Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/01566a5a-9ee2-3889-9c18-acc17fb2bdca.roa
File:                     01566a5a-9ee2-3889-9c18-acc17fb2bdca.roa (raw, json)
Hash identifier:          +v03P3cAOfaHMUoW7tpvsNF0u/2G+wiz6fWbLq5mBXg=
Subject key identifier:   95:75:00:28:52:58:16:1C:BB:6E:28:46:6C:6E:AD:AC:45:20:78:55
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325BF51F3708A3A1E68DD80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/01566a5a-9ee2-3889-9c18-acc17fb2bdca.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        2620:11a:c000::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:bf:51:f3:70:8a:3a:1e:68:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=d6c0917d-7243-4ccd-b79e-22fb679afcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:17:ef:e7:55:18:c7:ae:d7:2d:86:e0:08:80:
                    99:ad:fd:dc:ed:c5:0a:57:94:39:9b:1c:da:a4:51:
                    98:c9:03:48:9b:cd:de:0d:e8:c6:4a:46:bf:3c:e0:
                    bb:4a:32:33:59:7c:07:26:c0:54:83:0d:fc:a8:0f:
                    d2:a3:e1:10:d9:19:4c:6f:10:ad:90:4a:4d:73:25:
                    26:fa:72:dc:41:b4:96:23:20:e0:20:57:57:ba:2c:
                    0d:0d:e3:79:89:fe:a7:1e:c7:d7:53:05:61:8d:9e:
                    c3:ff:e8:22:e5:de:e7:8d:79:c3:98:a3:18:7d:30:
                    3a:6c:10:f0:7c:fc:f6:b3:54:c6:00:55:df:56:86:
                    66:51:fa:56:e3:3b:ce:e0:8f:64:1f:c6:48:7a:48:
                    7c:b9:00:ba:4b:d9:55:64:fc:2f:8f:84:cb:50:d9:
                    55:28:5a:e7:92:69:2c:d0:60:17:0e:98:02:72:59:
                    0d:d1:4b:da:a4:d2:ee:0a:2a:1c:d0:fc:a8:a8:93:
                    bc:55:6e:e3:64:4b:92:cf:39:b4:fc:cf:55:e6:fc:
                    e2:a3:dc:9d:a3:4f:2f:20:84:15:c9:1e:16:d7:7b:
                    db:a6:8f:0d:18:68:e0:e3:6a:f1:b8:59:7c:12:2b:
                    36:32:00:c2:ee:95:78:55:6f:00:6a:a7:f4:89:4b:
                    54:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:75:00:28:52:58:16:1C:BB:6E:28:46:6C:6E:AD:AC:45:20:78:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/01566a5a-9ee2-3889-9c18-acc17fb2bdca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:93:40:08:40:1d:ce:71:93:c8:c1:c5:24:e5:b3:dc:ac:
         58:b0:8e:f1:64:1f:6a:32:30:43:62:e5:67:49:c7:9c:ee:16:
         c9:77:54:52:68:c2:bd:91:aa:54:c9:0e:33:0b:5f:3c:e1:ed:
         59:9f:d1:e5:ac:6e:81:7a:f1:94:df:a0:9b:60:b5:62:c2:1f:
         06:68:8a:b3:0a:1a:39:84:3d:62:9e:74:62:a8:91:55:e4:0f:
         a8:bc:b2:0d:08:e8:16:65:e7:85:ad:9b:1c:bd:5f:aa:96:28:
         61:60:91:de:51:d3:f3:aa:ee:dd:75:f4:b9:bf:84:3c:5e:3d:
         a3:8d:16:b7:ee:13:95:e0:bd:01:43:5e:9b:3b:cb:b5:fa:98:
         45:d3:e4:e3:48:28:04:32:ea:58:f1:fb:29:5f:8f:0c:77:d5:
         84:0b:74:7d:f1:92:17:6a:85:70:1b:0e:0e:d0:83:ce:0a:a3:
         98:80:97:83:3f:b2:b4:43:70:36:4d:f8:26:b0:dc:7a:ab:6e:
         28:6d:c8:34:98:65:58:3c:2a:14:e6:0d:bc:19:97:c0:4b:07:
         27:d3:d6:22:1b:33:fb:f3:d7:97:70:5f:31:a4:b4:92:3e:7d:
         db:fc:61:df:c9:a8:54:5b:2b:69:2e:0a:c4:54:72:ec:2c:a5:
         70:1f:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:46:31 2025 by rpki-client