Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4af1c40-a6bc-3038-90b1-f7e89b4cc10d.roa
File:                     e4af1c40-a6bc-3038-90b1-f7e89b4cc10d.roa (raw, json)
Hash identifier:          ppKlE3xfy6snJHlaimf+fBiv1i/vdS1HW8WPPPlJUbE=
Subject key identifier:   6E:4B:0F:F5:02:02:13:61:25:4D:EC:E3:78:5F:99:42:C3:69:8D:C6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF763D8286F66C8E10E9D0E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4af1c40-a6bc-3038-90b1-f7e89b4cc10d.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:3d:82:86:f6:6c:8e:10:e9:d0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=da593d13-e105-47f8-8836-b79dc54f283a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:eb:0e:79:c3:f5:5d:a5:73:af:d7:b4:05:
                    e8:45:fc:54:65:85:35:d8:54:45:3c:bb:b7:03:52:
                    01:41:0c:89:6d:2f:08:cb:e4:b4:42:79:7c:02:5b:
                    b3:d5:25:27:b4:9e:11:b3:2b:79:7c:10:07:de:de:
                    75:0d:74:18:3c:6d:13:6a:05:6b:59:f5:5c:6b:f4:
                    33:30:1a:ad:e4:11:d1:e3:88:77:2f:ca:c2:28:0c:
                    12:e9:8d:cd:9c:ce:77:20:87:9a:79:3c:92:42:4c:
                    40:49:b6:1b:9d:a8:f2:56:a3:38:71:a2:c8:f7:1f:
                    41:0e:11:91:22:f6:1a:74:f6:d0:91:22:ea:18:b5:
                    98:a2:ac:86:74:36:31:d5:15:82:fe:7f:3c:69:fe:
                    03:c6:48:11:8e:85:15:21:bf:b6:45:8f:f8:69:2b:
                    31:8c:0d:08:73:d6:cf:f8:4f:d4:bf:f9:6d:56:5d:
                    7b:f9:45:0b:47:aa:ed:ce:d3:46:c6:21:df:d5:e5:
                    ad:0a:56:22:bd:73:1c:35:11:78:85:5d:89:3f:2b:
                    f5:85:df:d8:62:e7:1d:e3:c6:39:15:9b:21:ad:48:
                    4a:6f:09:ce:25:5e:e2:ff:9d:b7:6d:59:b5:42:14:
                    cd:91:79:ee:11:2e:ea:63:7c:a4:9c:fa:c8:5c:65:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4B:0F:F5:02:02:13:61:25:4D:EC:E3:78:5F:99:42:C3:69:8D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4af1c40-a6bc-3038-90b1-f7e89b4cc10d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:23:ab:ab:b9:75:53:75:04:5f:b7:98:48:5f:93:ec:b9:
         91:ee:1f:c6:36:f3:20:c3:bb:02:89:f9:0e:5d:13:59:3a:12:
         e9:78:cd:d2:fa:21:84:58:c3:18:56:d0:cc:67:37:6a:c3:98:
         0d:97:86:88:7f:fb:75:05:58:79:c1:af:9f:05:32:2b:ea:68:
         a3:67:40:9e:30:07:68:28:50:60:d6:0b:1a:3f:67:5b:57:2d:
         9d:d1:6b:73:4d:49:61:67:b2:8f:e2:41:de:25:ce:95:7c:70:
         28:86:0a:b4:80:ab:7f:39:54:f7:69:e6:48:36:2f:ad:04:49:
         f7:af:ef:1f:91:fa:6e:f1:48:0d:e9:d6:6d:1c:a3:82:cd:b2:
         c8:df:b0:07:19:c2:54:79:d1:fd:a1:4c:a0:11:41:74:d3:9b:
         9b:78:85:41:23:0e:51:c1:70:d3:9d:8a:4d:28:f8:12:84:37:
         9d:6a:93:b6:d9:9a:9a:71:50:e8:93:d9:3e:0a:ac:9f:a1:f3:
         ef:72:2a:7a:c1:6d:f2:55:fa:46:50:22:41:f0:2a:ef:3d:a1:
         8d:3f:a9:4f:3a:ec:e8:3d:7a:6f:43:ac:bf:8e:05:60:0d:1e:
         d8:5d:ba:20:aa:49:14:81:d4:db:8f:df:40:d3:ad:15:f4:1b:
         6d:fb:66:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:09 2025 by rpki-client