Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1d561a00-294a-3f04-904c-833edc9c6724.roa
File:                     1d561a00-294a-3f04-904c-833edc9c6724.roa (raw, json)
Hash identifier:          MfYR2UiIj/451GOP9nzZejXFtDlq4XlHPbFQi0CXKmE=
Subject key identifier:   53:6E:00:99:9B:CD:C7:B7:28:B5:0B:4D:46:18:14:AF:C4:89:D4:54
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6CB8A58F2EE93A8F0BF80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1d561a00-294a-3f04-904c-833edc9c6724.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     6461
IP address blocks:        2001:4c8:110a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:cb:8a:58:f2:ee:93:a8:f0:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=160bac5d-ea5d-416b-a8e8-f33de21e41eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:78:63:39:94:3c:c1:1d:fb:96:5f:0d:a7:
                    26:1c:c1:29:c5:45:a0:7f:92:45:ec:e1:57:fc:c5:
                    cf:93:9f:83:87:6e:ac:09:fc:c8:22:1c:ef:a0:03:
                    ce:f7:c2:a9:3a:7c:eb:a6:49:55:4a:df:2a:d9:31:
                    01:41:a5:d5:63:60:7b:a7:d6:72:09:55:d7:e6:1e:
                    80:6d:1d:53:a4:4e:5f:10:46:4a:d1:78:28:6c:b6:
                    d7:5f:0f:a1:5b:ea:49:e1:7d:eb:45:5e:da:5f:73:
                    04:ac:a3:5a:b6:dc:1b:57:9b:00:4b:de:0b:61:cf:
                    2b:87:1d:7e:66:d8:a3:45:4e:1c:2b:06:b0:c1:c8:
                    d7:6b:b6:3a:57:7d:ab:ab:16:19:d8:8b:f4:3f:08:
                    8f:5e:cb:e0:0a:c1:36:87:f6:29:bf:5c:4b:ca:b8:
                    c5:80:cc:ee:41:51:da:68:a0:ce:8e:a9:3c:3f:3a:
                    fc:02:1d:e8:1a:67:da:14:05:3a:bc:da:7b:6a:2b:
                    cb:32:4a:ac:9b:70:c8:0f:9c:df:4b:2f:8a:97:f6:
                    bc:82:14:a7:fe:73:4e:b9:93:9d:91:70:2d:44:44:
                    2f:3e:2f:52:40:d2:73:cd:ba:36:94:64:5d:67:76:
                    40:5d:3d:d1:25:13:f5:85:05:88:22:70:9d:72:11:
                    64:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:00:99:9B:CD:C7:B7:28:B5:0B:4D:46:18:14:AF:C4:89:D4:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1d561a00-294a-3f04-904c-833edc9c6724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:110a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:79:80:ab:56:f1:5d:a7:fd:07:d8:17:61:8c:3d:e8:3d:11:
         7e:87:82:bf:1b:e5:57:a8:b5:5f:b3:c5:2c:fc:6a:ae:cd:e3:
         6d:97:b4:0f:d5:db:4f:cd:18:f2:4a:e0:3a:74:fc:14:0f:66:
         55:22:e4:d2:d7:6f:ff:95:22:63:dd:3a:75:90:81:ac:48:39:
         4e:16:c2:ae:14:12:75:da:9e:53:25:f2:5f:8b:04:c4:fb:ab:
         85:79:57:e4:75:82:d5:5f:e4:65:6a:8a:d0:a9:b6:b7:a6:46:
         57:fb:77:2a:a1:d0:48:a9:44:ae:5f:27:f8:6e:e8:38:b8:79:
         0c:1d:2a:47:07:bc:f6:8b:22:de:20:26:92:a8:06:63:7d:32:
         16:04:6c:2b:8f:41:21:d1:57:17:15:f2:6a:46:ca:8c:13:6d:
         b2:f0:02:0f:13:15:90:3f:5f:9a:b2:7a:04:b5:0d:78:9f:c1:
         77:47:f8:7f:d4:29:15:bc:cb:39:4e:71:ae:fe:2b:e5:0d:3a:
         74:b6:17:13:b7:6a:cf:c3:58:5d:8c:4e:47:8a:73:92:d4:28:
         80:8c:6b:96:c8:6b:5a:97:44:31:c9:57:ac:a3:f6:fe:d9:8d:
         d0:b9:1f:e0:12:23:69:31:36:6b:31:6b:e1:3a:94:b2:5b:84:
         ce:2b:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:42 2025 by rpki-client