Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3db1f69-13f3-3dd2-bceb-8dd018d7ee96.roa
File:                     b3db1f69-13f3-3dd2-bceb-8dd018d7ee96.roa (raw, json)
Hash identifier:          vr+o+HjfCVEymBWRtLNGl51fbNvNSgsbFYlnpYGhfXA=
Subject key identifier:   BF:C5:D5:84:F0:87:97:94:38:7C:EF:7D:C7:4D:03:03:06:05:43:9F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858480BDA681FBEF7E85D7F7F8B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3db1f69-13f3-3dd2-bceb-8dd018d7ee96.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     21342
IP address blocks:        2600:1480:e800::/48 maxlen: 48
                          2600:1480:f000::/48 maxlen: 48
                          2600:14c0::/48 maxlen: 48
                          2600:14c0:1::/48 maxlen: 48
                          2600:14c0:2::/48 maxlen: 48
                          2600:14c0:3::/48 maxlen: 48
                          2600:14c0:6::/48 maxlen: 48
                          2600:14c0:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:68:1f:be:f7:e8:5d:7f:7f:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=72926063-62f2-4404-9e78-0e5e85995aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:a6:19:ad:5d:bf:e8:44:73:c6:d2:7e:0c:
                    52:7d:90:6a:e9:b8:fc:cf:70:95:5e:64:4d:98:3e:
                    84:b1:fb:32:38:fe:cd:df:a7:47:a3:dd:99:57:48:
                    4f:07:85:54:d1:56:4d:ee:e6:b2:12:6b:c1:1f:76:
                    73:d2:69:f0:c1:a5:a3:51:3a:20:b6:22:ff:da:b8:
                    4a:1d:65:0b:a9:d4:41:01:17:7a:e7:98:8a:be:36:
                    64:02:d5:5c:94:f4:42:a8:5f:b1:ab:98:92:25:63:
                    0e:d6:fa:22:1f:f8:f7:0c:6f:c2:7f:05:06:6a:38:
                    7f:dc:14:91:d6:3a:dd:31:ec:e6:5f:55:9a:31:2c:
                    4c:84:43:40:60:35:9d:26:77:4b:77:0c:08:b2:09:
                    38:29:1e:49:41:59:b7:df:84:7c:d1:72:1b:d5:9a:
                    04:57:ba:42:e1:4a:5e:35:68:0c:64:af:de:74:42:
                    37:6a:71:3f:48:f6:fd:54:f5:7d:da:7d:a4:a1:0c:
                    00:38:7b:47:b8:25:10:cc:a3:b8:79:26:56:e6:b3:
                    b7:f1:12:58:d8:08:e0:e8:fb:63:3b:eb:9b:a3:4e:
                    30:c2:29:71:e5:1f:b7:47:72:0f:99:15:93:e5:bb:
                    13:d6:87:d0:0e:e7:16:84:83:15:70:59:d9:44:01:
                    1d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:D5:84:F0:87:97:94:38:7C:EF:7D:C7:4D:03:03:06:05:43:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3db1f69-13f3-3dd2-bceb-8dd018d7ee96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:e800::/48
                  2600:1480:f000::/48
                  2600:14c0::/46
                  2600:14c0:6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fc:0a:56:a0:e0:d8:fe:36:47:51:2a:3c:62:5f:19:a5:df:
         02:a6:74:e0:18:52:6a:1c:f6:f4:54:f3:30:3d:c6:be:dd:db:
         94:fa:fd:91:1d:9c:5a:33:a6:ee:d5:58:4d:42:d2:cb:ad:c2:
         51:ca:61:00:58:89:ca:a3:88:9b:a7:22:ec:a6:30:8d:f1:ce:
         87:92:de:72:f2:10:2c:09:21:81:c3:12:64:e2:e3:68:55:16:
         78:eb:30:8a:af:50:66:9d:c0:a9:b3:35:0c:50:9e:35:e0:d4:
         a3:c7:34:16:e1:93:fe:87:91:96:b6:44:7d:60:30:05:2d:fe:
         10:76:4e:b9:0a:c9:b8:70:3a:01:c3:15:4e:bd:28:8c:04:b1:
         70:2f:d7:6f:71:6e:c6:0a:de:91:98:ba:71:e5:7d:5b:33:6e:
         2a:38:ca:7e:30:b7:99:27:a6:81:3c:2c:0a:aa:da:e6:22:a2:
         53:35:c3:2e:28:40:66:17:b6:74:4f:99:ca:11:a3:91:23:88:
         3f:ea:81:f1:44:81:a7:03:e5:5a:40:eb:37:f0:8a:76:3a:6a:
         0f:15:1e:12:49:26:ae:c5:ee:5a:52:d2:ff:2f:fa:1a:26:14:
         45:6c:e2:ba:c9:9f:75:f8:92:c0:e5:cf:1c:bf:02:10:79:03:
         4c:54:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:04 2025 by rpki-client