Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/96bcf789-6395-3bdd-ae67-4b175293b22a.roa
File:                     96bcf789-6395-3bdd-ae67-4b175293b22a.roa (raw, json)
Hash identifier:          Z3tEtDn0PHCrIFESpQNaWAzgZ9YlD/2++ffW/1xySeA=
Subject key identifier:   1E:AB:2F:B5:59:F3:B3:2A:58:8E:0A:6A:30:D0:CA:83:1F:D8:42:7C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858487755E16D9A42E9249FD00E30
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/96bcf789-6395-3bdd-ae67-4b175293b22a.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     30103
IP address blocks:        2620:123:201c::/48 maxlen: 48
                          2620:123:201d::/48 maxlen: 48
                          2620:123:201e::/48 maxlen: 48
                          2620:123:201f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:e1:6d:9a:42:e9:24:9f:d0:0e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=3f0b9c9a-4e8f-4e57-ac1e-59db0b61c6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:f6:1a:51:ec:93:28:cc:a1:a9:d1:2c:1f:
                    a9:8f:2f:fb:84:d4:1a:7f:5b:a4:ee:2d:26:a9:6e:
                    cc:82:25:ea:b6:6e:57:35:4f:99:4e:b0:62:cc:f9:
                    3c:5c:5d:d0:03:77:85:91:4e:ca:50:af:68:c1:9f:
                    f9:ea:59:08:32:81:87:c3:b1:8f:d4:0d:8b:36:02:
                    a5:b3:09:02:60:b9:00:cf:d3:c3:1e:71:49:cd:93:
                    0c:12:23:2e:ce:3a:1c:a5:43:25:cf:81:c9:d7:91:
                    56:14:7f:cd:62:3c:33:65:27:bf:7d:69:f1:ff:ba:
                    b4:ee:e2:cb:f2:34:27:c5:97:e8:b1:86:a8:92:77:
                    77:60:f7:37:06:7a:f3:77:8b:3a:97:f8:9f:43:1f:
                    1e:4c:0a:80:d4:e3:66:bd:e0:73:46:14:78:37:05:
                    82:af:80:6d:df:8f:65:e9:f4:41:41:6f:db:a1:00:
                    13:ee:47:d7:19:dd:92:46:a6:64:77:3a:0b:30:b5:
                    6c:44:1e:b3:21:2b:f3:e9:b1:d8:93:25:05:a0:00:
                    2e:10:72:e2:d8:49:cc:2e:60:bf:ed:57:2a:41:6c:
                    ad:cb:e6:bf:7d:3a:66:41:05:ff:2d:c2:57:12:7f:
                    0c:e8:08:31:d4:25:2b:7e:b1:86:4b:a9:86:b0:b5:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AB:2F:B5:59:F3:B3:2A:58:8E:0A:6A:30:D0:CA:83:1F:D8:42:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/96bcf789-6395-3bdd-ae67-4b175293b22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:201c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c0:52:f0:ce:a2:a5:97:82:22:59:e9:c8:b3:e2:32:f6:d5:
         c0:aa:0c:c3:e1:9c:50:4b:25:3b:80:c8:87:b3:c2:27:96:ad:
         85:ea:14:26:6c:f5:b1:c4:85:68:c6:81:04:9d:02:b5:7e:cc:
         a0:2b:d9:1c:68:17:95:d6:78:79:d4:51:2b:e1:99:bf:3d:c7:
         45:a4:c9:85:46:b2:dd:bb:c2:56:3f:c3:80:22:81:8d:24:4f:
         cf:f8:0d:84:01:7b:03:a5:ba:6c:1e:b4:6d:c8:c8:89:2a:07:
         3d:00:85:39:49:b9:7f:e2:fd:2a:12:88:2f:b7:dc:c2:4c:4b:
         97:51:45:6c:43:59:21:70:85:0b:92:49:33:cd:03:04:d2:d5:
         5c:13:7c:5e:a4:d6:f9:de:34:ce:fb:95:6c:6c:3e:e6:54:33:
         ed:4f:86:84:d0:46:4b:3f:ce:48:3f:d5:6d:bb:37:b6:a2:66:
         ef:9c:bd:32:8a:0a:7d:6a:9c:4d:3d:84:02:bb:75:97:41:85:
         83:15:92:3d:f2:ef:a6:ce:cc:48:75:33:2a:49:4e:12:84:15:
         8c:0e:bb:4a:e3:39:ba:d5:c9:dd:7c:ee:2a:91:40:d3:61:d0:
         2e:7a:4d:8a:cc:78:34:6a:8f:ea:7d:19:31:dd:fb:70:a7:47:
         d6:8d:76:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:21:57 2025 by rpki-client