Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6c8b2f-5007-39c9-b1b8-a162818d2a5c.roa
File:                     8d6c8b2f-5007-39c9-b1b8-a162818d2a5c.roa (raw, json)
Hash identifier:          Ow5MErmtdOJJvFHmnkAcvfkjkpJHKZQIaJtiKgIuX4k=
Subject key identifier:   B9:39:B0:65:37:5A:A9:0B:9E:1B:A2:98:4E:D6:61:5D:BA:7E:37:DF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A29B56A45179A28957ED1C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6c8b2f-5007-39c9-b1b8-a162818d2a5c.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     20940
IP address blocks:        2600:14a0:100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:56:a4:51:79:a2:89:57:ed:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=abf0f0f8-ffa9-43e8-b8fd-f0462fe34d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:68:a4:a4:fd:2c:1f:41:6a:21:d5:1f:80:07:
                    3b:6a:ef:f4:53:93:af:3f:7a:f6:b7:97:b8:12:2c:
                    df:c9:3f:b5:87:9e:b5:76:fd:a1:6e:0c:e5:29:6a:
                    f2:86:af:5c:16:3b:4e:11:e5:8e:1e:ce:9f:06:1a:
                    a5:a3:fa:82:da:fb:0b:19:c3:4c:9a:8b:14:2e:11:
                    3c:f4:40:c1:ed:27:25:83:3e:b2:70:a3:eb:e3:ce:
                    af:f3:ab:c2:9e:65:e2:53:2b:e6:e4:20:e7:75:7d:
                    2f:a5:15:22:74:36:0c:01:c2:a8:f1:f2:c8:57:a9:
                    33:16:a6:fa:3c:6f:53:68:97:09:cf:3a:cc:79:da:
                    0a:00:25:d2:59:6d:8f:5b:49:27:d5:4b:a8:68:03:
                    71:72:39:eb:89:32:56:8f:c2:ff:e2:76:cb:02:f2:
                    47:15:29:3a:5e:ee:65:fc:b4:7b:f7:8f:40:f1:8e:
                    a4:4e:53:44:bb:d9:fe:40:9e:63:42:69:2f:87:5f:
                    7d:46:48:6b:8c:4f:26:b5:b7:47:62:82:26:0e:e3:
                    21:74:9a:ed:85:ab:74:2a:6f:40:83:93:47:3a:4e:
                    04:ea:e1:57:3b:4f:4c:64:f4:41:97:01:88:24:93:
                    8c:79:1c:4c:2c:ad:22:f4:5d:31:f5:ef:03:06:04:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:39:B0:65:37:5A:A9:0B:9E:1B:A2:98:4E:D6:61:5D:BA:7E:37:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6c8b2f-5007-39c9-b1b8-a162818d2a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:14a0:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b8:8c:33:64:58:a4:0a:2f:aa:d0:3c:25:5b:2a:90:5c:13:
         ad:09:6d:1f:f5:44:a7:6b:80:8b:69:d0:01:ce:ee:ff:db:21:
         6d:ec:41:45:d6:6c:ce:04:8f:5c:55:87:86:de:29:58:7b:f6:
         56:5b:da:cf:71:d1:e2:8c:8f:f7:19:f0:e6:92:8c:3d:26:9f:
         6f:34:2d:55:bf:a4:dd:d3:d7:09:62:82:d7:b9:3b:0a:ca:72:
         42:5f:5d:0e:0a:9d:1a:03:65:d5:a6:1d:76:8e:65:f1:cf:2f:
         da:1e:f8:88:d6:3d:76:49:76:09:84:07:95:b4:a7:0f:d5:6d:
         1e:59:5e:26:70:f2:d7:89:15:22:99:e3:4b:ae:2f:ee:6d:04:
         4b:38:3c:76:06:a9:ed:7f:ce:67:cc:db:ff:ea:c3:a5:1b:32:
         50:2d:9e:4d:c0:98:d8:e0:68:1a:4e:b7:de:0b:ae:38:76:ed:
         f1:8a:1c:c5:7d:53:0e:5f:b2:9c:4b:32:cd:42:77:5a:5c:d2:
         1c:91:11:83:03:9f:61:d8:3c:bf:6f:07:56:33:fc:78:ef:4c:
         6b:32:0c:8e:2e:b9:02:85:cb:8a:59:49:87:84:cf:57:fc:77:
         1f:6d:e5:94:bc:89:ce:15:72:8d:00:b8:22:be:8d:0b:c9:d6:
         29:08:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:54 2025 by rpki-client