Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa
File:                     a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa (raw, json)
Hash identifier:          4tvfy7wdgrDlkFOrt8jobSc5txpBgNG1VI1HXxVQWiA=
Subject key identifier:   4D:C1:26:12:7E:88:F9:82:BA:BB:FB:90:5B:A5:31:33:6A:0F:F3:AD
Certificate issuer:       /CN=bac49063-78ed-4cca-a152-73b0c601c1bb
Certificate serial:       010D0C9F43285849244E8108304F3145C0941180
Authority key identifier: B6:E1:DA:35:C9:CA:68:3E:39:F5:CF:67:64:78:89:DB:A5:A4:47:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     54058
IP address blocks:        2620:cb:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:81:08:30:4f:31:45:c0:94:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac49063-78ed-4cca-a152-73b0c601c1bb
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=02e79d62-2b38-468c-a6a9-09f462f20c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:32:01:e4:11:d7:b5:68:1e:8f:d5:23:4d:
                    46:6b:82:bc:76:d3:0e:88:0c:15:39:e4:73:57:0a:
                    94:59:74:ee:da:4e:13:61:e4:d7:44:32:26:b5:dc:
                    72:74:d5:6a:53:e8:7e:3b:a6:67:3a:12:b7:fa:a9:
                    71:6a:8e:b4:d4:b2:e9:1a:06:74:7a:b1:98:4f:cb:
                    c7:5b:6c:17:8d:58:d4:18:c5:1f:b3:7a:e1:a3:ed:
                    93:d2:3e:e6:14:59:9a:95:10:3f:22:69:1c:70:d1:
                    cb:58:a6:10:ab:21:88:ee:32:4c:23:c8:f0:1d:2d:
                    25:ef:14:52:f3:b6:7c:a8:6c:b1:fb:3f:b1:cc:4a:
                    9a:5d:09:3b:bd:ef:33:3b:d4:17:a8:8c:ec:a0:e9:
                    6c:d5:96:50:aa:51:58:3a:85:dc:2c:89:0b:17:62:
                    1f:5c:ba:af:a6:ac:11:ec:10:7d:e4:63:96:ec:de:
                    7d:d8:82:25:5a:ec:d9:2b:92:71:71:f9:bc:5b:29:
                    dd:7d:59:c5:ba:41:16:3d:f5:4e:d5:2a:99:df:22:
                    46:d5:6d:ca:6f:0c:53:b8:5b:89:d2:fd:8e:b1:69:
                    7c:c1:d6:b3:a2:c0:eb:ae:3e:d0:72:2e:4f:47:54:
                    18:10:6a:50:5e:0a:12:da:a4:60:51:a5:65:23:53:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C1:26:12:7E:88:F9:82:BA:BB:FB:90:5B:A5:31:33:6A:0F:F3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.crl

            X509v3 Authority Key Identifier:
                keyid:B6:E1:DA:35:C9:CA:68:3E:39:F5:CF:67:64:78:89:DB:A5:A4:47:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:cb:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7a:17:8a:ab:90:4f:42:6a:0a:ab:1a:9a:fb:e9:95:52:e4:
         cf:59:39:af:e8:c3:f7:45:59:dc:d1:46:6d:7e:c5:3b:8b:f2:
         44:da:9c:88:d3:9b:0a:83:82:cd:c5:d0:9e:66:b4:43:c0:b4:
         c5:7f:c7:f5:15:4e:c3:b8:a4:94:f1:e6:af:06:c4:b8:39:81:
         6c:66:a9:cc:82:01:3f:ef:d8:07:8e:73:4d:01:16:6b:87:ff:
         36:a8:3b:eb:c4:ab:df:04:b3:ca:c1:f1:22:a0:6b:38:23:e9:
         bc:70:ae:43:c5:5a:0c:6b:32:ac:df:f7:2c:5c:3d:64:9a:4d:
         a8:14:d5:80:af:2b:c0:9a:e8:65:32:75:ef:4b:51:47:f4:e9:
         b0:9b:88:ee:52:98:28:c6:a2:28:bc:8d:8e:82:ff:c7:06:d1:
         aa:d2:25:9a:46:7a:cc:fa:c0:ad:9c:fb:92:a8:7c:05:80:e2:
         1e:23:35:e5:bd:eb:d8:33:80:e4:2e:98:5f:29:13:23:73:72:
         3b:a9:03:e6:12:92:39:80:05:04:86:3e:6c:ad:8c:df:e9:1b:
         35:c4:08:3d:0f:2b:27:d7:27:34:72:8c:62:ef:fb:c4:23:d5:
         28:d9:ce:eb:62:8e:5b:d3:b6:de:f8:73:90:fb:bb:31:aa:65:
         28:7a:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:55:35 2025 by rpki-client