Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7ee5c5c1-9183-49af-bf34-6690d43895dc/9e13e058-c25d-3871-aa9a-f5cef79f257f.roa
File:                     9e13e058-c25d-3871-aa9a-f5cef79f257f.roa (raw, json)
Hash identifier:          +kOnUKEp6otINfwrQByX2yZf4C/4UWFKu0CGEZzNVjQ=
Subject key identifier:   F2:3D:0F:88:0E:87:4C:A2:C5:17:2E:33:E3:53:3F:8A:90:57:97:7C
Certificate issuer:       /CN=7ee5c5c1-9183-49af-bf34-6690d43895dc
Certificate serial:       010D0C9F432858480644FC287E2E439C0FE8F680
Authority key identifier: 0C:64:A7:EB:2E:2E:3D:75:C5:5B:15:C7:53:60:9F:7B:71:78:10:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7ee5c5c1-9183-49af-bf34-6690d43895dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7ee5c5c1-9183-49af-bf34-6690d43895dc/9e13e058-c25d-3871-aa9a-f5cef79f257f.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     6169
IP address blocks:        2620:129::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:fc:28:7e:2e:43:9c:0f:e8:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee5c5c1-9183-49af-bf34-6690d43895dc
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=5d9729b9-0028-49f0-9fb8-18389b436189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:ec:64:53:ad:2c:e3:54:c2:10:39:e5:9f:
                    ae:94:ae:19:54:4f:de:ac:ab:32:5b:89:ad:89:71:
                    99:e5:91:4f:91:8b:f7:72:a3:9c:cc:ba:fb:6e:22:
                    b6:2e:20:3d:fd:34:a3:4f:33:b0:78:1e:3e:3e:ce:
                    f3:94:77:2b:b2:c0:0c:8e:32:ba:bc:ec:f6:0f:40:
                    10:bf:99:17:ea:b2:33:ba:dd:b9:c0:fe:06:81:e4:
                    ab:e5:88:0a:46:d3:f8:9f:0e:ed:52:fb:ec:e6:db:
                    62:0e:50:51:d3:3c:af:a9:8b:1d:72:01:af:39:f5:
                    b2:f4:ef:36:d5:d4:bf:5b:65:44:66:a7:f9:5f:91:
                    d9:d3:47:1d:60:68:f3:fc:3f:79:10:a0:6a:11:e2:
                    57:57:4f:f0:a7:32:12:52:0e:5e:ef:f6:a2:3e:04:
                    60:5a:2e:df:d9:1b:2a:7c:73:cb:af:ac:0e:ec:1a:
                    3e:67:e0:95:7a:54:25:59:aa:7d:83:fc:7d:26:97:
                    8a:c8:40:37:e1:d6:ce:ba:72:df:c8:c6:9a:0e:2e:
                    03:f6:fd:5f:c8:14:9d:5a:7f:c5:73:3e:a0:2a:f8:
                    ca:52:b8:c7:72:16:1d:be:f6:c0:6b:28:8a:c9:a6:
                    8e:7b:76:96:17:38:67:5a:54:db:09:f3:1d:b8:4a:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3D:0F:88:0E:87:4C:A2:C5:17:2E:33:E3:53:3F:8A:90:57:97:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7ee5c5c1-9183-49af-bf34-6690d43895dc/9e13e058-c25d-3871-aa9a-f5cef79f257f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7ee5c5c1-9183-49af-bf34-6690d43895dc/7ee5c5c1-9183-49af-bf34-6690d43895dc.crl

            X509v3 Authority Key Identifier:
                keyid:0C:64:A7:EB:2E:2E:3D:75:C5:5B:15:C7:53:60:9F:7B:71:78:10:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7ee5c5c1-9183-49af-bf34-6690d43895dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:62:61:91:07:a7:b4:56:d5:cc:53:b5:f2:97:4b:65:60:cf:
         cf:24:bf:eb:44:32:e6:16:e1:3d:e7:e3:cb:49:59:9a:ea:9d:
         63:5d:fa:97:a4:f6:5f:c9:0e:25:75:46:87:81:05:37:15:4d:
         54:63:8d:b9:6a:48:b3:6f:f5:15:5c:a0:4b:00:28:3a:23:0a:
         b9:85:65:ca:79:00:f3:05:a0:fc:7e:16:42:e3:f8:46:cb:11:
         82:90:07:16:d7:57:ad:84:a8:0b:57:23:2e:76:52:7d:f0:f6:
         f4:5d:4c:8d:8a:cc:67:c1:15:01:f8:2b:46:8d:80:70:5f:3d:
         b9:5b:2d:38:5c:aa:7e:43:8a:9f:01:3a:b8:ec:ad:ad:dd:b9:
         21:76:33:b2:1a:80:d6:05:d2:fd:d0:50:dc:bc:5c:f5:a8:7a:
         0a:e6:fb:3c:cc:31:89:c1:47:73:27:45:37:4c:3e:a2:12:df:
         5a:d5:57:fb:e3:a0:fa:9b:e2:e9:f8:ad:f7:f2:c0:d9:14:b9:
         e8:5f:9e:ba:33:d0:6c:ef:15:c3:65:09:47:af:aa:cc:45:b3:
         52:9f:7a:fd:27:60:79:d5:16:32:72:0e:c0:ce:53:f1:07:26:
         fd:73:9a:42:b0:e5:e8:f7:f8:e1:3c:3a:04:0b:a4:96:37:81:
         11:6d:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:06:48 2025 by rpki-client