Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1af2873-1ba9-31bf-9b95-8c8383cfb8a0.roa
File:                     f1af2873-1ba9-31bf-9b95-8c8383cfb8a0.roa (raw, json)
Hash identifier:          IYoe2ZVyFK9OKEt0aONYvs14eE6ekrhpAmSFCiesU+k=
Subject key identifier:   35:E1:7B:B7:D6:53:17:F4:46:98:D9:84:BF:7B:02:57:A5:52:11:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB15E8B87D89D8446687A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1af2873-1ba9-31bf-9b95-8c8383cfb8a0.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396543
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:5e:8b:87:d8:9d:84:46:68:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=40551b15-fb55-4e75-9e3f-fa01f19f93b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:4d:ed:80:7b:22:a4:44:53:68:4f:d4:e5:
                    65:51:20:87:3e:31:4a:fc:a9:a7:65:fd:66:ab:a0:
                    66:f6:4b:ed:45:c4:51:60:f4:bd:ed:33:bd:9c:cc:
                    55:7e:a7:5b:94:d2:7b:65:be:53:02:79:6b:e8:7f:
                    3f:35:26:48:0e:1b:89:78:54:11:ad:1f:b5:1b:89:
                    8a:75:64:57:6c:41:70:3a:76:79:f1:39:d2:07:34:
                    dd:b5:8d:b4:c3:95:5f:d0:d9:a6:06:9f:e3:30:af:
                    8b:19:fd:cb:c9:ac:2b:0d:da:72:12:2d:4f:13:59:
                    e0:a9:ae:03:97:de:56:be:f1:12:ab:6b:5a:33:6d:
                    d8:65:01:e1:96:69:33:b7:5c:5a:b8:9f:0f:78:a6:
                    c8:74:e6:e9:c2:29:fd:50:07:c8:df:bb:d7:72:25:
                    b3:11:98:18:30:e4:10:90:ab:99:2d:c2:ec:d9:dc:
                    45:dc:b0:a0:1f:f4:94:e9:d9:ac:34:ff:8e:e7:97:
                    b9:fc:38:17:df:1a:b6:80:1b:ab:ab:51:1e:6e:ad:
                    cc:7c:00:f9:95:ed:9d:c6:ff:b3:cf:3e:37:93:f1:
                    80:b1:b3:ee:0b:6e:4c:70:93:e3:a2:3b:39:e0:de:
                    76:2a:a7:f8:85:e1:6c:c2:95:ff:05:1a:49:ae:d5:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E1:7B:B7:D6:53:17:F4:46:98:D9:84:BF:7B:02:57:A5:52:11:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1af2873-1ba9-31bf-9b95-8c8383cfb8a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:bc:bf:56:17:d8:4d:56:09:f7:f0:2c:0c:ee:5e:3c:76:c7:
         32:40:58:b0:59:fc:20:fc:7f:63:a3:11:09:97:62:ae:66:d1:
         06:33:c3:6d:70:05:ca:af:f1:45:5f:6d:b0:61:33:88:33:08:
         14:6c:8e:f3:e1:4b:35:6f:8a:e3:db:61:5d:0d:f3:2f:73:68:
         36:33:80:22:95:9b:99:7a:cb:ba:18:3d:93:b6:24:19:06:31:
         ee:84:35:6e:d8:fb:c3:43:65:66:99:57:9a:6a:be:a2:51:80:
         1a:b2:96:41:e5:0f:4f:53:0e:c1:34:0f:97:29:74:11:13:a7:
         d1:5e:14:df:3a:f2:fa:2f:78:9d:ac:f4:39:9b:a8:58:91:e2:
         18:a1:a7:a8:18:64:8d:c7:7d:45:cc:27:5c:12:33:3a:93:14:
         d1:96:c5:fe:75:ce:9b:f9:21:36:6b:e2:03:f3:8a:37:b1:54:
         35:67:2b:18:83:4c:1a:bc:85:f6:5d:fe:6d:77:bd:03:4e:77:
         fc:39:69:ea:3c:4b:97:4c:ed:3e:5a:e6:b0:d2:f5:80:3e:42:
         21:32:4b:3c:17:63:8e:3e:fc:7b:d5:02:1d:6c:fa:6c:bf:1e:
         7e:01:1f:37:8e:24:78:d3:cf:a2:65:87:79:ef:03:6f:91:e9:
         08:cc:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:04 2025 by rpki-client