Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/445d51d9-a7a8-39de-9cb2-afdccb8c7240.roa
File:                     445d51d9-a7a8-39de-9cb2-afdccb8c7240.roa (raw, json)
Hash identifier:          rVHpuudWLhs4XSB5FIxGADVLPw9JMA9Vobb1G9siFz0=
Subject key identifier:   0F:C1:7B:F5:32:2C:E6:60:E8:CB:50:F3:10:98:F2:FE:36:AC:72:54
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F432858484EDACFE3E3F20620A7C20D00
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/445d51d9-a7a8-39de-9cb2-afdccb8c7240.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     13984
IP address blocks:        2604:2ec0::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:cf:e3:e3:f2:06:20:a7:c2:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=422ec92a-2143-4831-aca8-3234187db51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:86:45:f1:73:5a:eb:cb:f9:25:d1:fd:8f:
                    ca:20:59:ec:c5:95:7f:8c:ab:a5:18:8e:f8:3b:1a:
                    33:0b:6b:a9:8e:06:84:10:cf:3f:25:dc:3a:89:cc:
                    0b:0f:76:b8:c2:72:5d:90:63:95:fb:4b:d1:9e:f0:
                    f5:54:7d:f1:63:40:cb:77:01:9e:7b:8c:cc:3b:38:
                    42:a9:c7:c7:4e:a3:3e:d5:9a:28:b3:37:88:f8:26:
                    04:5d:2d:90:c7:08:2e:82:d3:e2:38:ad:a7:49:85:
                    77:68:a7:97:81:27:cd:e7:a1:b6:f8:18:59:5f:04:
                    b1:c8:d6:92:64:4d:4e:82:9b:13:fa:09:cf:04:9b:
                    d1:1a:76:f4:fd:1e:21:ed:b8:93:86:2b:51:aa:79:
                    cb:97:03:34:94:c9:f6:9a:fd:7b:e1:7e:51:28:71:
                    c8:af:16:aa:00:16:e7:68:d0:7c:51:76:e7:16:76:
                    ab:5a:0c:2f:67:1f:43:51:34:46:67:eb:43:f7:59:
                    5b:65:64:e0:fa:00:ad:05:b3:39:b7:a5:7e:c1:0c:
                    c7:53:0f:65:91:52:0b:db:f3:c3:ef:51:8b:d1:b2:
                    c5:ea:dd:49:25:6a:6c:0a:91:63:0c:a4:e4:02:b9:
                    fd:4b:57:e4:4c:06:19:1c:9a:a0:25:84:0c:39:4a:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C1:7B:F5:32:2C:E6:60:E8:CB:50:F3:10:98:F2:FE:36:AC:72:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/445d51d9-a7a8-39de-9cb2-afdccb8c7240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2ec0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:21:fa:c5:0c:d4:fc:45:7c:a1:ae:47:d3:54:e3:e9:ba:29:
         f6:cb:15:ca:0a:80:8e:9a:8a:8d:05:4f:05:90:db:6b:b2:8a:
         fb:08:a8:bf:1a:72:65:03:de:17:71:59:64:91:9f:c1:21:55:
         81:01:8d:12:29:2a:c3:09:4f:6e:ec:9a:d2:d3:65:5b:40:b7:
         90:e9:72:51:16:02:56:e6:94:4f:da:cc:7a:c8:99:d3:2d:a7:
         36:2b:46:c2:af:9f:85:3a:65:9f:6b:86:64:ba:85:1b:4d:b5:
         e2:4d:c8:a4:3b:bd:2f:5d:34:67:f2:2d:ea:56:66:f7:98:a4:
         48:74:1a:af:cc:9f:88:36:c4:4e:39:f2:5b:30:bf:33:4c:0f:
         52:f1:0a:93:c9:8b:2d:c9:4b:6d:21:96:f5:ac:11:e9:4c:ea:
         ec:f6:7d:36:fa:c3:61:52:bd:a1:d7:d1:ad:11:38:09:4a:d3:
         79:d4:9c:ad:65:09:d4:77:41:94:d7:e1:4b:dc:de:81:88:9f:
         b0:07:87:be:b5:29:20:25:94:c5:fc:88:78:21:08:a1:cd:c7:
         3a:e4:c1:b6:8f:d8:84:55:ce:a9:ac:7f:43:5b:01:21:35:44:
         6f:ae:b2:17:0d:7d:7e:47:5f:5b:91:b0:7e:09:0d:40:85:17:
         53:e8:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----