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/52831a0c-29bb-307a-a992-f3c12342fc26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/97b601f7-3a05-408c-a0f4-e54bf926b696.crl

            X509v3 Authority Key Identifier:
                keyid:CE:44:E5:87:17:80:18:EA:25:A2:2C:A5:FA:82:56:C4:AB:CB:1C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c6:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:3f:1f:e1:99:a1:d4:c6:25:b6:c7:01:f9:4e:b2:62:27:
         1a:61:6e:9b:3b:89:3c:e0:02:e9:9d:a3:5f:40:24:30:37:51:
         ad:e6:8b:52:17:47:55:86:9b:6f:1c:e6:e9:d4:9b:7e:35:ca:
         f2:6f:b3:ce:3a:ec:37:32:25:bf:bd:35:b0:a9:62:22:da:47:
         5e:56:95:f1:42:90:30:22:45:09:9c:60:93:02:7f:65:26:f2:
         3a:28:c0:2c:e2:22:6b:23:75:3c:ca:66:25:af:9d:b7:a1:ee:
         ab:75:cb:7b:f8:80:5f:32:91:be:9a:c9:83:44:29:1c:23:03:
         04:49:40:73:3c:20:48:22:ae:12:8a:a6:14:9c:41:6b:0d:81:
         08:b0:07:ac:66:aa:f7:69:24:53:f3:d7:03:68:1a:a9:df:dd:
         f7:ca:3d:53:b7:df:5a:1e:b3:05:f8:5d:52:89:fc:22:0f:47:
         41:80:f8:89:06:41:9d:46:a8:25:52:60:f8:c9:54:04:0e:d9:
         3f:fd:e8:d8:73:b7:bf:6e:78:64:ab:1a:3e:ea:c8:20:51:28:
         82:58:53:e1:b9:99:94:04:65:38:32:2a:f7:d7:f6:10:fa:bb:
         f3:8d:92:08:34:b5:ca:93:e4:d6:a9:1d:88:87:04:93:09:06:
         e5:7e:aa:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:04:55 2025 by rpki-client