Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa
File:                     18e44ea4-b598-3f56-b2a8-7861ef29958e.roa (raw, json)
Hash identifier:          Rp/F0opxppYV58OSVmbONBaGDwYZyGf8JfdS1CvRZS8=
Subject key identifier:   70:51:F3:0E:84:B6:90:52:E6:99:7A:DF:58:2B:63:3E:9F:B2:5D:0E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285847FF4A463F7E892C6A09E54600
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     30103
IP address blocks:        2620:123:20c8::/48 maxlen: 48
                          2620:123:20c9::/48 maxlen: 48
                          2620:123:20ca::/48 maxlen: 48
                          2620:123:20cb::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:46:3f:7e:89:2c:6a:09:e5:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=97d1afbb-8573-4411-adce-fb7690f4ff78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:3b:66:62:29:1c:d3:76:6e:aa:80:32:8f:
                    d4:c3:b3:33:e3:39:29:95:d1:40:43:3e:d7:b0:03:
                    36:0d:e3:6a:1d:0c:d1:8c:4d:c2:d6:ad:dc:96:e5:
                    65:9d:84:ee:64:cc:78:79:34:de:bb:10:40:5c:32:
                    3e:dc:01:e0:3c:aa:c0:17:f1:dc:e4:28:4c:7e:ee:
                    54:c2:73:1d:0b:bc:31:8f:7d:84:b8:29:eb:6a:67:
                    62:08:82:93:d3:7f:6b:4e:f8:d7:80:d1:83:d7:58:
                    f3:a9:60:cb:c6:0b:c8:a9:79:9c:de:ac:a7:cd:b8:
                    61:2a:71:f5:d8:76:c0:50:68:91:aa:d6:10:82:70:
                    c1:a2:95:bf:b7:cc:85:92:5c:19:1a:09:27:a6:de:
                    26:19:48:71:38:c3:33:11:a5:1e:06:09:38:c6:8c:
                    28:42:f5:59:c1:de:14:2a:a1:96:ae:53:67:ec:0d:
                    42:21:92:c6:01:17:5b:00:86:49:0c:bc:7c:cc:99:
                    72:70:c6:bb:11:e6:4a:b5:76:bd:63:f4:96:21:50:
                    fc:3e:b4:2a:cc:6a:a5:36:12:87:29:d2:fc:ef:71:
                    d3:d5:06:c6:8a:cd:72:ed:7f:c0:c2:e2:a6:ea:8b:
                    e3:5d:6b:0b:a4:5a:78:02:18:c7:82:f6:47:d0:af:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:51:F3:0E:84:B6:90:52:E6:99:7A:DF:58:2B:63:3E:9F:B2:5D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20c8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:0f:9f:fc:a7:14:9a:b0:b9:62:e4:0b:ed:10:d9:56:01:e3:
         64:bf:53:15:ec:4a:b6:49:81:0a:da:eb:d1:d5:89:df:92:42:
         68:5c:39:14:ad:52:05:63:32:cd:aa:bf:51:9d:d7:c8:77:ee:
         b4:47:b0:fb:fa:db:8b:a9:0f:5a:79:39:6d:1c:7a:bb:67:cd:
         89:81:90:a4:48:da:2e:7d:e2:07:b8:67:28:2e:74:99:54:8c:
         74:d0:2b:bc:37:0d:a3:7f:29:95:9f:9d:c0:67:2d:2c:e3:31:
         3e:41:a7:38:0d:f5:e8:b8:00:76:70:a6:0f:1f:10:af:8a:72:
         cc:a1:8f:b0:cb:ed:01:1d:59:c6:32:ba:1a:30:f3:0a:19:65:
         0a:d5:7a:22:52:72:9d:f1:40:44:f3:0d:2d:af:9d:c1:bb:ff:
         9a:2f:98:a1:12:94:39:79:bc:61:86:26:07:2c:60:d5:20:71:
         31:b9:72:5f:03:c6:47:bb:87:78:62:c9:76:c2:e8:b4:84:85:
         de:c6:ec:b1:26:19:ea:15:b1:1e:0e:21:1f:a2:25:59:62:3b:
         af:b5:4f:92:b2:35:0d:d1:df:e9:82:2e:c4:ea:88:37:8e:a5:
         66:72:22:bd:1c:f3:2e:fa:c2:5f:a6:2e:4a:82:c2:68:84:a2:
         3a:c6:ef:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:20 2025 by rpki-client