Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d064585-2f80-3fcf-b382-892d99b1bd79.roa
File:                     1d064585-2f80-3fcf-b382-892d99b1bd79.roa (raw, json)
Hash identifier:          1iDSzcy9LGMQJ0USApq++yehcBEmRw18zQtKwlEghyI=
Subject key identifier:   EF:4C:78:C7:AA:CC:2D:85:E6:59:01:D3:2A:09:26:5C:6D:3F:22:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858481C9A8481C8144FE2429B3128
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d064585-2f80-3fcf-b382-892d99b1bd79.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     12222
IP address blocks:        2001:4878:216::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:84:81:c8:14:4f:e2:42:9b:31:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=c3a139bd-634a-4d5b-b710-ac123a85de44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:f9:20:f8:02:fd:a9:07:a8:39:37:a3:39:
                    1e:28:e1:80:45:53:91:e9:84:77:1c:5f:54:a1:e8:
                    cb:85:e7:fe:b2:51:fb:f5:68:40:dd:1d:39:90:2c:
                    48:34:36:68:c4:4e:1c:bf:6b:f5:9c:c4:87:6f:13:
                    17:68:fb:cc:96:3d:bd:80:a3:eb:e9:42:48:6b:55:
                    b4:34:ba:21:4f:3f:0c:3e:ef:78:f3:9c:10:35:90:
                    92:03:cc:f2:98:2d:4f:d2:ec:a5:53:10:bc:ea:18:
                    28:28:9c:44:49:8c:a4:0e:51:fc:e9:22:af:4c:ef:
                    b7:9d:f5:0b:2e:56:30:f4:45:87:98:cc:05:0d:24:
                    66:57:1d:14:3b:3e:13:62:3f:17:6e:ba:c2:c0:ce:
                    23:86:98:8b:a6:72:90:5e:2d:53:49:af:41:df:e6:
                    c0:4d:f0:d4:49:4c:f5:36:4b:2f:f1:6d:28:cc:c9:
                    35:aa:23:7b:6b:93:eb:6f:ac:70:9a:a3:25:10:52:
                    58:b2:35:28:fe:15:4d:a1:db:cc:59:66:c5:6f:f5:
                    6a:9e:70:90:c1:5c:9b:bf:47:d9:6d:39:01:3c:c7:
                    31:d7:43:9a:e4:a7:53:3c:6c:2e:50:0a:2e:7c:d2:
                    40:66:e6:5c:16:4e:78:e8:f4:a4:59:17:3c:80:8e:
                    c3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:78:C7:AA:CC:2D:85:E6:59:01:D3:2A:09:26:5C:6D:3F:22:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d064585-2f80-3fcf-b382-892d99b1bd79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:216::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:4c:60:13:b3:b7:6b:06:d2:9a:34:6e:64:be:b7:07:e5:3b:
         19:3d:e4:bf:63:9f:39:da:d5:51:88:05:81:05:77:35:ca:3b:
         58:e8:f9:de:92:dd:f1:39:5d:88:3c:95:af:3c:84:1d:b4:5b:
         ee:c5:dd:c1:e8:bf:d0:22:ab:ab:d4:03:09:47:6b:14:cb:79:
         a8:1a:cc:ce:35:28:03:df:f9:e7:59:ba:c8:73:9e:88:c9:ff:
         38:9d:4d:0c:e0:2f:f2:70:61:87:87:5e:f0:ea:61:60:77:e0:
         68:14:8e:b4:fe:fe:32:c8:d1:ab:c2:24:ae:3b:6a:c3:f1:81:
         16:f7:33:0a:f3:07:5e:32:0b:3c:f7:af:ec:8a:3f:88:3d:6f:
         40:aa:73:90:03:cc:13:ee:0b:68:2c:b4:95:4f:1c:09:28:67:
         67:27:80:3f:05:17:f4:bd:c2:c8:ce:24:2e:1f:23:97:9c:2b:
         29:30:bc:3f:e4:e1:ce:38:e2:ab:0f:cb:b8:50:4e:e0:dc:83:
         7c:4d:ec:f1:eb:88:b7:39:cb:a0:fd:be:68:5f:e1:51:53:9e:
         3e:66:92:47:68:0e:90:ef:b1:ed:93:d2:31:92:24:2e:07:14:
         22:ba:f4:cd:ef:15:8f:7d:1d:cb:9b:2b:ed:6f:40:19:8a:d8:
         61:2d:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:21 2025 by rpki-client