Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/db07585b-020b-33f3-a0f7-688ba5615a1b.roa
File:                     db07585b-020b-33f3-a0f7-688ba5615a1b.roa (raw, json)
Hash identifier:          X8xZrHElLgUltaSBWlYPDmPCBJ5fvUYo5TwjohnyNrI=
Subject key identifier:   F6:FC:9B:A5:7E:BE:89:88:35:22:36:1F:E7:43:F5:62:B7:2E:A3:3E
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F4328584940397A2D4482DFE2A5466600
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/db07585b-020b-33f3-a0f7-688ba5615a1b.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        2620:121:5040::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7a:2d:44:82:df:e2:a5:46:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=5c7778c5-91ff-434c-8c32-b4c98d062ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:a1:e7:b0:2c:90:7f:b9:db:ac:74:5c:8d:
                    50:41:5c:42:a8:60:55:e2:de:e9:16:69:5b:78:89:
                    59:2d:61:c0:f8:26:fb:0b:d3:70:22:0e:e0:de:82:
                    f6:81:92:cd:ab:44:28:73:41:1a:47:71:c8:9d:82:
                    72:19:ca:67:61:0d:7a:83:4a:01:5f:79:06:04:8d:
                    c7:30:dc:13:1c:91:68:d8:90:9e:fb:40:d1:0e:b0:
                    f0:61:48:2d:a4:0a:da:14:0a:5a:7c:a3:2c:a4:b7:
                    4b:c2:b9:c7:c5:d9:2c:bd:55:17:dc:b1:59:43:cf:
                    92:f2:bd:c5:af:52:57:1d:d1:87:e4:43:29:06:79:
                    50:9a:78:ac:9d:83:81:54:d8:c4:d9:51:11:1a:ee:
                    1c:ca:67:f0:12:03:36:fb:cf:07:11:40:0d:7d:db:
                    4f:a2:50:3c:db:8f:78:f8:66:23:46:71:ea:f2:c0:
                    8b:e3:e4:27:b3:2d:29:9d:9e:b9:d7:49:22:cc:e6:
                    29:3f:2d:51:a8:96:4f:2e:5f:e8:a1:14:ff:23:af:
                    e7:8c:d9:e5:fc:41:f6:c6:cf:b4:7e:7e:1d:58:34:
                    01:d4:f0:6b:d1:ed:44:8f:d7:62:76:c0:96:92:04:
                    68:49:0b:b7:df:23:44:f9:59:9a:27:87:69:a2:95:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FC:9B:A5:7E:BE:89:88:35:22:36:1F:E7:43:F5:62:B7:2E:A3:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/db07585b-020b-33f3-a0f7-688ba5615a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:58:12:70:47:9c:f6:a6:91:c3:e5:b2:11:3e:bb:80:98:44:
         c8:14:aa:86:af:89:26:d4:04:0f:08:48:6e:14:7d:77:0f:6b:
         35:88:6b:df:3a:d2:f5:f3:3f:33:54:c9:09:3f:e0:b7:e9:54:
         7e:3f:31:fb:b3:b7:b6:06:23:ca:8f:b2:76:d5:da:0d:64:3e:
         53:5b:3f:ea:d4:6d:8d:90:ac:e5:2c:f1:fa:f4:d9:67:ca:7c:
         85:f7:b0:86:0c:74:7a:00:f5:51:66:39:cb:9a:96:b2:4b:ba:
         9c:38:ad:86:b4:c6:e8:7b:6c:73:03:16:37:2d:00:ae:2a:b7:
         e0:a9:1a:6f:3a:0a:db:71:bd:b7:cb:4b:93:c6:27:ef:82:91:
         70:73:6e:ee:b0:d7:be:6f:f0:92:e6:8b:5c:bf:91:71:84:61:
         99:8a:09:99:8a:92:37:c7:68:5d:ba:32:5e:46:75:78:45:03:
         42:87:48:5f:fa:2e:bf:c4:8e:c8:06:76:c5:26:d0:a0:91:6b:
         7a:72:ad:44:05:a9:30:79:a0:bb:3f:1b:a6:00:3e:7b:84:53:
         c2:ed:8d:64:28:bf:42:c0:c1:44:99:5b:52:64:fe:f9:e1:46:
         6b:d6:b3:ec:ec:62:f1:a4:6b:52:41:96:89:e3:61:72:70:61:
         d5:39:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:51 2025 by rpki-client