Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/6916f383-b284-36c3-aef3-63dd6bf3585c.roa
File:                     6916f383-b284-36c3-aef3-63dd6bf3585c.roa (raw, json)
Hash identifier:          TSz07qx7O6+w2CwicUPqsIus6Wj31rrBFUZ+EajWviM=
Subject key identifier:   04:88:93:23:78:ED:E9:7A:0D:E8:9A:F3:1E:AF:12:79:9D:41:27:99
Certificate issuer:       /CN=d61cb32c-9cd6-4665-b0bd-25b06b7df110
Certificate serial:       010D0C9F43285848AF2B81D7F968719BAC805980
Authority key identifier: 4D:74:75:64:E5:D4:D8:70:B1:7E:AA:E9:45:31:A8:CC:2B:67:14:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/6916f383-b284-36c3-aef3-63dd6bf3585c.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2620:a1:4000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:81:d7:f9:68:71:9b:ac:80:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61cb32c-9cd6-4665-b0bd-25b06b7df110
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=2e63c9d4-92a4-4076-b856-73e4f364324e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:23:fb:01:66:eb:8d:e7:79:bf:2d:81:19:
                    01:08:ad:71:b5:67:2e:67:fa:56:c2:dc:22:0e:55:
                    ce:89:0c:2a:bd:4d:c5:91:b5:8e:78:73:a7:e6:11:
                    01:f1:d7:57:53:56:92:67:72:ec:8b:16:68:1a:e7:
                    d6:c3:a2:db:9e:29:0f:9b:22:03:b0:fc:16:ba:dc:
                    e8:1c:93:3f:7b:0a:f2:40:9c:71:34:15:c2:68:ed:
                    7d:27:e7:70:fe:83:0d:2e:50:23:4b:5e:95:26:ab:
                    eb:26:eb:fe:fd:42:bf:51:4e:38:f6:8d:99:f3:19:
                    b7:f4:ea:35:bd:14:13:3e:e5:81:97:71:68:c7:7d:
                    22:a3:99:39:54:d7:20:53:d2:ef:07:77:e7:a9:14:
                    50:5d:79:f5:2e:0a:09:9b:1f:55:08:7b:f8:41:69:
                    87:ab:06:8f:bc:82:46:2c:d1:5c:97:67:8f:0e:af:
                    54:ae:bc:a2:a6:3e:20:1b:ad:a5:0c:cd:1b:88:74:
                    85:c8:b0:65:8d:03:21:95:df:76:03:8e:c9:de:72:
                    8b:02:74:18:c4:d0:0c:b5:08:c6:78:f0:c6:a7:0d:
                    31:eb:ce:be:6b:6c:69:3a:64:02:dd:1d:c4:53:7c:
                    a3:09:41:e7:7b:48:be:47:0e:e5:22:ce:4f:61:f8:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:88:93:23:78:ED:E9:7A:0D:E8:9A:F3:1E:AF:12:79:9D:41:27:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/6916f383-b284-36c3-aef3-63dd6bf3585c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/d61cb32c-9cd6-4665-b0bd-25b06b7df110.crl

            X509v3 Authority Key Identifier:
                keyid:4D:74:75:64:E5:D4:D8:70:B1:7E:AA:E9:45:31:A8:CC:2B:67:14:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a1:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1a:75:82:6a:8f:66:28:7e:c5:57:aa:2b:77:ba:d8:5d:1b:
         49:83:d6:e3:32:55:40:6f:cf:84:3d:aa:8a:2c:a7:ea:4e:17:
         a9:96:cc:15:b4:6d:0b:d8:32:8b:ec:aa:2c:09:3e:26:05:06:
         d6:1d:14:58:2c:06:a8:3c:3e:e2:03:01:33:ea:84:57:f0:b6:
         19:91:0b:e5:89:f9:3b:aa:86:a2:31:90:02:79:7a:98:f0:c5:
         2a:43:8e:6a:d2:11:46:ea:1b:b5:0c:96:3e:c0:4d:6b:80:df:
         db:9e:73:0b:46:a1:5a:81:e2:5c:b6:e7:6a:f6:e9:7b:b2:68:
         b6:9c:68:d6:51:85:47:aa:80:99:6f:50:73:3f:b0:b0:76:b9:
         f3:a5:1d:bc:bf:3f:12:bd:3b:ce:3f:cb:47:e7:1c:02:00:db:
         55:68:6f:b2:f7:d7:47:97:3f:4e:69:dc:ff:bf:4f:10:29:a1:
         1e:1e:c0:1d:82:a6:32:3e:12:19:b0:54:33:71:20:6f:ae:fb:
         9e:cc:e9:c0:26:28:0d:df:47:f7:ec:cd:6d:f4:9e:3b:c3:ab:
         d6:68:b2:21:51:ae:99:61:97:b7:ca:66:e7:1b:8f:79:69:1f:
         f9:8a:e2:34:9b:66:63:b1:67:fe:c9:1c:d8:12:c0:2a:1b:17:
         09:37:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:20:52 2025 by rpki-client