Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56bc3e2c-e7cd-3d01-998a-548f26e4717c.roa
File:                     56bc3e2c-e7cd-3d01-998a-548f26e4717c.roa (raw, json)
Hash identifier:          Yjf6gCZLWPajGgKJTVz+1k/p+SDB140Cbn6F7BO88rs=
Subject key identifier:   5B:3E:65:D1:4A:43:31:22:9B:3B:65:7F:29:76:44:B1:A7:53:45:DA
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F432858490B4C216FF0B96351DA505E48
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56bc3e2c-e7cd-3d01-998a-548f26e4717c.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     1880
IP address blocks:        2001:440:1800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:21:6f:f0:b9:63:51:da:50:5e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=aae635e9-58f9-42e6-8489-11fefc077ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:9a:83:0a:85:b6:95:11:c2:f9:0f:0d:41:
                    59:ee:db:5e:02:95:ba:aa:f4:08:b7:46:fe:a0:bd:
                    30:30:5d:44:87:4b:89:cc:86:ea:3e:2e:a1:eb:5e:
                    43:27:0a:94:27:3c:53:8c:e8:82:27:cd:7a:bb:4e:
                    4e:e6:6e:3f:1a:c3:84:14:da:82:a0:42:9c:05:46:
                    55:55:e9:bb:06:7b:e7:67:bf:22:d0:25:0e:0a:e6:
                    01:e4:13:6f:2d:ad:56:73:2d:4a:1a:61:9c:6b:1a:
                    90:1b:a9:5e:ea:ee:2c:bb:43:06:86:20:c8:db:d0:
                    e5:db:5f:71:0f:b8:73:7a:99:2d:35:0d:7a:31:c3:
                    87:25:16:07:6c:92:dd:86:47:13:6a:a1:0e:3f:a2:
                    a1:98:93:18:d1:56:6a:3d:e5:7f:7d:93:27:b2:23:
                    12:93:c4:76:d2:57:0b:2c:5d:8f:38:9b:cc:72:d1:
                    aa:a1:01:f3:c6:fd:53:ce:1d:5c:9e:de:1e:c0:60:
                    bf:ca:e2:cf:d6:6f:0e:21:eb:0a:e8:05:05:c4:82:
                    8d:77:89:50:c1:2f:55:ca:01:11:82:2b:7d:93:2e:
                    4f:28:3f:62:72:c9:66:f1:ba:06:4c:91:20:62:2d:
                    73:9a:b1:2f:e7:57:f3:b3:38:06:91:8f:d1:98:4a:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3E:65:D1:4A:43:31:22:9B:3B:65:7F:29:76:44:B1:A7:53:45:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56bc3e2c-e7cd-3d01-998a-548f26e4717c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:440:1800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b1:71:6f:5b:08:24:64:fd:e7:0c:30:bc:a6:f7:c9:93:23:
         2d:93:52:88:50:bb:df:6a:7f:ea:7d:41:b9:f8:46:8c:ab:5b:
         a9:8c:4b:6f:84:5a:21:3d:c9:70:36:d1:cf:1d:b5:3b:11:35:
         f2:3b:96:4e:25:0d:49:59:10:3f:3a:ce:6f:a0:cd:e6:9e:eb:
         b2:2e:2d:c5:e0:57:ec:39:9a:91:c6:4b:ea:a0:27:e1:4a:7c:
         50:6e:43:36:df:46:04:90:6b:2a:99:75:27:9e:12:1c:2e:da:
         81:63:2b:7c:82:88:10:e6:69:48:1f:34:3b:d3:80:69:aa:b3:
         46:65:90:b9:68:1d:1f:a3:76:04:bc:dd:f0:75:6d:c3:ce:2a:
         2e:e4:43:ae:1b:f3:d8:8c:3c:7a:15:c7:d1:7e:19:26:33:60:
         54:eb:87:94:32:e0:47:fa:74:5e:2f:89:98:31:9e:f6:0e:17:
         5a:2f:e0:99:b0:75:57:cd:47:54:a2:4e:50:49:79:8c:e0:db:
         d0:e9:19:cd:47:4e:38:9e:b4:71:e5:fd:94:c7:e8:5c:61:a1:
         29:2e:bd:44:e7:35:67:2c:f5:6a:24:22:fb:95:10:1f:20:9a:
         4c:34:cc:1f:44:e6:29:0b:f9:b4:af:95:86:6d:97:71:b9:74:
         ff:8c:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:35:31 2025 by rpki-client