Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/653cf7a9-8a62-3685-a081-fd6b556aa528.roa
File:                     653cf7a9-8a62-3685-a081-fd6b556aa528.roa (raw, json)
Hash identifier:          CtC2JGEzJHvVtGQNfeYkUovykWnOUjpIHAFDb7hH0xg=
Subject key identifier:   CC:B0:72:F9:32:10:D7:7B:41:EC:87:7B:A8:7B:3C:8A:30:0B:3B:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B8729B9C1158C69961900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/653cf7a9-8a62-3685-a081-fd6b556aa528.roa
Signing time:             Wed 11 Dec 2024 15:17:55 +0000
ROA not before:           Wed 11 Dec 2024 15:17:55 +0000
ROA not after:            Tue 11 Mar 2025 14:17:55 +0000
asID:                     36631
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:87:29:b9:c1:15:8c:69:96:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:55 2024 GMT
            Not After : Mar 11 14:17:55 2025 GMT
        Subject: CN=96bba0e5-85ed-4f14-8d56-c1368805c6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:aa:0c:7f:81:d0:f1:b3:64:77:ea:a8:24:
                    f2:1a:75:8d:61:3f:a9:a0:57:cf:25:9e:66:9b:c8:
                    8f:18:cb:c8:04:78:e4:20:a6:f5:7e:06:61:51:b5:
                    5d:e5:41:5e:10:ff:eb:f4:65:06:c4:f8:94:d9:3e:
                    b1:4e:c6:4c:1c:35:4a:ba:b4:5d:ff:e5:43:c5:c4:
                    5d:43:56:54:93:00:b4:59:7f:9c:e5:74:31:81:40:
                    4f:6e:44:14:8e:ba:5d:a7:e3:72:3f:b9:3c:38:72:
                    98:aa:fa:56:90:0b:f3:ba:d6:90:d4:d1:df:cb:4f:
                    b8:7b:07:18:06:21:86:ee:7f:36:9a:eb:e5:89:51:
                    8f:04:33:dc:61:86:24:48:73:d2:f5:c2:2a:94:db:
                    6e:f9:42:22:dc:a0:1c:57:b1:b2:1b:e9:c2:d6:9c:
                    1f:c0:2c:90:48:8a:f8:86:0d:91:fa:55:01:86:e9:
                    fe:54:25:af:04:ee:79:5c:7e:87:0c:24:da:b9:2d:
                    c9:a2:ea:52:67:c7:a1:66:7c:c5:5c:f9:3c:fc:f4:
                    aa:33:e8:7f:0c:c7:91:8c:f9:a7:d4:1d:56:5d:43:
                    3e:3b:e1:ce:15:92:5b:9b:81:4e:0d:18:94:fa:fa:
                    09:ed:97:37:0a:54:ab:e4:3c:0e:56:59:46:24:6e:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B0:72:F9:32:10:D7:7B:41:EC:87:7B:A8:7B:3C:8A:30:0B:3B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/653cf7a9-8a62-3685-a081-fd6b556aa528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:00:fc:38:38:1b:a8:1b:8a:45:d0:a8:ec:a8:f7:41:c4:39:
         41:c6:92:ce:aa:7a:93:00:45:17:35:61:c2:75:50:00:9a:36:
         61:30:f4:1e:a1:e0:23:09:64:a2:82:4c:fa:b7:00:1d:6e:fb:
         b5:d2:c3:32:60:eb:ac:9e:19:b4:55:43:05:b3:ae:22:53:d7:
         05:15:99:c1:6f:89:1c:ea:5b:b7:00:47:66:32:a1:36:1c:bf:
         cd:47:5f:37:f0:e2:74:81:aa:8a:bc:02:a6:24:41:3e:71:6f:
         77:b0:09:85:2b:94:41:b3:88:0a:79:24:42:72:13:d2:9e:b5:
         78:05:5e:07:09:3d:8c:33:49:e8:6a:9d:54:dc:82:58:2e:69:
         4b:e6:90:81:1f:d7:3f:fa:ea:74:1b:fe:f0:87:ef:20:da:8d:
         25:61:35:3a:b6:1d:8f:a8:ca:e6:b1:8a:c7:20:63:c3:35:ff:
         da:2d:24:47:45:df:0e:83:3c:49:dc:4d:72:fc:4e:ef:6d:99:
         95:52:65:64:87:53:f0:b9:7f:45:49:26:71:cd:0c:f2:dc:6e:
         4d:2a:e0:8c:d1:ec:1e:46:c7:9c:c6:36:c9:a7:35:27:4e:3c:
         0e:34:17:47:10:c9:ed:9b:e0:9d:9d:44:e7:4b:54:11:34:cb:
         9e:41:28:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:05 2025 by rpki-client