Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa
File:                     022dd074-afdd-3083-9ebd-637a44081763.roa (raw, json)
Hash identifier:          LGCjx54s6yK3YwQLkaus3meL1kvrjgplBDHtZ8gPAu8=
Subject key identifier:   52:E3:E7:F5:1A:69:61:C2:98:B5:B9:0C:E3:A3:32:94:F8:B1:C1:0C
Certificate issuer:       /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Certificate serial:       010D0C9F432858483F8022FD5E6DD55D44324740
Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     397373
IP address blocks:        2604:f440:6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:22:fd:5e:6d:d5:5d:44:32:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=09a6602a-0cbe-45ab-be8a-9a174cf4b863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:06:1c:4c:05:d8:bc:12:26:79:e7:00:e5:
                    16:40:ff:8f:d5:57:03:4d:bb:2a:d8:e6:6d:15:f0:
                    c6:6a:03:13:37:87:b0:01:47:b2:1f:f9:e9:05:a7:
                    37:28:c0:ff:f0:bd:9a:5a:c1:2a:20:c8:58:f5:f3:
                    9a:a5:f7:ee:ba:6a:c9:ce:89:13:c0:93:a7:20:0c:
                    70:58:d0:fd:cb:40:e0:04:38:75:47:dc:4f:07:f6:
                    29:90:0f:10:69:53:92:e5:78:de:04:34:c7:18:e3:
                    05:13:f6:42:7e:10:b1:a3:e3:ab:4f:ee:28:f6:8e:
                    54:9c:90:a0:44:af:8b:76:30:e8:67:22:f0:7a:4f:
                    fc:2e:8b:1c:63:4b:8c:22:f2:cb:86:72:ac:e7:8c:
                    f5:ce:3c:36:aa:0d:33:5a:27:c3:60:99:11:c9:3a:
                    fe:7f:9d:09:ce:02:88:88:b6:51:ff:8f:19:52:e4:
                    b9:a3:78:2f:85:48:ce:81:3f:0d:8c:40:e9:73:de:
                    97:1d:1f:aa:63:0e:12:90:39:97:f5:17:ba:e9:5c:
                    2c:14:87:28:37:42:2d:80:fa:67:5c:a3:32:08:ae:
                    de:1c:e6:2d:68:57:9a:e8:d5:a2:e4:bc:53:e6:20:
                    7c:2c:8b:01:3c:25:2f:00:f8:35:55:e5:af:c3:c3:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:E7:F5:1A:69:61:C2:98:B5:B9:0C:E3:A3:32:94:F8:B1:C1:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl

            X509v3 Authority Key Identifier:
                keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f440:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:be:c1:dd:ec:49:36:35:00:50:24:66:76:cc:53:d7:ab:
         3f:f1:24:f2:12:d5:1c:66:7b:dc:ae:92:29:ae:64:0c:3c:4f:
         c2:66:9b:ef:2d:d2:2b:fa:dc:98:15:c3:32:71:50:79:d7:74:
         b9:1d:08:49:d1:01:39:98:cd:17:96:d3:a5:ee:17:3b:cc:cf:
         b8:6a:cb:22:c9:ea:f0:49:20:a8:39:22:c1:de:4a:7a:cf:28:
         0c:50:b7:ba:6b:77:04:c6:4f:db:44:43:62:06:34:9e:a0:f5:
         3e:98:cb:52:31:ff:f3:8a:1b:6c:06:a5:d9:bd:4d:8c:18:63:
         eb:4a:27:46:eb:03:82:f7:9f:cc:cf:e0:82:ec:c7:8e:f4:c8:
         30:df:35:6d:8a:5e:70:f2:2e:3c:0c:cb:a1:f0:3f:a7:a6:8e:
         f5:4a:5d:29:d0:d9:3b:32:90:d4:1e:2d:71:c7:de:69:44:ec:
         a2:0c:a7:ef:ec:c3:a6:ee:79:42:c1:64:fc:2e:ac:04:8b:92:
         82:ff:65:f7:02:36:0a:aa:9c:d6:ad:c4:73:88:a2:ed:d3:f0:
         d3:42:05:04:e9:86:cf:51:a5:53:34:b0:47:98:b2:99:5d:bf:
         55:91:9b:54:c4:bb:3f:0b:b8:d5:29:07:d1:f3:c5:ef:d4:14:
         e5:b3:4e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:12:27 2025 by rpki-client