Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c5f5b31f-c025-3789-a914-9b5232041348.roa
File:                     c5f5b31f-c025-3789-a914-9b5232041348.roa (raw, json)
Hash identifier:          OsOy9pXX57PuGyOSiP76CtZCaWFN8jxRh3Ba0dME+LU=
Subject key identifier:   05:1B:71:86:C6:E7:26:54:D7:36:9E:CE:44:8D:67:1E:1D:4D:32:17
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F432858481C9A8C6D3CB26B80FA4BEC8C
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c5f5b31f-c025-3789-a914-9b5232041348.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        2620:113:1001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:8c:6d:3c:b2:6b:80:fa:4b:ec:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=abf72803-d627-4c9d-9df3-db1801e16a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:92:2c:58:8c:7a:0a:65:31:b0:6b:bb:0a:
                    96:fc:64:75:8e:0b:ef:90:13:72:eb:ab:ff:6d:a3:
                    40:e3:3e:a2:21:92:35:e5:b2:00:66:76:1f:db:59:
                    d8:8a:91:d7:2e:cb:19:0a:8b:14:ea:03:b9:6a:c3:
                    d9:af:c9:dd:90:c0:5c:41:31:3e:81:87:39:56:61:
                    f6:4b:86:c2:e8:fa:21:a2:7c:01:51:96:15:f1:c6:
                    50:21:a9:15:13:90:3b:c9:a4:99:c2:93:f1:80:8b:
                    96:aa:7d:ac:d9:a2:f9:c1:78:05:bd:97:cb:a2:64:
                    9a:05:57:49:6c:50:86:8e:7d:1b:47:77:0f:97:23:
                    9e:c2:da:88:db:29:20:f0:68:64:fc:f1:be:58:c0:
                    23:8c:4f:20:ed:dc:8a:bb:3e:46:00:0d:24:72:95:
                    9d:96:0c:db:5a:1c:d0:f4:9c:96:b8:64:b7:7c:36:
                    ec:54:13:5a:4d:ac:1f:89:2d:37:79:ff:96:ec:61:
                    c6:de:9d:47:df:0b:51:2d:7e:94:40:19:f4:f7:61:
                    93:e4:79:6f:16:ad:14:fc:bb:f0:c8:19:9a:ee:a0:
                    2b:4d:d4:b6:cf:af:9e:d0:51:81:0e:c4:3f:ad:02:
                    27:28:f2:7c:2b:13:91:bc:66:55:71:d6:ce:e5:36:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1B:71:86:C6:E7:26:54:D7:36:9E:CE:44:8D:67:1E:1D:4D:32:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c5f5b31f-c025-3789-a914-9b5232041348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:1001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:4b:c7:10:6a:6a:dc:2d:ec:f9:7a:33:3b:ac:16:93:6f:
         d0:52:58:5d:da:ed:53:4b:08:cc:b9:af:3a:c3:ab:14:d8:99:
         05:31:27:cb:b9:c5:8d:11:fd:fd:1a:6d:9f:11:a8:2b:4e:b8:
         52:59:77:98:18:17:7e:17:a0:fb:fb:90:b7:c6:bd:26:86:37:
         16:64:11:fe:e8:0a:c9:1c:6b:f5:be:15:3c:24:1d:4c:d7:c8:
         25:7a:50:28:51:a1:a3:e1:4d:5d:f2:e8:ea:08:a3:0f:d8:12:
         52:89:86:c3:83:38:98:8a:cc:24:f8:3d:d2:28:da:35:c8:ee:
         a5:71:4f:5c:ce:c4:be:36:69:aa:b2:26:79:b0:df:da:32:7c:
         b1:5b:4f:4e:24:39:eb:2e:2b:0a:98:f6:42:0d:ae:87:ce:ea:
         e6:bf:9c:32:97:12:a1:7e:ee:b9:04:d0:fe:0b:54:db:d4:49:
         82:5f:4e:04:56:32:1a:53:59:23:ed:12:1c:83:dc:0e:e1:e1:
         6c:11:d6:10:7f:42:77:db:d6:91:41:32:1d:83:e3:ae:6a:ad:
         1a:99:07:d7:b6:d0:8b:3b:1c:11:05:8e:2d:1c:05:59:39:69:
         44:b3:b3:fb:4a:00:81:70:aa:b4:1c:e4:fd:27:90:2f:be:aa:
         71:db:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:27 2025 by rpki-client