Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa
File:                     e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa (raw, json)
Hash identifier:          N/PJP9bVN9oDrZgfLxA0laT29yXUfl/ExQr5hA5w+Hw=
Subject key identifier:   EB:CD:CB:D9:23:13:D8:CA:A2:C5:BB:E3:A5:64:FD:23:04:92:D0:09
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F43285848530AEDFF03EA83C7C7A31800
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2620:1f7:c020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:ed:ff:03:ea:83:c7:c7:a3:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=b8b93df2-9caa-4b15-931c-b9d3893d6140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:33:14:17:e5:f3:08:ae:5e:a6:df:91:33:ac:
                    d5:d8:7e:22:95:b5:85:33:8d:a7:50:9d:8f:72:c0:
                    7b:96:e9:68:da:9e:d3:07:fc:43:40:b8:33:b7:3b:
                    d8:97:5e:9e:2b:07:b2:45:fe:3d:23:02:d5:45:65:
                    1a:90:0a:d4:92:4b:38:8f:a6:c9:36:79:04:19:83:
                    af:fc:d9:4b:4f:f4:a4:f7:30:6f:52:48:02:98:97:
                    45:92:1c:43:20:0a:e4:af:ea:f4:fb:1f:24:43:ad:
                    21:71:cf:b0:87:02:33:30:39:f2:f8:d8:68:2c:e5:
                    b0:87:7b:2f:a1:13:ed:c5:3e:e2:17:4c:35:b2:a7:
                    9c:33:c0:b4:49:53:6e:e6:c9:bd:d3:4a:3d:ae:38:
                    41:95:9a:a0:58:4c:b4:18:12:b6:ea:c9:37:7a:85:
                    ae:dd:0c:50:2d:df:56:ba:f9:4c:46:99:61:47:4b:
                    0f:f4:a3:db:d6:a1:93:45:2b:5d:96:24:f0:81:f1:
                    f6:c3:07:e0:0a:25:a4:81:a4:fd:07:a0:71:ac:2f:
                    ed:a6:2e:5c:f4:94:dd:dc:bb:d3:50:08:d6:43:7e:
                    2e:64:8b:69:fa:26:e4:15:0a:9f:92:1d:60:69:ba:
                    22:52:e3:18:d6:93:6c:83:a6:6b:6f:40:a3:ec:56:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CD:CB:D9:23:13:D8:CA:A2:C5:BB:E3:A5:64:FD:23:04:92:D0:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e0276a2e-9530-3b7e-afb5-6f2b55d27b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:b4:2d:77:c0:82:26:df:94:4f:2c:a4:ef:be:36:e7:17:
         92:22:94:0d:ed:0f:5e:27:8e:d8:02:d4:2b:6b:53:c9:49:b7:
         58:9d:dd:02:57:54:95:9e:d4:39:21:98:0c:ae:bd:9a:89:37:
         9a:c3:78:8c:33:51:d9:69:6a:8c:b2:79:b3:a0:6d:07:93:16:
         dd:33:65:7f:a1:ad:05:ec:9e:d9:40:e9:9b:7b:66:cb:eb:db:
         1a:66:98:ec:f2:f4:d1:d2:d1:a4:c0:fa:d9:b5:1c:a6:81:01:
         d1:8b:b5:b1:76:5e:fa:66:bd:27:43:ce:49:aa:df:1d:c9:dd:
         c9:08:a4:00:e7:ea:79:09:d1:74:69:86:8d:c5:de:f7:24:26:
         36:7a:03:59:fb:f1:54:66:17:52:c1:d7:a9:68:f1:ae:81:5c:
         99:26:df:19:29:21:86:c2:b1:df:63:a6:e1:80:36:77:68:c7:
         72:6b:9e:d1:92:2e:c9:b8:89:86:56:c1:c6:e6:35:ff:7a:1a:
         57:b6:9a:15:51:d2:1b:bd:e1:f7:c1:9c:4f:5d:39:90:41:6c:
         7e:bb:f0:e1:b3:13:df:a4:76:0a:2d:90:fe:ab:c8:29:e2:9b:
         7d:25:0c:34:ed:93:1a:5f:8f:e9:4e:40:ba:ba:14:b7:e7:7b:
         88:2d:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:52 2025 by rpki-client