Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/e966e1b8-a436-3198-8dd3-e5ac9b211c33.roa
File:                     e966e1b8-a436-3198-8dd3-e5ac9b211c33.roa (raw, json)
Hash identifier:          dV2ia7rD3wlDZtzfXYAid0Up9LXuIf2/ruVeSwiBX7Y=
Subject key identifier:   12:AD:E5:48:42:75:C5:AA:44:1E:B9:3F:89:09:EC:FF:51:E4:5C:F3
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F432858488AE09AA51489059E8B57F400
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/e966e1b8-a436-3198-8dd3-e5ac9b211c33.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     40793
IP address blocks:        2620:109:c003::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:9a:a5:14:89:05:9e:8b:57:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=7caad21c-931a-4b75-849d-2c1b1a3fb1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:84:a9:cf:e6:0f:e5:cb:95:11:31:70:4c:ee:
                    36:86:1a:41:08:5c:98:ea:52:58:34:e6:00:1b:10:
                    db:08:6b:7d:e4:51:6e:ed:a3:9c:7d:21:df:36:d8:
                    09:5f:74:d3:93:a9:cd:80:ec:95:a8:df:da:ab:0d:
                    21:44:d2:be:ed:b8:e8:fe:28:f0:16:df:ba:11:9f:
                    45:04:05:c6:d1:72:c3:eb:2f:09:fb:87:4e:5f:c1:
                    6e:5d:ff:a3:9b:5e:f2:3b:4c:2e:1c:20:e6:c8:5f:
                    68:01:6a:0e:8f:24:b4:99:80:80:9b:a9:36:c7:83:
                    38:1f:a8:ff:06:6f:5d:5a:32:e3:9c:f2:fd:39:84:
                    a7:fa:43:d3:05:b9:9f:8b:73:90:09:58:06:77:14:
                    4e:25:91:18:7c:cd:12:6e:a7:61:6b:71:b9:7f:76:
                    02:f6:33:03:91:29:3c:94:6e:02:80:d5:09:3d:e8:
                    db:b7:27:e8:c5:e0:8c:1e:52:4d:11:39:8b:2e:8e:
                    81:44:5b:b9:5b:9d:86:81:4f:8e:43:fd:78:4c:59:
                    a0:61:2a:93:ad:9e:92:df:69:96:ab:4a:e9:af:f1:
                    26:d9:ca:e5:99:d4:c2:2e:8d:5e:e8:16:12:50:6a:
                    9d:7f:d4:aa:61:84:a1:a9:f1:e1:04:e0:61:fb:78:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AD:E5:48:42:75:C5:AA:44:1E:B9:3F:89:09:EC:FF:51:E4:5C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/e966e1b8-a436-3198-8dd3-e5ac9b211c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:c003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f0:79:13:59:76:57:9d:55:46:9c:ce:fc:b3:62:97:c1:db:
         dd:fa:ab:0d:50:52:67:9d:a7:28:07:8a:ed:e0:19:91:ac:72:
         e5:ec:b8:3c:cd:71:4d:31:6f:a1:2b:98:48:54:57:ed:2a:35:
         7e:2d:b9:36:e3:e2:c3:8e:f9:5b:a8:f5:83:2d:8b:77:b2:eb:
         23:5a:f6:df:7e:13:76:e6:5e:0b:fa:fb:7c:a9:1a:97:7a:45:
         35:11:2f:b7:93:76:ff:1e:d1:b2:a5:68:fc:50:44:cf:dd:95:
         46:d5:8e:85:dd:20:9d:25:43:2b:74:b8:4a:c4:44:b0:63:c0:
         9f:ea:00:38:69:cc:32:0e:3f:d0:14:14:1f:0f:3f:ba:42:8d:
         ae:4f:10:59:ee:97:bc:5e:60:00:8a:dd:d1:af:09:f5:96:66:
         d6:72:3d:6e:a1:9c:94:f0:96:ff:27:74:e8:7d:c2:fc:71:87:
         dd:b6:5d:1f:71:7d:26:23:23:25:05:2c:17:d6:57:a8:19:f4:
         a8:19:ec:91:db:18:0c:82:92:03:7a:b2:e7:0b:f8:a9:82:79:
         ce:c0:e3:9a:5a:26:68:a1:b2:9a:b3:13:e0:e9:8d:db:be:b0:
         2c:b6:44:f8:da:7d:03:43:be:b9:b0:ec:ef:47:01:00:85:08:
         da:84:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:04:00 2025 by rpki-client