Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0413df96-52bd-3769-b4ef-c993dac477ab.roa
File:                     0413df96-52bd-3769-b4ef-c993dac477ab.roa (raw, json)
Hash identifier:          EAKEMzXiNycMYUA+nIxRUrg/hDn3iBmv80E7JLFSnxg=
Subject key identifier:   1E:B3:EA:82:A8:F9:37:B1:B1:D4:0D:4B:A5:0D:17:E3:F8:66:A1:B9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848960B622F9F885B5CCFF5D468
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0413df96-52bd-3769-b4ef-c993dac477ab.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1415:4c00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:62:2f:9f:88:5b:5c:cf:f5:d4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=c3f1b9fa-17fc-46e6-b483-a6f31fe0d80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:25:78:d1:a5:f6:e0:24:9a:40:d4:c4:2f:
                    18:a5:f4:78:8b:b5:3b:b0:c8:b8:db:6d:93:fd:92:
                    7d:01:fd:fb:b1:0f:2d:bf:9e:a9:5b:01:52:1b:4e:
                    af:71:53:40:be:8d:de:bc:ef:5b:ab:7b:43:d9:44:
                    4a:6e:91:c2:62:e8:e8:c0:6e:61:83:c8:40:3c:2c:
                    94:c7:2c:3d:9f:c2:3e:71:37:a3:cf:a3:41:f0:22:
                    ea:cf:2f:de:11:f7:8c:3f:23:04:29:c7:1f:ec:50:
                    48:d5:f2:04:85:b6:6c:60:78:45:9c:40:13:97:ca:
                    ee:df:7e:0f:f2:7e:ee:bd:02:cd:15:69:8c:8e:81:
                    75:69:6a:72:ff:49:fa:84:4f:5d:3c:85:e9:7d:c2:
                    7b:cd:e2:9f:75:28:4a:ef:2d:8d:28:ab:f2:a4:52:
                    e8:df:5a:4e:bf:df:07:aa:fd:38:72:3a:04:a3:5d:
                    5f:73:52:e4:bd:42:ed:f3:74:5d:58:44:a0:5f:f8:
                    5d:a1:c5:8d:04:12:a3:be:10:df:8e:5e:c0:b2:85:
                    3f:b7:33:7a:7a:7a:34:48:e5:84:22:0c:f1:0a:9b:
                    b0:df:ed:a5:56:f5:3c:01:7e:57:eb:46:bf:67:a3:
                    ca:bd:04:62:fa:07:0e:83:f3:42:bf:73:98:da:67:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B3:EA:82:A8:F9:37:B1:B1:D4:0D:4B:A5:0D:17:E3:F8:66:A1:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0413df96-52bd-3769-b4ef-c993dac477ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:4c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:b8:d1:32:32:56:f2:7a:9e:bb:28:00:ff:e2:33:22:1d:
         8f:23:98:e0:e7:56:67:c3:f0:2b:c4:f2:43:10:42:60:ea:02:
         09:e5:bc:94:b3:c7:1f:9e:96:bc:0e:81:45:cb:40:5d:2e:47:
         e4:25:4e:8d:3c:de:20:d7:53:64:75:c6:df:ad:8e:e1:86:80:
         10:fb:20:f7:b8:47:e9:0a:e5:19:6a:49:ee:13:d4:9f:3e:4e:
         d1:01:75:88:89:ee:69:4d:37:3e:c7:2d:94:41:4b:02:42:16:
         5c:62:bd:12:b4:c1:d3:17:30:3d:64:74:ba:d8:fc:76:1d:20:
         f2:20:7e:e9:7a:5d:6d:b8:bc:57:6c:e0:e2:f0:81:93:b9:58:
         89:79:bf:ba:b2:fc:4c:2c:64:21:9a:c9:f7:41:a5:98:7a:1a:
         a3:05:fa:8e:15:e5:04:32:eb:cf:06:7d:76:ae:d3:ca:e9:f8:
         ea:39:91:2e:a4:c0:da:96:6b:27:16:b0:80:c6:bd:f5:9b:8a:
         26:b9:a4:b8:35:e9:c4:c1:fc:2e:14:d3:98:c5:22:b2:b6:90:
         6e:9e:e3:f2:e8:d3:b6:bf:f1:91:f0:b1:8a:8c:33:b3:c8:fc:
         9c:64:77:0f:f8:b7:a9:62:4d:95:cb:7b:c1:13:c9:8b:a9:39:
         37:00:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:25 2025 by rpki-client