Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/6ceddbe0-a59e-3c94-9e96-08f0396c815b.roa
File:                     6ceddbe0-a59e-3c94-9e96-08f0396c815b.roa (raw, json)
Hash identifier:          mFAzq+TgKAlX6kp9GGFLpYv5xiroyPzpEjeQ6VUyV6c=
Subject key identifier:   9F:3E:94:16:EF:18:82:9C:C7:D4:09:E7:7C:AA:5A:25:64:3B:7C:83
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F43285848B090B13F09AB9D2DD86C5380
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/6ceddbe0-a59e-3c94-9e96-08f0396c815b.roa
Signing time:             Tue 28 Jan 2025 02:00:39 +0000
ROA not before:           Tue 28 Jan 2025 02:00:39 +0000
ROA not after:            Mon 28 Apr 2025 01:00:39 +0000
asID:                     49
IP address blocks:        2610:20:6f96::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b0:90:b1:3f:09:ab:9d:2d:d8:6c:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Jan 28 02:00:39 2025 GMT
            Not After : Apr 28 01:00:39 2025 GMT
        Subject: CN=a1ab8762-ef21-4e30-af22-f222d467470b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:ad:0c:34:12:9e:45:ab:4c:21:5a:c6:92:
                    3b:bf:6c:b5:d4:4a:32:ee:da:cf:83:e4:4e:c7:a6:
                    1c:1e:3c:c3:b4:55:02:28:00:fa:5c:b1:27:3c:12:
                    a0:a0:ac:8c:68:88:85:79:ea:f3:c1:ac:5c:e2:ab:
                    5f:da:11:36:3b:81:6b:bb:82:ca:57:51:66:1a:be:
                    c8:4f:df:53:47:11:45:f9:8d:4b:df:33:59:44:03:
                    62:64:1e:bb:a9:21:e4:32:5e:5d:e9:79:5e:4e:34:
                    ae:a6:55:db:23:bb:01:f3:19:ee:13:bc:36:ab:67:
                    e6:1b:f0:f4:90:33:46:e1:77:ab:e9:10:3b:d2:d0:
                    6b:51:dd:6c:f3:44:81:68:90:3f:1e:de:c6:be:e3:
                    e4:72:b9:39:b0:a0:61:53:a3:2c:88:86:be:0a:d2:
                    66:a2:2a:58:ac:19:d5:a5:9c:bd:f1:9b:f1:61:4f:
                    ba:0e:b1:65:56:1c:37:a7:e2:dc:c2:0b:e8:c7:17:
                    b2:a7:4e:99:4d:8d:b2:6e:73:54:aa:38:62:0c:85:
                    44:4c:37:35:c4:73:04:a1:82:bc:2e:54:0a:56:02:
                    ba:b0:96:0e:9f:54:53:19:53:aa:14:78:cd:5c:ac:
                    3a:7f:e4:db:98:46:8d:6d:7b:81:fc:32:82:9a:18:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3E:94:16:EF:18:82:9C:C7:D4:09:E7:7C:AA:5A:25:64:3B:7C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/6ceddbe0-a59e-3c94-9e96-08f0396c815b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6f96::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4a:a2:7d:ba:22:64:65:00:f3:2c:e6:79:4b:94:15:98:95:
         74:f9:5a:b6:d3:80:1c:1d:f6:b1:54:60:9b:46:4d:66:a1:73:
         c0:20:e5:0a:ff:46:fa:44:e8:94:7d:80:9c:1d:fe:27:1f:31:
         a3:fe:29:f5:40:0f:2d:f3:73:dd:ff:55:f3:cb:de:40:95:43:
         e5:ed:4d:d0:9a:f0:e0:1b:cc:6b:43:63:e3:e3:b9:0e:c1:91:
         ea:ad:10:16:fa:9c:9c:96:38:63:a2:ee:30:c2:da:ea:08:00:
         57:2f:2f:be:c3:ef:53:ab:ca:4a:ed:e1:29:6a:04:21:5e:71:
         a5:c3:37:05:ad:7e:54:a4:c4:83:a0:aa:d3:b7:7e:02:b9:51:
         a1:88:3d:76:ff:70:0d:a4:98:55:09:29:74:12:36:e9:60:91:
         55:e4:e3:1a:8e:ad:7a:48:6f:cd:58:91:f3:fe:78:5d:79:df:
         69:36:e7:d1:29:d1:55:d7:e8:bd:8f:52:48:25:b1:9d:ac:d4:
         4b:4e:66:01:6a:e0:20:82:f7:78:02:e1:f8:a0:fe:b9:d6:4f:
         81:b1:13:83:e8:53:6f:11:cd:16:13:97:8b:b5:ba:7a:91:39:
         53:82:b6:58:0f:1a:93:ad:44:64:f8:3c:59:a8:48:8d:d8:dd:
         30:c9:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:19 2025 by rpki-client