Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c0dbc73-76f3-3f8c-8c88-e9d2fd10d735.roa
File:                     1c0dbc73-76f3-3f8c-8c88-e9d2fd10d735.roa (raw, json)
Hash identifier:          phR00Wx3JN+KXm+S7RPpxaVWZ/GR9VOuVA7z/0u+ViI=
Subject key identifier:   45:BE:6A:12:2C:E9:E9:5F:E9:A5:68:D4:C9:3F:DD:70:1F:94:9E:04
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858481C9A84F882BA63D4725BCEE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c0dbc73-76f3-3f8c-8c88-e9d2fd10d735.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     12222
IP address blocks:        2001:4878:259::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:84:f8:82:ba:63:d4:72:5b:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=694a4169-b9c3-42cc-8cf5-f0c11f6e70ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:14:78:b3:6f:45:56:9b:e8:f1:dc:34:1b:
                    b7:41:9f:8e:d3:4e:a9:fa:66:6b:1a:6e:9d:4e:59:
                    fb:ae:ec:4b:b5:06:03:7d:fa:ee:d0:be:94:f0:a7:
                    5e:96:f6:f4:fc:3a:32:ae:e8:81:51:0e:e0:6c:ca:
                    e0:84:84:fe:46:81:ea:28:72:e7:0e:26:4c:bf:9a:
                    cf:7e:a3:d2:bf:df:69:77:bc:42:16:9a:30:39:6b:
                    69:b3:1f:13:c0:11:02:34:5a:48:d1:b6:bd:89:d1:
                    52:fd:0d:37:ab:f8:59:3f:4c:c9:fe:dd:c0:90:49:
                    13:da:d6:3d:b9:6b:26:cc:43:d8:9a:0a:ac:ca:2c:
                    2c:48:39:1e:9b:c9:c2:ec:af:40:90:f1:ed:d5:1a:
                    53:92:2e:c2:f1:36:8d:e3:38:5a:ee:1f:5b:30:65:
                    c3:7b:64:f3:ae:d8:fb:0f:ed:35:15:81:16:f2:3d:
                    c1:f1:1d:6a:b4:ea:19:82:9e:a4:f1:f0:46:38:ef:
                    03:12:11:20:3e:cb:72:d8:a6:50:df:a3:51:32:4d:
                    54:12:f3:c9:5b:e3:35:e9:6c:e0:4b:53:e0:7b:e5:
                    96:10:97:51:b7:fa:a9:8b:a6:ed:e5:11:d2:f2:33:
                    03:19:9c:6c:87:15:e8:20:53:bb:eb:ea:f8:19:ba:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:6A:12:2C:E9:E9:5F:E9:A5:68:D4:C9:3F:DD:70:1F:94:9E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c0dbc73-76f3-3f8c-8c88-e9d2fd10d735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:259::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:cd:bf:84:ce:5e:22:2f:51:87:9d:ce:a8:af:0a:ee:83:56:
         b1:a2:a7:40:f2:6a:48:75:46:6c:b9:22:29:52:96:3f:e9:9e:
         2f:62:74:62:c4:68:08:76:84:bd:2e:1e:e3:af:27:f8:5b:47:
         13:7e:eb:a6:3c:10:42:56:a0:47:85:e2:ad:df:fb:10:ce:65:
         43:a9:83:66:d6:a8:ea:23:e1:7b:e9:d2:7b:7e:dc:3c:11:77:
         a0:4e:7e:e9:e2:10:55:76:17:1e:1c:9a:80:12:35:3e:77:39:
         0d:3f:3a:ed:ec:42:60:53:2e:cf:a3:6e:9a:32:d8:ce:f3:ed:
         ab:e0:9d:03:de:34:a9:76:1f:92:99:b6:9c:93:b9:69:bb:ac:
         57:18:9e:92:41:43:95:ed:26:2f:82:f0:8d:02:6a:11:b6:b3:
         23:8e:d1:7a:9c:8a:d7:06:d7:5d:2f:f2:1d:a4:cb:f3:ed:e1:
         65:bc:51:c4:9c:ee:2c:38:67:39:ce:f0:02:7f:04:96:61:68:
         4f:1a:cf:1d:d6:31:eb:8d:8b:c6:47:8d:01:25:d2:58:08:d5:
         08:e9:59:fb:13:50:30:e8:c5:2d:91:78:03:63:39:e8:51:04:
         80:69:a3:2b:42:fc:75:d5:19:a7:09:aa:52:8e:cf:4a:3b:1c:
         4e:17:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:54:15 2025 by rpki-client