Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/917f0ce4-b626-3b77-ba56-568f0c5348f1.roa
File:                     917f0ce4-b626-3b77-ba56-568f0c5348f1.roa (raw, json)
Hash identifier:          XfzNHpnYT0nrmURHJJ/NNpFXRS64bsioh2aDstxYxew=
Subject key identifier:   1C:86:D6:10:F0:DA:08:B8:F5:F2:07:AF:88:F9:77:9A:7F:60:95:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73F4EB708BF5678E694F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/917f0ce4-b626-3b77-ba56-568f0c5348f1.roa
Signing time:             Fri 29 Nov 2024 13:58:37 +0000
ROA not before:           Fri 29 Nov 2024 13:58:37 +0000
ROA not after:            Thu 27 Feb 2025 13:58:37 +0000
asID:                     36626
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:f4:eb:70:8b:f5:67:8e:69:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:37 2024 GMT
            Not After : Feb 27 13:58:37 2025 GMT
        Subject: CN=bdb0b107-e10b-470f-be8b-fe18c6601348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:45:6e:04:13:cd:ef:7b:f4:6d:e8:be:02:
                    80:51:a1:49:f6:d0:bd:bd:f4:df:82:71:36:eb:0a:
                    c5:19:d3:5d:ea:d5:99:b1:2c:63:08:95:e8:b7:be:
                    d8:1a:63:c4:cc:1f:3d:3b:f8:02:cf:c8:88:10:69:
                    3d:9e:56:70:3e:7a:10:b7:93:de:4d:f4:c3:1c:ce:
                    5a:56:5f:1a:8e:eb:a7:a5:e7:83:75:3a:35:71:3e:
                    7d:e6:de:1d:4c:f3:a2:80:9b:0f:5e:1d:46:49:d4:
                    33:ae:5a:20:d8:54:49:d4:40:35:74:6b:0c:30:83:
                    cf:7c:e6:01:f6:0f:f6:f9:81:7b:35:09:67:9c:2c:
                    00:1d:5a:25:ea:f3:fb:d8:2e:10:0f:62:f9:6d:63:
                    9e:23:69:0c:6b:f7:d0:cd:b5:6c:63:5b:59:8c:9c:
                    fb:6b:4f:f6:70:a7:cf:61:82:84:b8:99:f6:1c:5d:
                    be:8d:03:fa:b0:ed:74:ce:01:1c:71:e1:d1:d5:1f:
                    52:88:30:d1:3c:d9:59:57:94:c2:5d:da:ad:cd:83:
                    a6:3f:6c:db:d9:bc:a4:dc:a7:80:18:e0:8e:69:7f:
                    1a:36:74:9d:2a:5a:1d:a5:84:b5:19:32:7b:2b:96:
                    bb:a1:aa:46:26:a6:9e:05:e9:d0:3f:ad:b3:97:72:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:86:D6:10:F0:DA:08:B8:F5:F2:07:AF:88:F9:77:9A:7F:60:95:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/917f0ce4-b626-3b77-ba56-568f0c5348f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:01:ee:78:09:e7:40:16:4b:a5:33:89:01:22:7e:3c:72:b3:
         03:b9:eb:9f:ad:db:e4:6f:d2:b4:05:16:c2:4c:28:05:d9:8e:
         e3:6b:e0:50:9b:44:25:cd:7f:d5:60:16:65:18:38:07:d1:43:
         2d:44:c4:02:1c:90:df:cd:66:c6:2d:44:a7:f1:c5:b2:d8:ef:
         1f:c3:c6:a3:f6:d9:f8:b3:5f:72:4a:70:91:ee:04:d1:ce:09:
         4f:9c:7a:ef:82:0e:20:32:69:b9:0f:e8:fa:07:c9:6c:c1:11:
         aa:c5:88:0e:46:fa:9d:8b:3d:1e:48:d8:00:49:e3:96:68:7b:
         b7:df:cc:8a:b7:7e:ce:3d:d8:b5:f7:d7:a0:02:b2:57:6e:52:
         9b:48:48:84:c6:52:6d:7e:98:98:2a:93:44:73:55:a3:6d:07:
         fd:e0:4d:78:d0:23:0a:d4:59:4b:48:5e:2e:54:78:52:ac:96:
         ec:c5:ee:b2:e6:92:0b:3a:fd:9b:48:18:fc:33:77:cf:9e:3c:
         c1:e7:e5:11:a2:a6:d2:8e:b5:67:88:d7:60:52:e2:f1:e2:59:
         d5:81:c2:08:7d:6b:a4:41:1c:b9:a0:b7:b2:fe:c8:05:ff:e0:
         37:66:31:1a:b1:48:51:8b:4a:4f:b7:7d:d4:93:ef:00:bf:81:
         10:00:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:48 2025 by rpki-client