Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
File:                     2505f67b-6fa0-3842-b151-ace4058d830a.roa (raw, json)
Hash identifier:          RbzhvK4rG1fdVYGP3OTwie1+lE0Un1cUYfQjii9yHno=
Subject key identifier:   21:8D:35:8D:B8:D5:A2:6A:79:4E:36:FA:10:DA:2B:5D:06:33:97:4B
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F432858487755CCFC27519DA6B8472B25
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     809
IP address blocks:        2620:13b:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:cc:fc:27:51:9d:a6:b8:47:2b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=ff1161c0-dc2e-4956-add7-cd8f5d440842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4f:3f:9f:72:e7:74:13:e7:c9:c7:32:4d:0d:
                    af:a1:d0:16:11:d3:29:86:40:1b:85:7a:27:f5:f5:
                    54:52:85:33:a5:cf:94:21:16:a4:d6:19:5c:93:2f:
                    35:3f:e2:b7:c1:d1:b2:bd:2d:90:9c:dc:71:ee:58:
                    5c:82:f8:05:09:c4:c1:60:2c:14:00:9a:6f:3c:f8:
                    36:bb:26:b2:96:55:9c:c5:56:d0:cf:16:35:2b:ff:
                    8b:7a:db:cc:c8:7f:11:85:a6:e6:60:0e:9b:1d:3c:
                    da:64:d2:00:ca:98:06:f9:eb:9f:95:28:af:89:96:
                    71:51:4f:a8:3b:d3:7e:e1:54:00:5e:ca:43:11:7e:
                    e9:14:2e:bb:4c:2a:71:3b:e7:83:76:d1:ae:08:43:
                    08:3a:d0:ba:19:8b:c1:49:35:2e:10:63:be:5a:1a:
                    c2:81:1c:f2:57:16:77:54:54:fc:b5:3c:96:93:dd:
                    ab:31:33:63:5e:b1:78:66:c7:78:e7:21:dd:29:9c:
                    85:78:4a:94:83:c0:b5:28:b3:81:c9:40:1f:ed:ca:
                    b4:27:c1:60:5d:af:d6:82:79:a2:ea:76:d9:fd:1c:
                    e3:49:d2:b4:2b:2e:d4:13:a1:9d:5f:0f:ae:9d:18:
                    26:38:6a:4f:e7:d7:3f:ad:49:37:04:4a:69:85:5c:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8D:35:8D:B8:D5:A2:6A:79:4E:36:FA:10:DA:2B:5D:06:33:97:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fd:e7:93:83:d9:58:b6:2a:b7:83:7a:ee:d9:65:ca:74:68:
         e5:28:4b:6c:04:21:84:75:cd:83:0c:5a:72:48:5c:e3:83:2e:
         92:3e:0b:93:65:9c:f1:cc:95:6f:8f:e1:e6:d3:d0:a5:77:1a:
         4e:dc:82:5e:e9:a8:a1:23:ed:d5:c2:bc:ae:00:31:ae:d8:4e:
         9f:02:a8:49:2d:f9:f5:74:bf:e6:3a:2f:ee:6a:32:3f:73:5b:
         1f:49:85:32:c0:6b:e2:a0:1b:b2:d6:fc:6a:f7:b6:d0:2e:39:
         2e:1b:2f:4c:d3:84:f9:50:11:85:5d:ce:3a:d0:0c:98:9a:d8:
         eb:f7:99:b5:fc:0e:1a:2c:52:0b:f9:36:49:18:85:17:be:09:
         1a:d6:ec:15:1f:06:d0:cf:18:8b:6c:c0:41:50:ea:9d:f9:cc:
         0c:6f:e9:68:8b:9d:1a:8e:4c:b6:4c:06:a3:8c:94:ca:0c:64:
         9f:6d:46:b4:be:a8:df:68:27:f2:0e:bf:d5:5e:61:44:09:25:
         9e:03:5b:c4:9d:b7:e3:9f:fa:25:1f:33:13:ae:fa:10:21:85:
         d2:4a:04:de:46:18:29:c7:c4:cf:91:e7:01:1b:1e:8b:b3:de:
         3d:0d:95:54:1a:36:52:d7:41:d4:6e:b9:af:0d:76:21:9c:18:
         32:2c:1a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:19:12 2025 by rpki-client