Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
File:                     2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa (raw, json)
Hash identifier:          lTVsZbVDuEmCYVBZ3OQVFCMoc8ET9nFzORkvo7CKU78=
Subject key identifier:   51:9B:9C:5E:80:71:97:AC:07:7D:9B:4B:11:16:76:FC:8F:A3:B6:72
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285848133AF3F610C2DDF8018F0080
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
Signing time:             Mon 02 Dec 2024 17:26:02 +0000
ROA not before:           Mon 02 Dec 2024 17:26:02 +0000
ROA not after:            Sun 02 Mar 2025 17:26:02 +0000
asID:                     27281
IP address blocks:        2620:116:8083::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:13:3a:f3:f6:10:c2:dd:f8:01:8f:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Dec  2 17:26:02 2024 GMT
            Not After : Mar  2 17:26:02 2025 GMT
        Subject: CN=2fe869d7-29bc-4f60-b3d1-0991e78f35d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:78:cb:2a:14:d2:22:40:02:1b:59:b8:a7:
                    e7:be:ab:40:97:38:1a:a1:47:1c:57:14:ce:83:78:
                    6e:93:ab:19:2e:4f:92:d5:fc:6b:0e:d5:a7:32:3a:
                    13:ed:de:60:35:8f:b9:e1:04:82:4a:54:75:7b:16:
                    a2:1b:54:33:ef:c0:65:80:2a:61:62:7c:1e:a6:23:
                    3d:13:df:8c:34:45:af:ac:e6:df:b7:84:08:28:d9:
                    bd:29:4a:f6:73:9d:d2:9c:ea:51:75:86:6e:e5:f1:
                    3d:a2:3d:77:e1:8b:6c:96:f5:9c:f8:68:38:19:0a:
                    60:c5:8f:79:89:0a:04:ac:8e:07:ac:37:83:1d:7f:
                    ee:c6:7f:e1:48:9e:69:f5:24:a5:2b:22:1d:a7:6b:
                    25:8f:b2:e6:c6:80:ae:a1:8b:56:5c:31:c3:0e:84:
                    07:0d:b2:04:88:68:cb:53:ff:ea:fc:13:90:7f:42:
                    33:ba:b6:c3:cf:2c:0d:5f:e5:d8:ba:59:35:de:62:
                    07:c7:2c:53:73:52:9d:c3:66:c7:70:87:5e:0e:5a:
                    01:45:47:8d:61:8c:ec:7d:a3:b3:48:68:59:01:a4:
                    81:e8:24:53:ff:db:e4:a9:55:36:8b:13:bc:84:6e:
                    bc:2d:25:29:14:a6:a5:8a:bf:f7:f8:1d:7c:81:db:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9B:9C:5E:80:71:97:AC:07:7D:9B:4B:11:16:76:FC:8F:A3:B6:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:8083::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a7:46:ee:8d:f0:3c:df:98:df:1b:77:10:35:eb:d7:43:a1:
         e7:87:2b:0d:e2:0a:4f:cb:5d:0e:b1:88:1e:f7:36:dc:d0:1a:
         64:54:a0:67:98:5a:6c:1c:9a:a4:2a:19:db:3f:ab:da:24:3b:
         11:c9:61:fd:54:84:77:b8:b9:cc:fe:16:07:88:7c:80:8e:ce:
         2d:5a:ee:7e:8a:21:60:2f:7e:e5:5c:a4:81:ed:d0:7b:27:2f:
         e3:01:0e:f9:2a:de:23:20:68:fa:6b:7e:10:9d:e4:cb:9f:63:
         14:e6:c9:e5:6f:d8:ae:7e:65:2a:e2:12:db:fe:e2:7c:0b:59:
         fc:59:04:c9:3c:d8:db:11:fd:82:7c:65:18:1e:5e:3a:7c:28:
         bb:b9:24:81:62:0e:49:10:9e:56:3d:33:a0:f9:0b:50:f5:81:
         24:97:31:ae:9e:24:17:49:dd:0e:1f:0b:44:26:3b:a0:b0:59:
         e2:a8:62:0e:5d:db:db:3a:00:38:aa:64:ce:33:9c:de:1e:14:
         56:88:cf:a8:7d:16:56:64:90:96:7c:ae:bc:29:d6:37:bf:1b:
         b8:21:b6:5a:54:3c:32:7c:72:b9:71:b9:10:d1:a2:7d:0f:a3:
         0a:cd:7a:1b:97:20:fb:3d:2e:c1:9c:0b:41:a6:3e:79:51:99:
         3b:52:d2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:00:25 2025 by rpki-client