Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa
File:                     10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa (raw, json)
Hash identifier:          h33pUwXg9HDOFI/4/NDBc8VcE5eGDAWKabA7b0pzYdY=
Subject key identifier:   6F:84:BB:8C:03:FE:E6:1E:26:EF:AF:A8:95:59:11:5B:15:6E:18:0B
Certificate issuer:       /CN=e20283c0-db21-4d92-ac23-4da5857d3bfd
Certificate serial:       010D0C9F43285849350E91FBFF1755B1A0E51200
Authority key identifier: 26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     11260
IP address blocks:        2604:1ec0::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:91:fb:ff:17:55:b1:a0:e5:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20283c0-db21-4d92-ac23-4da5857d3bfd
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=aca8ba07-e51e-48bc-87a6-f0416f9ed123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e8:f5:e0:83:3b:42:c0:40:ac:41:e0:03:57:
                    1c:56:55:08:e4:97:9a:27:f1:a0:18:56:0c:cc:6a:
                    d6:6a:2f:60:b5:c8:5e:30:c9:0d:7b:44:51:8e:a9:
                    08:cb:43:1f:0e:45:8d:57:42:ee:8c:f7:c7:37:12:
                    e3:78:59:d0:12:66:88:a3:55:9f:c4:ad:84:af:5c:
                    f1:30:fc:17:03:d2:9b:8c:e0:18:9a:de:9a:45:58:
                    40:09:4d:24:7d:6a:3b:ef:ef:f9:c4:9b:5b:42:76:
                    81:48:8e:f3:f5:56:74:0f:2f:c6:eb:d9:fc:96:ba:
                    c3:59:3c:8f:d7:59:07:8f:21:c5:06:cc:a5:fd:50:
                    6c:2d:e9:36:1f:f7:54:b8:65:cb:5e:e5:78:bd:7a:
                    ee:25:c4:46:fc:28:b0:e0:8c:f0:cc:0f:d4:02:73:
                    ac:7b:2e:03:aa:98:47:ee:15:71:22:71:ed:9a:6e:
                    67:42:1f:39:93:09:08:ce:04:8a:25:c6:f2:d9:a5:
                    b3:fb:aa:25:9a:79:f3:1c:a7:35:4c:5c:ae:d1:af:
                    dd:0f:bd:29:d5:ed:12:63:92:61:19:4a:62:00:98:
                    f9:1c:41:c4:8f:c7:a2:88:f9:dc:ca:9f:a7:98:2e:
                    a1:cc:d9:3f:b4:69:83:4e:6a:6f:3d:d8:83:80:51:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:84:BB:8C:03:FE:E6:1E:26:EF:AF:A8:95:59:11:5B:15:6E:18:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.crl

            X509v3 Authority Key Identifier:
                keyid:26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1ec0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:99:b3:f3:50:21:f8:0b:5e:08:3e:89:dd:21:a0:66:b4:95:
         fd:d2:62:cb:b5:da:fa:20:1d:54:17:11:02:0d:01:12:0e:bf:
         6c:50:da:fa:ef:4d:23:3f:9f:4a:31:23:f4:f9:03:d9:fd:ad:
         5b:dc:c5:b0:8b:de:52:50:58:d7:50:70:fa:d9:26:25:30:9d:
         02:63:da:3e:78:fa:5a:da:5a:2c:03:7a:98:8a:55:bf:71:bf:
         d6:cd:c7:88:e4:09:c6:f3:66:00:01:0b:c9:dc:dc:ff:d6:f1:
         bd:0d:4d:f4:5e:05:b1:3d:58:b7:df:83:bc:2d:d1:2d:46:4b:
         bd:5a:bf:b6:bb:7d:57:e0:06:32:f8:2c:15:b1:54:a0:b8:54:
         49:64:e6:d8:d7:82:5d:96:f9:d2:46:cc:50:00:76:83:18:76:
         a4:21:3e:00:ab:d3:d9:94:8d:df:ed:70:8c:6b:be:2f:c7:1c:
         cd:ed:fa:b5:77:12:31:70:56:92:9b:77:2f:c2:a2:35:da:db:
         ea:a0:68:1f:3e:42:29:6b:03:3d:09:e9:8b:7f:91:96:06:e5:
         96:4e:da:35:62:5b:41:60:75:4f:f8:39:a1:83:1c:cf:7a:01:
         5c:15:93:7f:3f:ac:f3:1a:1c:9b:70:44:a0:2e:63:eb:da:29:
         4b:02:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:18:44 2025 by rpki-client