Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/8658ef54-416d-3b6d-a9ee-bbb2316eba26.roa
File:                     8658ef54-416d-3b6d-a9ee-bbb2316eba26.roa (raw, json)
Hash identifier:          chxuuYLoTIXGsBei2fyJm8qdH2IDPT3hCeAyMCnvFJc=
Subject key identifier:   A8:08:69:7D:A5:40:B8:28:FB:2D:79:35:78:39:7D:BB:9B:DF:23:E2
Certificate issuer:       /CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
Certificate serial:       010D0C9F43285848C34BF38D055CFAD6FE809AC0
Authority key identifier: 52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/8658ef54-416d-3b6d-a9ee-bbb2316eba26.roa
Signing time:             Mon 03 Feb 2025 19:02:33 +0000
ROA not before:           Mon 03 Feb 2025 19:02:33 +0000
ROA not after:            Sun 04 May 2025 18:02:33 +0000
asID:                     16509
IP address blocks:        2620:c7:6000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c3:4b:f3:8d:05:5c:fa:d6:fe:80:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
        Validity
            Not Before: Feb  3 19:02:33 2025 GMT
            Not After : May  4 18:02:33 2025 GMT
        Subject: CN=8752b864-5ae6-4a4b-830a-5c7a11475eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:37:29:56:96:05:26:45:3e:e5:99:23:32:
                    ef:d3:93:25:78:29:da:14:95:d8:f2:f2:ac:73:3b:
                    3a:9b:2d:83:a7:24:d1:56:7c:7f:1a:c2:78:6d:1c:
                    74:6b:33:fe:0d:b4:51:d6:1c:5d:e8:af:d4:64:de:
                    be:a2:38:99:3c:54:b7:1c:0a:8d:32:d7:05:27:eb:
                    6e:f5:3a:bc:c3:d6:75:fc:25:8c:ef:96:2f:86:6f:
                    59:5b:b9:e9:f7:49:8b:4e:15:49:ae:82:d4:3e:c1:
                    56:a4:9f:49:89:00:d5:7c:09:c8:33:2d:7b:d3:53:
                    5d:36:57:8d:3c:b7:ae:45:d0:6e:9d:eb:f8:b5:e1:
                    a4:7f:9b:62:6b:fc:1c:c2:54:4a:e7:ed:f3:67:9f:
                    ed:48:3f:a3:10:59:19:38:44:95:64:35:f4:b1:28:
                    ab:09:29:ed:99:5f:76:bf:4c:e3:5c:90:5c:33:e4:
                    0f:40:30:db:7d:8e:6b:5d:d4:05:3b:28:40:f0:e6:
                    2d:6b:08:30:5d:33:79:04:b9:da:96:d1:9e:df:96:
                    fe:d5:48:e5:bd:2c:e2:24:12:06:42:8e:59:93:06:
                    2b:eb:c1:e4:e8:ee:aa:e7:93:ad:9c:68:2c:d7:23:
                    ba:ad:3c:f2:b4:d3:66:85:84:7d:58:db:20:ef:c1:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:08:69:7D:A5:40:B8:28:FB:2D:79:35:78:39:7D:BB:9B:DF:23:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/8658ef54-416d-3b6d-a9ee-bbb2316eba26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.crl

            X509v3 Authority Key Identifier:
                keyid:52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c7:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5f:ba:5f:84:28:28:ff:e7:21:e9:7e:98:40:5b:38:42:45:
         24:b4:e6:49:7a:4b:34:df:b3:6e:42:ab:be:2c:ab:65:bd:ee:
         6d:91:48:13:88:3e:5c:4f:ec:0b:a4:d9:5c:7e:bd:71:0d:51:
         27:ff:9a:92:d8:9e:a5:a4:6a:30:ca:77:6c:95:82:bf:7b:19:
         b8:9d:83:a7:f6:d2:25:ce:2d:97:2b:3b:6d:c6:7d:42:2e:e2:
         06:ac:45:a9:28:73:bf:ab:f3:b8:71:f9:cc:1e:de:ca:30:f7:
         b1:93:42:29:31:3b:b0:4f:7c:3d:01:9e:8d:c2:92:6d:3f:b8:
         42:3e:e5:e0:6e:e8:dc:ba:f0:04:4a:87:a6:f9:a1:e8:b9:b1:
         b8:b0:85:09:f1:f6:b2:4e:35:dd:e7:4e:53:50:03:7e:83:87:
         67:3b:63:7d:da:b7:d3:03:be:dc:2c:81:15:28:a9:82:eb:1f:
         02:48:1c:cd:f8:2c:d1:16:c1:16:77:e5:e1:cf:24:1d:2f:4f:
         16:30:e7:60:c7:7d:49:82:d0:b8:6c:d6:a4:7c:30:08:f2:c1:
         8a:44:34:4e:c6:51:ab:c9:71:9c:25:27:3a:dc:fc:95:7a:ca:
         d5:3b:94:ad:ad:0a:be:7d:4e:f7:8d:ff:77:77:23:36:f1:10:
         1f:25:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:15 2025 by rpki-client