Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90caa100-bf79-3022-8455-1bdc4279c916.roa
File:                     90caa100-bf79-3022-8455-1bdc4279c916.roa (raw, json)
Hash identifier:          S3o+E76updEFAUpLO9PmPcNNB4kydxYgFdZb32HhC/I=
Subject key identifier:   41:63:7D:A7:DA:B9:94:3C:21:60:79:67:7B:E4:AA:F7:79:03:D5:DE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858481C9A85CD93C833C3A7F2C980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90caa100-bf79-3022-8455-1bdc4279c916.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     12222
IP address blocks:        2001:4878:2151::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:85:cd:93:c8:33:c3:a7:f2:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=4ecd69c1-51f3-4ee8-8fc2-e13bfa026148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9a:31:63:c7:3d:97:4c:5a:60:9e:7e:07:46:
                    18:64:8e:03:01:64:79:5c:7c:43:66:ae:b9:96:d2:
                    61:cd:6f:ce:85:93:9d:cd:f2:28:36:68:3b:99:45:
                    22:36:bc:9f:a7:71:05:c6:e0:81:c8:67:bb:c1:ed:
                    e2:a6:ba:97:43:4d:f7:84:de:f2:c7:fb:0c:18:ba:
                    a8:44:56:f3:44:ef:2d:30:22:8b:58:b3:50:1b:42:
                    65:d0:98:0b:3f:80:6b:0e:d2:7d:09:5a:8a:50:bc:
                    9c:4e:15:6d:7f:6d:fa:d0:68:a7:84:00:bd:16:cf:
                    98:bd:9e:2c:d6:af:79:3e:cf:2f:71:ea:3e:50:5f:
                    c7:c8:23:a1:64:04:7f:af:ec:ac:5d:85:0c:86:65:
                    41:e2:97:f2:18:a4:07:6f:0c:08:e2:91:42:5a:da:
                    11:16:a6:cb:34:9b:cc:1b:55:ea:93:6e:30:42:c7:
                    15:4f:ae:80:03:d4:5a:5a:18:7c:c4:62:36:3b:c4:
                    3f:b7:d3:a7:7c:d2:5e:92:c7:53:60:8b:ea:9b:c4:
                    e9:7f:ad:9f:e7:f6:42:c6:43:64:d9:fa:e1:68:68:
                    8a:d0:63:39:b6:a4:9e:27:3e:7f:13:89:d9:e0:be:
                    9e:2a:72:ff:b9:22:fa:67:fc:4e:b8:0c:af:16:64:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:63:7D:A7:DA:B9:94:3C:21:60:79:67:7B:E4:AA:F7:79:03:D5:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90caa100-bf79-3022-8455-1bdc4279c916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2151::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:02:be:b0:8d:4d:b7:e7:90:a8:a5:4d:f7:49:59:e9:92:b2:
         2c:46:57:9d:5f:e4:f7:17:41:ac:bd:0c:e1:29:23:b3:9d:d1:
         08:03:85:7a:df:f2:d9:ad:17:dd:77:1a:cf:44:47:0d:6a:9f:
         76:cd:55:b4:aa:94:d9:32:b7:55:11:04:3d:92:e8:34:bb:bd:
         b1:47:f2:99:ce:00:c3:da:20:b5:93:25:a7:03:eb:ce:79:06:
         c1:95:6a:d0:a2:c3:b9:2c:56:8a:15:97:fd:09:77:f9:97:e4:
         88:03:84:99:65:07:86:17:61:90:f6:8b:5e:45:65:d6:56:87:
         6a:34:25:8a:24:65:be:9a:b1:1f:98:e5:fe:91:19:0d:93:36:
         2c:14:9d:fd:7b:39:cb:c8:5c:33:d3:51:91:47:50:b7:3d:90:
         ab:cb:24:00:ef:85:43:40:5e:5d:93:b8:86:96:26:2f:d8:8e:
         0c:14:c6:17:08:d5:26:cc:af:cf:6f:5a:32:2e:79:25:65:fa:
         61:24:bc:e7:44:c9:29:dd:4e:4e:53:c1:a6:0c:dd:74:0c:89:
         4d:c3:0b:39:10:29:aa:bf:da:79:7f:b8:26:23:13:ae:b0:fd:
         5a:fd:90:43:fc:6f:68:fc:24:2d:3c:c7:80:d5:cb:ac:65:0c:
         79:5d:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:16 2025 by rpki-client