Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cd32391-96b4-311b-b246-2900b0d48101.roa
File:                     1cd32391-96b4-311b-b246-2900b0d48101.roa (raw, json)
Hash identifier:          5Y1cNcu5ftygkrtZ+PFDuyYYtE4fBQEnudeo6XWP58w=
Subject key identifier:   5E:51:3C:BB:E3:83:71:CE:CE:B9:B1:B1:89:17:D9:0C:EF:F3:3C:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73E66278E62F6FD5553600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cd32391-96b4-311b-b246-2900b0d48101.roa
Signing time:             Fri 29 Nov 2024 13:58:30 +0000
ROA not before:           Fri 29 Nov 2024 13:58:30 +0000
ROA not after:            Thu 27 Feb 2025 13:58:30 +0000
asID:                     396584
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:e6:62:78:e6:2f:6f:d5:55:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:30 2024 GMT
            Not After : Feb 27 13:58:30 2025 GMT
        Subject: CN=5584c861-6d5b-4304-b328-1318d34f4bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:29:dc:02:76:11:9f:82:31:e4:f4:75:2f:
                    44:11:74:46:f4:fa:d2:b6:52:dd:18:3b:35:66:e6:
                    19:31:6b:17:95:96:f9:48:43:91:65:e0:c2:fb:20:
                    6e:97:e8:fa:b6:ed:f8:b6:31:3b:bc:4a:06:56:56:
                    fd:ac:c2:5d:ee:7b:00:a6:76:36:22:7f:61:1f:c9:
                    57:80:df:d4:da:b3:3e:16:5f:7d:cd:fe:f7:5f:fd:
                    b3:0e:be:89:a9:51:81:c2:23:15:2a:6d:23:f2:4b:
                    08:68:31:f0:48:04:43:bf:0e:6a:68:4f:0d:71:7f:
                    44:7c:cb:4d:d9:a0:f5:43:f7:2c:a4:08:ec:7e:6f:
                    7c:47:ac:e1:69:f1:97:59:a3:6d:0a:78:5d:5e:e1:
                    3c:d2:62:11:b0:18:41:83:2d:17:8e:08:dc:4b:dd:
                    ea:15:d5:fa:48:26:38:c1:a7:75:02:8b:9f:84:03:
                    e9:72:35:9a:9f:48:f7:4d:cf:74:c8:b9:8f:5a:22:
                    23:20:95:78:4f:37:68:f2:42:c5:cb:fc:a5:3b:9e:
                    a5:ee:a6:3f:5d:f9:a0:46:7b:e1:24:2e:e1:40:f8:
                    91:12:fd:00:a8:ea:2c:f2:6b:77:d9:f6:78:68:92:
                    72:d1:d3:4a:eb:62:21:bd:6e:08:68:d0:6e:2f:3d:
                    45:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:51:3C:BB:E3:83:71:CE:CE:B9:B1:B1:89:17:D9:0C:EF:F3:3C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cd32391-96b4-311b-b246-2900b0d48101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d2:17:50:f6:e6:00:ce:38:5b:79:a8:73:36:2a:12:a3:94:
         97:8b:fe:20:4c:23:63:b7:6c:f1:7d:28:9c:91:04:59:11:a3:
         0d:11:bb:fd:73:54:83:46:66:ad:bf:8f:dc:66:d7:b5:d6:82:
         f6:ad:ad:c2:e1:a4:b7:46:d4:62:b7:27:17:ff:a6:89:6b:66:
         de:78:93:e8:16:2a:fd:60:dd:ec:f5:93:6d:6e:5f:fc:51:2b:
         99:5b:bf:45:73:ea:88:d0:f7:22:d1:50:ce:ef:52:5d:f8:5b:
         43:ae:db:7f:a6:dd:89:c2:4d:d6:f2:d6:66:f1:39:d9:96:84:
         4f:58:5a:c3:e3:4e:31:02:b0:9f:10:be:b2:9a:d7:89:2b:23:
         76:2d:42:d0:af:18:b2:f3:4f:cf:9e:27:26:2c:97:fd:8a:74:
         fd:d2:6e:b2:c3:74:50:a6:c4:bb:0f:08:72:4c:b3:64:16:32:
         ec:4b:b2:5f:48:b4:6a:3b:e0:91:c7:44:ed:14:0c:da:8c:18:
         71:7a:9b:e1:50:57:11:73:8c:5f:9b:44:43:96:b2:75:45:ea:
         a2:cc:fa:b0:af:26:05:02:d8:cb:fd:6e:8b:df:08:ea:f1:a4:
         37:38:1f:45:5d:9c:b6:60:cb:2c:43:04:81:4d:95:84:fb:67:
         59:10:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:44 2025 by rpki-client