Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cbc26e3-5f8b-37bd-a292-824b3cd756a9.roa
File:                     4cbc26e3-5f8b-37bd-a292-824b3cd756a9.roa (raw, json)
Hash identifier:          1QGFKMHXzF5SLCm8noFS0DsIDMvURWdcOYxuKV7kqAc=
Subject key identifier:   9D:39:33:BF:14:B2:A7:D8:EC:A7:12:EE:BC:D1:14:B0:43:3C:01:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BA275645138B8318BE0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cbc26e3-5f8b-37bd-a292-824b3cd756a9.roa
Signing time:             Wed 11 Dec 2024 15:18:08 +0000
ROA not before:           Wed 11 Dec 2024 15:18:08 +0000
ROA not after:            Tue 11 Mar 2025 14:18:08 +0000
asID:                     36623
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:a2:75:64:51:38:b8:31:8b:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:08 2024 GMT
            Not After : Mar 11 14:18:08 2025 GMT
        Subject: CN=23271547-06a4-4218-937e-349ff6c7290d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:7d:77:e8:4b:59:70:c6:a1:74:dd:69:b2:
                    f0:60:fa:ca:55:0f:67:ec:ea:5f:cc:12:95:89:0d:
                    7d:f0:a4:2e:4c:5b:ad:86:6d:1d:ad:05:e3:ac:1b:
                    a4:77:e0:0a:96:1d:27:7a:55:7c:01:85:63:20:80:
                    b4:c0:e4:6e:69:0c:92:9d:13:2a:a2:19:90:e0:3d:
                    e9:11:7d:35:db:7f:ac:dc:ff:c0:ff:ce:c0:52:20:
                    59:2c:21:ad:db:98:da:1c:23:cd:04:41:a0:a2:87:
                    6c:5f:70:80:d2:3a:cf:7a:a3:5e:7d:96:bb:bf:58:
                    a6:69:fe:e1:77:2d:9f:db:d4:9c:3c:21:db:32:24:
                    37:47:bc:95:a0:a7:80:e3:74:86:9d:31:4b:dc:f1:
                    c7:a4:b3:75:50:38:c8:c5:65:c2:d1:f2:91:ef:9e:
                    5c:9b:a8:67:a6:aa:ee:c8:2f:c7:65:40:cb:5f:6f:
                    21:fe:5b:44:41:f5:b5:9f:dc:a0:89:14:a7:ef:1c:
                    25:93:8d:15:52:3f:c6:b2:c0:05:c6:4f:bd:7d:1b:
                    fa:56:d8:3c:74:1b:c7:72:bf:a1:69:06:21:0a:ad:
                    1a:dc:dc:7d:1d:1b:4c:e5:46:09:ec:f6:08:a4:c2:
                    41:32:b7:5c:61:35:f1:98:c8:3c:e0:5e:a7:b7:b6:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:39:33:BF:14:B2:A7:D8:EC:A7:12:EE:BC:D1:14:B0:43:3C:01:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cbc26e3-5f8b-37bd-a292-824b3cd756a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c4:ea:97:99:e2:9a:7b:a4:c7:db:bc:22:b3:73:62:c4:ec:
         ee:52:9c:c7:b3:58:f8:66:9b:a2:90:1d:5e:93:cf:18:fb:d1:
         7e:26:c9:5f:49:f0:75:60:87:25:00:9f:b4:d2:9b:6c:e8:5a:
         2a:43:96:a6:81:f2:7d:c3:fe:5a:c4:7f:60:f2:0c:1c:df:9c:
         e7:1d:74:22:0b:5c:67:56:2b:cd:d2:e3:b2:9c:ab:70:63:7c:
         2a:06:99:0d:36:7f:83:f1:0b:04:f1:da:c6:e5:75:94:4f:97:
         eb:2f:88:18:72:75:49:70:d7:78:6d:4a:c9:dd:9a:fe:4e:1d:
         fa:b8:b2:71:d9:d5:aa:09:0f:8d:ed:a9:31:b1:89:e2:6a:49:
         fc:4d:27:8e:61:3c:32:46:a0:35:41:f0:e7:fe:87:50:9d:35:
         2d:1d:a9:ff:e8:56:45:29:89:4f:f7:9f:bb:7c:11:1b:8c:82:
         49:4a:e0:88:d5:ef:32:ef:4e:61:22:2f:b1:3b:b7:0e:75:d7:
         ae:1e:84:e2:49:1f:04:17:27:17:73:5c:0c:dd:d8:5e:de:04:
         b9:94:f5:12:ff:66:8b:f4:28:aa:e2:0d:45:66:78:c8:d8:0a:
         41:e5:71:6d:83:1b:d5:0b:2e:76:79:59:be:20:ed:bc:39:af:
         85:f9:c6:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgsG6J1ZFE4uDGL4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgwOFoXDTI1MDMxMTE0MTgwOFowLzEtMCsGA1UEAxMk
MjMyNzE1NDctMDZhNC00MjE4LTkzN2UtMzQ5ZmY2YzcyOTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/99d+hLWXDGoXTdabLwYPrKVQ9n7OpfzBKV
iQ198KQuTFuthm0drQXjrBukd+AKlh0nelV8AYVjIIC0wORuaQySnRMqohmQ4D3p
EX0123+s3P/A/87AUiBZLCGt25jaHCPNBEGgoodsX3CA0jrPeqNefZa7v1imaf7h
dy2f29ScPCHbMiQ3R7yVoKeA43SGnTFL3PHHpLN1UDjIxWXC0fKR755cm6hnpqru
yC/HZUDLX28h/ltEQfW1n9ygiRSn7xwlk40VUj/GssAFxk+9fRv6Vtg8dBvHcr+h
aQYhCq0a3Nx9HRtM5UYJ7PYIpMJBMrdcYTXxmMg84F6nt7baZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ05M78UsqfY7KcS7rzRFLBDPAGwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGNiYzI2ZTMtNWY4Yi0z
N2JkLWEyOTItODI0YjNjZDc1NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADjE6peZ4pp7pMfbvCKzc2LE7O5SnMezWPhmm6KQHV6Tzxj70X4m
yV9J8HVghyUAn7TSm2zoWipDlqaB8n3D/lrEf2DyDBzfnOcddCILXGdWK83S47Kc
q3BjfCoGmQ02f4PxCwTx2sbldZRPl+sviBhydUlw13htSsndmv5OHfq4snHZ1aoJ
D43tqTGxieJqSfxNJ45hPDJGoDVB8Of+h1CdNS0dqf/oVkUpiU/3n7t8ERuMgklK
4IjV7zLvTmEiL7E7tw51164ehOJJHwQXJxdzXAzd2F7eBLmU9RL/Zov0KKriDUVm
eMjYCkHlcW2DG9ULLnZ5Wb4g7bw5r4X5xrw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:26 2025 by rpki-client