Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/db422e8c-f112-3c2e-b43c-26a44c8bcb48.roa
File:                     db422e8c-f112-3c2e-b43c-26a44c8bcb48.roa (raw, json)
Hash identifier:          5mdePtEb5uuU66gD2g5dEFuEOSrjBimf8It3jTs226Q=
Subject key identifier:   EF:F1:B4:DD:64:81:1F:E1:E8:AA:F4:EB:94:00:36:5F:A1:3B:2F:53
Certificate issuer:       /CN=837c453a-673f-4481-b4c4-21ece5899901
Certificate serial:       010D0C9F4328584869605F4595E37F475B642D00
Authority key identifier: 5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/db422e8c-f112-3c2e-b43c-26a44c8bcb48.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     27566
IP address blocks:        2620:a6:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:5f:45:95:e3:7f:47:5b:64:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837c453a-673f-4481-b4c4-21ece5899901
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=59547481-ef95-4b1e-a7c6-84db3e148765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:a5:37:b3:e9:bc:83:e8:c9:30:73:18:2b:
                    2a:c5:43:2c:00:96:4d:3e:80:ab:4d:96:f9:80:b2:
                    2d:c8:b1:fa:2a:c2:20:80:34:77:2f:a8:62:13:4f:
                    07:69:77:ba:14:75:e2:07:c4:66:72:5c:3d:da:82:
                    44:4f:7f:a6:3a:f9:a9:e8:eb:4a:7b:79:83:09:bf:
                    4b:f3:73:f2:5e:1a:47:3a:7b:6d:a4:44:5a:75:d6:
                    ed:3b:8c:06:e3:1e:a3:28:01:14:bd:f2:6d:1b:31:
                    5f:e9:b5:74:12:46:29:83:1f:cb:4e:b5:2e:41:7f:
                    c2:22:43:77:15:d7:3e:cd:7d:7c:c9:e1:74:e4:ff:
                    4d:d7:d5:73:f5:e2:00:46:92:d5:fd:10:13:f3:20:
                    76:03:a0:56:3c:85:cc:13:d9:3a:bd:42:db:d0:bb:
                    51:ac:c0:68:22:a0:92:c6:d1:e0:59:0d:67:13:1d:
                    5a:f4:5c:a9:df:b2:96:91:c4:9d:d9:f1:ae:3b:f4:
                    6a:b0:05:57:fa:e6:55:41:5d:b8:ef:30:a2:14:20:
                    70:1f:35:d1:4b:d5:d1:e2:42:21:69:d1:ed:8e:cc:
                    a6:6a:3d:74:84:3b:5b:85:71:25:d2:68:46:88:47:
                    ac:e3:f8:55:b0:5d:ea:39:81:70:3c:c7:97:02:cf:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F1:B4:DD:64:81:1F:E1:E8:AA:F4:EB:94:00:36:5F:A1:3B:2F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/db422e8c-f112-3c2e-b43c-26a44c8bcb48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.crl

            X509v3 Authority Key Identifier:
                keyid:5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a6:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:5b:56:2f:0f:37:76:45:03:ef:a1:dc:8e:f9:8f:ef:1b:
         23:95:56:cb:04:11:3b:4a:02:7e:6d:b3:b3:63:0b:96:59:fa:
         ec:83:cc:48:33:c3:8f:44:5c:e6:6f:b4:dd:e4:d0:5c:f7:63:
         d3:c0:ec:60:00:ec:9e:db:7a:60:d4:fd:f8:c1:e8:45:09:98:
         64:47:e6:fd:fe:91:c1:e4:81:fd:b5:1d:bc:89:13:bd:ba:71:
         16:a9:af:9c:4e:b5:00:89:d1:7a:be:cb:72:d5:a1:2b:16:ae:
         69:91:e6:bf:49:2e:1c:d9:67:da:47:87:9c:d9:78:c3:46:53:
         15:81:28:59:8c:8d:c3:db:f3:29:ac:f1:15:c9:68:1e:3b:91:
         a0:c4:09:82:16:c5:52:23:f5:ef:8c:a1:5c:94:fe:f6:91:e6:
         ff:a6:39:90:19:97:fb:08:4f:33:4a:6e:fa:93:1c:59:90:b2:
         ad:01:4b:98:b7:ea:25:83:87:0f:77:77:8c:aa:55:4c:61:0e:
         ad:b1:69:fc:dd:66:d8:6c:95:60:fc:d6:65:d1:cd:4c:ce:d5:
         43:8b:81:22:3a:80:3f:45:82:27:13:70:1f:6c:90:66:01:12:
         c8:9d:42:80:ee:53:d2:1b:7f:6a:7a:54:4a:4c:ff:62:df:e4:
         98:43:67:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:57 2025 by rpki-client