Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a2e75c-d1fd-3f69-808a-9239a53dd08f.roa
File:                     10a2e75c-d1fd-3f69-808a-9239a53dd08f.roa (raw, json)
Hash identifier:          XSNl6w6yVapAbyHgcpzcxakiG7lwEJ4oBuPoJvqpGwg=
Subject key identifier:   C5:C2:2C:C1:1D:81:0F:87:11:66:D1:1C:5F:CD:F0:05:22:56:16:B6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848D211329137F870590CEE8180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a2e75c-d1fd-3f69-808a-9239a53dd08f.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        2600:1409:4c00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:32:91:37:f8:70:59:0c:ee:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=ae8d638e-4942-4e27-bc22-9320aa82640e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:1e:6d:62:21:97:6b:46:b1:fa:db:89:63:
                    50:a5:5c:d4:80:40:8c:9e:c1:ce:e3:9c:24:1a:a8:
                    e2:88:a7:96:f4:fb:f7:56:ac:58:a7:b8:78:f8:51:
                    de:75:82:c1:32:27:1c:eb:de:bd:96:00:2d:42:e5:
                    f1:47:21:9c:fd:e0:e4:4a:c6:eb:db:e1:99:1b:67:
                    95:4e:28:53:99:78:db:8b:d5:03:75:ad:f3:e4:65:
                    3a:99:3f:b5:23:37:a8:53:ba:18:1b:c2:48:a5:86:
                    6b:ca:35:71:1f:d6:e1:0b:3d:b0:76:bd:77:ae:ed:
                    2c:14:bc:72:dd:8b:c5:0f:2c:a0:de:cd:29:1c:53:
                    38:35:c6:e9:ad:9a:5d:a3:f1:44:e0:e6:63:80:37:
                    76:98:f7:45:b0:6b:ec:5b:32:89:54:d6:e0:29:b3:
                    b3:1e:5f:46:4f:65:37:e9:12:43:32:65:b8:d5:43:
                    25:f8:fe:eb:d2:3d:42:28:ac:4f:d7:9d:42:ce:02:
                    b5:16:4e:2e:b8:ab:34:17:38:5d:01:83:a6:9f:df:
                    dc:f6:2c:67:01:80:f8:b4:aa:8a:ff:3b:1d:59:a9:
                    b2:10:a0:80:e5:fc:8b:08:e4:3e:5e:d5:ee:fc:77:
                    54:89:e9:e0:cc:8c:a1:f6:e6:d8:fd:70:ac:e4:71:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C2:2C:C1:1D:81:0F:87:11:66:D1:1C:5F:CD:F0:05:22:56:16:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a2e75c-d1fd-3f69-808a-9239a53dd08f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:4c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:14:6b:1b:71:ca:48:37:4f:ba:09:d2:bd:82:7f:8e:0b:86:
         b7:25:cb:60:81:44:38:0f:85:b7:30:b7:50:6b:72:9e:e6:3f:
         e0:01:3c:c7:22:6b:a2:de:c4:70:18:83:79:89:39:10:d3:5c:
         b3:dd:13:e5:39:7e:53:9e:66:d1:0d:f0:36:80:d9:64:d8:1e:
         9c:55:1e:89:b4:20:58:15:24:dd:58:d7:dc:b5:ed:3a:6b:52:
         81:6e:e3:89:7f:38:7d:7a:e9:98:85:23:45:1b:54:8b:68:d2:
         d3:e8:f5:80:26:8e:42:25:1e:bc:ca:35:73:f0:b3:97:03:a2:
         35:15:a3:d3:f0:51:f8:4b:7c:6c:13:14:40:9a:16:33:aa:d1:
         98:a9:b9:9e:b5:9a:1b:4b:31:3e:72:9f:0c:dc:90:88:91:dd:
         a8:8c:31:40:f7:d6:20:64:5b:49:68:4a:3b:a1:04:51:08:d6:
         ea:19:e1:f0:ad:c1:f8:b2:39:6a:9c:b9:9d:c5:7f:19:ef:06:
         c9:d6:62:37:d0:30:9f:ab:b0:d6:28:d4:fc:d7:c3:f9:b4:f4:
         07:4b:0e:b7:5c:26:d0:03:ae:be:cf:e6:49:85:5a:f3:07:24:
         16:c2:7a:e0:0a:33:14:1f:90:1e:39:a6:6b:88:45:cb:15:be:
         68:2f:4c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:57 2025 by rpki-client