Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/23ebdd6f-c918-3bb3-a088-fde483711cf8.roa
File:                     23ebdd6f-c918-3bb3-a088-fde483711cf8.roa (raw, json)
Hash identifier:          kGhM+ZkWQUMBUtpZNPBFTYSp6xh/nJHEa5pRD6JFRVI=
Subject key identifier:   62:A1:16:15:92:BC:6C:B3:5A:5F:11:D0:DC:BD:FC:0D:16:AB:6C:42
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F43285848BE862BD8514B5DA23C5CD600
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/23ebdd6f-c918-3bb3-a088-fde483711cf8.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     394354
IP address blocks:        2620:10a:80ec::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:2b:d8:51:4b:5d:a2:3c:5c:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=c5d9df5c-b492-4e98-a441-bc4b069b50d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:66:24:c6:09:66:96:23:e4:f5:db:97:25:
                    46:92:13:8c:72:4f:2a:ee:f5:aa:20:a2:82:2b:dc:
                    f3:96:4a:27:d9:20:6f:db:8f:63:1c:8d:bf:f2:fa:
                    e7:8e:41:2a:72:81:a5:82:b0:22:4c:51:06:97:9f:
                    93:8e:63:2e:1f:7e:41:ca:af:d2:69:6a:33:81:fd:
                    40:8c:06:7d:f8:4f:c4:4f:ee:ab:64:b6:41:c1:6c:
                    ba:2f:88:85:ef:98:7c:65:2e:de:04:3e:19:09:73:
                    d1:36:c6:94:65:83:84:12:e1:e7:b8:a9:4d:e1:a4:
                    f7:d3:cb:88:1f:36:1b:f4:3c:70:51:13:44:33:0b:
                    af:4f:18:09:5a:8f:19:10:51:6a:ec:4d:77:34:3e:
                    7a:f3:ef:3c:8e:e4:f1:15:b3:5a:fb:40:e0:6b:41:
                    43:fc:b3:80:ef:ba:98:4d:bf:b3:a4:b1:ff:5c:dc:
                    89:2d:09:5a:1e:69:07:ad:1c:75:86:8a:6a:44:53:
                    a8:bc:eb:71:0b:14:6b:80:dc:a4:e6:ea:8f:ba:57:
                    b2:7b:57:1c:19:5b:51:3a:a6:a2:48:8d:53:ff:87:
                    bc:63:6a:c9:5d:74:43:1b:b3:4c:34:94:9b:fa:9e:
                    0a:43:2a:cc:33:71:5e:4e:4c:5f:4f:94:a9:75:e8:
                    54:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A1:16:15:92:BC:6C:B3:5A:5F:11:D0:DC:BD:FC:0D:16:AB:6C:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/23ebdd6f-c918-3bb3-a088-fde483711cf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80ec::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:4f:38:f4:2a:6f:8a:93:3c:b6:87:58:52:f3:a4:5e:31:0f:
         d1:4d:b7:3e:11:56:8b:fd:39:44:ee:f4:0d:c4:fc:24:4f:27:
         5d:98:79:e5:7c:d2:42:35:72:d9:5b:5d:d6:3f:74:01:c5:e0:
         7e:b0:7f:bc:4a:ef:ea:9d:75:7c:3e:a8:ba:96:a1:66:e5:2c:
         b2:a3:47:f7:a1:33:19:63:9f:50:41:66:5a:ee:f8:70:89:ac:
         75:83:74:d0:03:73:f3:ad:0b:83:c1:44:7a:81:c4:5b:a9:3c:
         45:80:86:cc:1b:b3:16:fc:68:67:e8:2c:e5:da:4f:4f:0f:af:
         f0:c4:a4:f3:dc:e8:14:33:11:53:dc:d4:6d:1e:fc:bd:a2:9b:
         6d:e1:54:c4:e0:35:8d:83:d8:42:4c:96:d7:c3:2b:ca:d0:e4:
         e0:5f:ba:86:6c:75:da:39:bd:cf:0b:77:8f:77:90:e6:0b:b4:
         18:1a:a1:08:30:e4:91:ea:b7:30:2b:f3:8b:1a:72:aa:f0:a8:
         f6:c0:85:09:00:b4:45:e3:89:3a:88:74:d9:7a:82:bf:1c:7e:
         93:06:b9:23:90:6b:96:66:bd:56:77:fe:3e:91:2f:87:e2:e7:
         51:57:0b:9f:fa:3a:86:7a:40:1b:fd:3e:06:4a:be:fc:42:1a:
         36:3a:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:53 2025 by rpki-client