Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11b7589e-af39-3b21-908f-61814eef9284.roa
File:                     11b7589e-af39-3b21-908f-61814eef9284.roa (raw, json)
Hash identifier:          F2bCZIKOAIj542oHQe7mI8wp4jXZA4ISkXs8uLil7Yw=
Subject key identifier:   4B:0A:3A:D4:E9:90:E1:D6:69:A6:17:D4:2E:E8:80:49:A9:84:13:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB15A306CD1A54498C57000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11b7589e-af39-3b21-908f-61814eef9284.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     397201
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:5a:30:6c:d1:a5:44:98:c5:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=1940348c-9243-4cc7-a9b4-274097408e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dc:51:7e:56:2b:49:f5:87:fc:b9:13:ba:da:
                    15:6c:93:06:71:8a:92:8e:12:06:de:ab:70:2a:e6:
                    fd:55:69:f7:43:f0:1d:bc:73:48:b8:fe:aa:18:fb:
                    2f:2a:a9:9b:81:ea:83:eb:b7:a5:3e:48:6e:1a:23:
                    91:f8:e9:5d:da:ae:9c:cb:03:90:ea:39:fa:60:35:
                    81:b6:03:45:9e:86:ec:39:81:57:51:1d:d9:ea:8b:
                    98:2a:61:6e:48:33:84:2e:26:b7:e4:8e:df:01:87:
                    88:f0:39:52:5b:76:4a:f1:b3:30:38:39:0b:e1:73:
                    d1:ca:23:a4:98:f1:53:23:e7:ff:91:44:1b:0f:3d:
                    fc:69:f7:f2:6d:cf:9c:ac:84:30:e4:ee:2f:93:cc:
                    32:df:62:93:73:eb:e8:0b:45:01:04:24:e2:24:a4:
                    23:3d:60:de:79:39:cb:99:2d:98:a9:4e:2a:fd:63:
                    07:16:89:2c:8d:1f:83:ff:c8:46:43:b6:31:4a:97:
                    95:85:c5:5b:8c:3f:ab:c2:41:99:eb:95:02:f1:4d:
                    8a:04:9a:b8:ad:cd:09:7b:53:0e:7d:c7:62:71:79:
                    07:78:0f:4c:51:d3:66:71:57:f9:42:d4:04:3d:f2:
                    7f:7f:c1:bf:82:83:10:18:ec:ec:c4:8e:b7:fc:1f:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0A:3A:D4:E9:90:E1:D6:69:A6:17:D4:2E:E8:80:49:A9:84:13:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11b7589e-af39-3b21-908f-61814eef9284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1a:a7:e4:bb:3d:90:24:1f:6b:77:ce:c8:36:cc:45:0f:37:
         1f:14:2f:7a:4b:25:04:d2:79:e6:b4:e3:53:91:f6:02:7b:cf:
         60:3d:4f:fd:8b:f3:32:1e:2d:42:b7:ef:4d:88:63:c5:37:31:
         b7:22:2f:10:9b:ed:3b:94:9f:57:4a:6c:a8:8b:66:f1:ae:91:
         51:7e:0c:d8:4d:d5:29:40:2a:9d:b9:7a:27:69:9f:b3:61:fd:
         25:b3:50:31:e4:56:17:e7:cd:86:d5:aa:31:e6:7d:01:94:77:
         0d:68:7d:47:5e:c6:db:89:17:e4:da:b0:a6:63:11:f6:d7:cd:
         f9:0b:5b:d9:4a:dd:30:2b:b5:07:c5:c6:68:3e:fb:42:bf:0b:
         d3:7f:6d:49:9a:c0:c1:bf:4f:37:6b:3b:cf:a1:56:99:65:b2:
         e3:44:ca:0e:c2:75:45:2b:ee:75:2d:f8:33:2e:e4:56:2c:77:
         7f:64:7b:1d:f2:67:33:3f:62:d9:da:1b:69:6f:d7:27:d2:22:
         1f:2b:85:16:e2:85:9f:8c:fe:e3:a5:49:f3:1c:7a:52:b9:5f:
         81:96:eb:94:ed:3d:c0:c9:2a:cd:88:7f:e1:ca:0a:7f:5a:98:
         ae:18:4f:e1:ca:d6:d4:b7:c4:d5:19:2e:5f:6b:7e:cc:9a:38:
         6c:23:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:46 2025 by rpki-client