Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e1a9a8f-0052-378f-81c3-b97998c15d41.roa
File:                     0e1a9a8f-0052-378f-81c3-b97998c15d41.roa (raw, json)
Hash identifier:          PN9RGb5gKvMZhI3rkTPkFbty2qy8bnFiZgrkfTzgVWg=
Subject key identifier:   6C:BE:08:FB:26:CA:0D:6B:91:AE:01:8E:F5:D8:80:3C:1C:BB:60:86
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F432858488DAB50F4FD39085ADAA6A580
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e1a9a8f-0052-378f-81c3-b97998c15d41.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     7246
IP address blocks:        2620:197:de0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:50:f4:fd:39:08:5a:da:a6:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=7dee02d0-8229-46f7-a3ce-ac1ddbc008fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:74:66:24:66:d4:20:fe:19:4c:1e:9f:65:
                    26:12:62:df:0f:dc:b1:97:ee:23:83:31:de:c3:e1:
                    3a:b4:f8:4f:3f:9a:5b:78:27:d0:62:6c:a9:bb:90:
                    21:2a:dd:91:48:50:e6:80:2d:d8:05:5f:73:7d:5f:
                    23:0d:e6:a6:12:88:92:ca:20:a9:03:53:e6:03:5a:
                    72:b1:9b:9b:dd:69:bc:cb:57:a9:da:16:8e:b6:b1:
                    ee:28:23:b1:33:1e:62:75:eb:46:e3:57:35:0d:a5:
                    90:87:0e:b3:68:61:16:30:e7:55:bc:e0:26:70:8e:
                    5b:f9:32:5b:24:07:07:e8:63:60:dc:0c:e8:6f:14:
                    c0:df:48:86:a3:05:df:e0:77:46:0a:61:d2:e6:f1:
                    01:b7:d9:be:78:1c:9c:d2:24:15:48:79:42:46:b0:
                    cb:47:7f:de:96:d9:c9:ac:c1:90:e7:ab:a8:c4:6f:
                    1f:64:96:53:64:0d:c2:f1:c2:79:f1:bb:0d:19:50:
                    cd:4f:49:50:21:4f:cc:ec:63:35:95:48:0f:37:27:
                    9e:8d:f5:d1:f0:27:77:44:e7:68:11:2d:b1:8c:44:
                    d5:54:ff:4c:ca:46:b6:82:2b:39:bf:1f:9e:9e:6b:
                    d0:a5:67:e0:5a:07:ec:e5:7a:e9:23:37:01:ed:5c:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BE:08:FB:26:CA:0D:6B:91:AE:01:8E:F5:D8:80:3C:1C:BB:60:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e1a9a8f-0052-378f-81c3-b97998c15d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:de0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:92:2c:4f:4b:d8:70:ff:f4:7a:64:ae:83:1d:f2:a9:21:9d:
         aa:46:0e:26:63:44:7b:93:91:f8:45:bd:4c:58:18:5d:a6:23:
         c9:b7:d8:37:bc:7a:6b:3d:04:9b:3f:f8:4c:3c:d2:48:a7:f5:
         56:d6:0a:ff:32:25:f6:31:6a:a2:39:d7:ca:2d:cb:e5:ae:86:
         40:ef:ce:4f:4e:de:9f:9c:0a:29:ba:a2:04:4a:07:76:0d:aa:
         0e:9e:28:8f:9b:25:76:1b:76:57:8c:08:34:a5:10:5a:20:ad:
         91:61:1f:fe:be:ee:f5:51:dc:1d:1d:36:22:ad:75:38:14:9b:
         01:aa:10:84:30:80:35:90:8c:dc:6e:d3:b7:8e:10:08:3b:9d:
         a1:8a:86:12:f7:b8:c1:ff:f2:aa:35:7d:b9:8f:f1:a5:ab:a4:
         98:7e:61:02:c9:92:6f:61:ee:ae:79:9b:71:1b:b4:ee:29:9e:
         eb:17:56:00:8a:ce:50:8a:09:c2:24:20:9a:e0:f7:3e:0e:94:
         12:aa:4b:d6:7a:9e:9e:45:5b:02:61:da:27:a9:3e:3b:14:21:
         0e:44:1e:8f:77:f6:9f:52:9c:71:8c:58:be:8f:c6:f6:ef:38:
         44:49:3e:92:1f:33:99:32:77:ed:6d:fe:84:e8:c6:af:1c:dd:
         ab:f0:1c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:04 2025 by rpki-client