Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1d978fb0-4997-3482-a154-82257478e02d.roa
File:                     1d978fb0-4997-3482-a154-82257478e02d.roa (raw, json)
Hash identifier:          Sr9ANgfOcvbG4m9h9csD+EQ2Ai0oeIKyXCJGoPAzDRI=
Subject key identifier:   37:B8:27:C3:38:51:8C:CA:A3:7C:65:C7:F7:F1:E8:4B:1A:30:BE:AA
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F43285848A29B4DAC8D9ACA3E71C4C280
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1d978fb0-4997-3482-a154-82257478e02d.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     396982
IP address blocks:        2620:1b2:bd::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:4d:ac:8d:9a:ca:3e:71:c4:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=8dacdbdb-e554-4d85-8443-dcc718b8c584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:60:7d:00:2e:27:9d:77:6a:e1:db:b6:25:
                    db:62:d9:72:41:a8:72:b0:d4:9b:2a:d6:eb:c3:16:
                    a8:18:19:8d:b7:42:7e:8f:c3:9a:36:2a:ae:95:63:
                    97:59:bd:a2:e8:87:f1:0b:c3:86:9a:f7:76:46:8f:
                    8b:ce:5d:bd:58:8a:73:6b:f2:f8:47:ad:97:3c:44:
                    1e:34:5b:05:69:48:41:8d:24:c3:43:0f:4e:e8:8f:
                    ed:f4:d2:fd:e4:76:d1:e9:e8:b6:17:e6:bb:b9:95:
                    bf:be:1c:dd:44:e4:b5:8e:9c:c1:ec:9e:05:b4:be:
                    47:b6:fa:d8:89:e6:24:16:0a:98:9b:6b:d6:52:f7:
                    34:23:64:b9:bf:21:d9:3e:2e:7b:f3:30:5d:c6:2f:
                    34:14:ec:bd:f4:1d:3b:0f:ab:2f:32:1e:81:d7:02:
                    b2:fd:2b:82:be:45:f0:d5:31:26:9b:28:65:8d:cb:
                    f2:34:72:c3:c0:43:10:ab:f0:49:8f:e5:fb:b6:03:
                    dd:de:e1:62:9e:a5:58:38:9e:6e:e2:51:11:14:a1:
                    a9:0f:51:a7:4f:4e:54:a4:f1:9b:47:e1:60:41:72:
                    ef:c5:3c:57:4f:76:47:32:04:f7:76:2d:93:48:b4:
                    37:e3:12:17:75:cd:dd:07:b4:2d:7d:28:20:04:2d:
                    24:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B8:27:C3:38:51:8C:CA:A3:7C:65:C7:F7:F1:E8:4B:1A:30:BE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1d978fb0-4997-3482-a154-82257478e02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c7:2b:5b:dc:f0:a5:cb:e4:80:3e:c3:3f:3a:10:c2:86:80:
         bf:39:e8:51:14:f1:a9:8f:b7:a5:fa:09:a9:25:a3:ef:a0:af:
         c3:0d:18:6f:49:83:12:f8:e5:fa:d3:be:94:d7:e6:c3:24:72:
         9c:5c:4c:65:3e:cf:88:df:de:3a:24:cd:0e:ef:48:12:1d:04:
         1d:e2:f9:d5:a7:ff:0d:93:0b:7f:49:dc:64:45:31:7c:55:db:
         0d:2b:fa:bf:2e:8a:95:42:37:86:f8:3d:52:9e:f5:d4:da:76:
         93:3f:43:fa:04:f9:e6:84:c8:dd:89:48:a1:72:63:ca:1a:a0:
         43:f0:a6:d8:1a:41:39:38:cd:bb:dc:3b:c8:b2:d2:d7:c0:6c:
         46:f1:b3:3c:d0:f4:8e:ec:af:f0:68:7e:bf:b3:ec:4c:a5:31:
         34:a4:1b:a8:bb:5a:8d:58:7c:1c:1f:b3:bf:ed:6c:56:dd:62:
         6b:36:ff:e5:48:f5:08:c2:50:d6:e1:24:55:95:07:ef:c3:ce:
         a3:db:87:1a:87:c4:a0:8b:89:09:4d:a3:1e:29:84:7b:5d:f6:
         62:0b:28:56:65:aa:ff:42:b2:ee:6d:a1:3f:d7:46:e6:4a:33:
         de:15:21:20:5c:f1:9c:c3:b0:37:3a:dd:f8:b8:2e:c6:e5:b9:
         c7:71:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:55 2025 by rpki-client