Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06487446-ae1c-3a5e-b165-0e92d585dbb2.roa
File:                     06487446-ae1c-3a5e-b165-0e92d585dbb2.roa (raw, json)
Hash identifier:          d/PNQ+cdSOmbq8tgiFRms+SB9drD4ZKYiA9aNX6qROM=
Subject key identifier:   BE:0F:F9:E8:2E:C5:98:37:91:8F:FB:B9:4C:1B:95:08:84:08:90:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73DE4F72D63F09D425F100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06487446-ae1c-3a5e-b165-0e92d585dbb2.roa
Signing time:             Fri 29 Nov 2024 13:58:26 +0000
ROA not before:           Fri 29 Nov 2024 13:58:26 +0000
ROA not after:            Thu 27 Feb 2025 13:58:26 +0000
asID:                     396558
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:de:4f:72:d6:3f:09:d4:25:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:26 2024 GMT
            Not After : Feb 27 13:58:26 2025 GMT
        Subject: CN=a620ddbb-3e77-417f-961b-6cc18478c526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:69:3e:d7:48:d2:4b:da:a3:b9:f6:04:a7:
                    95:25:dd:c6:25:6b:68:94:03:55:cb:31:1d:0e:b4:
                    27:db:45:9b:4f:ac:a2:c1:7a:ac:14:74:85:10:bd:
                    dc:c6:79:ae:17:81:17:04:d3:d4:54:4d:d5:c6:80:
                    ba:4d:21:20:84:12:68:e8:56:c0:ed:45:2d:7c:bc:
                    b0:0e:01:79:7a:c9:cb:b9:09:e5:2e:f8:ef:ae:ba:
                    70:ce:14:d1:14:da:af:fd:ed:c5:58:42:a1:0c:5c:
                    e4:04:81:6f:2b:ae:65:ac:05:a7:69:39:c1:90:81:
                    1f:91:a5:aa:de:dd:f6:00:d1:f2:08:c1:9f:ec:d2:
                    37:d6:cb:52:c5:60:6f:e9:0b:35:01:2b:4a:4a:d9:
                    82:5d:02:39:22:80:4b:be:71:3d:0b:06:20:b4:a6:
                    ae:72:87:64:9d:da:f0:01:d5:c8:59:da:b2:78:b4:
                    c9:f6:48:dc:6a:7d:01:93:0b:8b:c1:87:84:bf:fe:
                    03:cf:13:19:21:40:21:eb:d2:b5:ef:4e:e3:24:67:
                    35:06:c1:5d:42:0e:f5:53:5e:a5:6a:9b:f9:c4:51:
                    70:3e:6c:dd:7b:4f:05:a9:37:10:49:27:5f:89:a0:
                    b1:96:3b:14:db:5a:fe:14:0a:12:5f:91:67:d1:68:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0F:F9:E8:2E:C5:98:37:91:8F:FB:B9:4C:1B:95:08:84:08:90:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06487446-ae1c-3a5e-b165-0e92d585dbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:19:79:94:64:cf:d3:b1:27:6e:e8:ba:f7:3d:3e:25:9d:bb:
         8d:ae:78:93:29:74:c7:a4:d8:5c:f8:41:20:66:17:73:cb:e4:
         42:33:2e:3f:ac:15:d3:e0:d6:ec:12:7e:15:47:23:9a:05:48:
         33:fe:79:a0:d1:0c:29:96:3c:3c:67:07:c7:01:36:a8:8b:55:
         69:09:2a:74:eb:7b:e5:d9:df:4d:29:7c:cf:ee:c4:e4:8c:fe:
         ec:a5:4e:ca:27:a5:c2:b4:d5:0a:90:7e:e0:73:d6:36:ed:2d:
         b2:18:96:b5:1c:ae:a9:10:7a:21:51:a2:e4:3b:39:c0:4c:08:
         8c:b4:7e:99:24:bf:73:b9:91:e3:ed:4d:99:14:aa:cc:b5:c3:
         f0:a2:df:83:71:cf:fb:e9:fb:a8:ed:4d:af:74:46:dc:e6:65:
         aa:67:4c:78:e4:66:01:74:77:91:a1:b3:e7:04:a9:b5:98:fb:
         88:a3:77:e9:64:6d:13:fb:3e:c5:6d:65:d3:87:8c:0d:37:2b:
         c2:7a:93:9e:75:82:38:31:ce:39:b8:8a:af:aa:cd:c0:66:f8:
         58:26:db:35:0f:2e:fd:83:4f:e2:9c:43:29:f0:d5:4e:78:d4:
         5b:2a:34:fb:39:bf:51:66:20:4d:27:f2:da:61:a5:8e:4d:e3:
         ee:b2:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----