Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/9f5ba162-5e81-3b04-bf64-7553fcf1cb60.roa
File:                     9f5ba162-5e81-3b04-bf64-7553fcf1cb60.roa (raw, json)
Hash identifier:          FJ8lvBTyxmtwdbSFP1himPZr7icw7ilgyUm4U27Ians=
Subject key identifier:   CC:73:45:56:14:FB:AA:AC:CB:BD:2F:4C:75:4C:99:75:AD:63:0E:D8
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584950F95F80B77B95315CD05F00
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/9f5ba162-5e81-3b04-bf64-7553fcf1cb60.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        2620:116:800c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:5f:80:b7:7b:95:31:5c:d0:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=babdda71-09c5-491c-a577-7fe1d664dd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:1e:4f:56:13:c7:a4:97:09:7c:49:bb:7e:
                    e9:d4:b7:b2:39:b1:2e:5c:d1:11:3e:9f:e7:b9:06:
                    5a:9b:ff:ec:af:2c:cc:e2:68:42:d8:62:34:6c:44:
                    9b:96:20:a7:66:00:67:a4:fd:01:1a:ab:1d:b8:f9:
                    5c:19:26:00:61:4e:20:7a:2a:f3:b3:a0:91:1c:78:
                    c1:93:50:66:05:72:a6:28:51:a9:1a:da:b2:29:32:
                    d1:90:e5:f9:b8:7c:76:66:23:a8:68:0b:49:71:cb:
                    50:10:7e:c4:0e:f7:2c:8b:bb:3b:df:3b:a8:dd:14:
                    44:e4:f2:28:af:9b:ac:2e:56:e0:9c:c5:13:fb:16:
                    60:79:8e:99:f1:d3:63:67:9a:80:92:59:25:0f:7e:
                    35:29:ab:7a:d8:58:38:a8:51:44:05:a8:3b:66:11:
                    bd:e5:fd:13:92:a5:f4:06:17:3a:31:80:a8:f4:f7:
                    c4:34:a9:ba:eb:1a:9d:56:0f:86:a4:5a:63:29:4c:
                    a8:b4:0b:49:6c:4e:18:6d:b1:00:a5:7a:3e:3b:cf:
                    10:ce:ca:f4:38:b0:b1:72:96:ae:32:af:93:53:fc:
                    87:64:27:bf:08:ed:e8:bf:66:45:8c:f7:b3:3d:5f:
                    3e:4d:62:4f:35:c3:04:fe:f7:61:64:cd:45:07:4c:
                    c5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:73:45:56:14:FB:AA:AC:CB:BD:2F:4C:75:4C:99:75:AD:63:0E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/9f5ba162-5e81-3b04-bf64-7553fcf1cb60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:ea:a9:8b:08:13:2a:0d:0f:7f:33:17:5e:97:b7:54:21:
         42:27:4e:b4:d9:cf:13:7e:18:2f:8b:b6:ee:ce:e3:43:3e:58:
         3a:fc:c8:2d:36:bd:f6:7a:67:5e:ae:5e:d4:47:72:32:d1:16:
         f3:60:80:e7:ea:89:ff:b0:77:99:ab:90:91:93:42:08:1c:2c:
         f3:cc:9e:aa:97:05:fe:31:65:1c:0c:45:3b:e4:7d:07:44:b4:
         94:be:50:4c:e9:42:35:12:5b:08:13:8d:05:5a:8b:78:1d:10:
         b0:b5:6f:28:05:5d:fa:98:8d:3f:c2:ac:a9:2a:69:25:df:d8:
         2d:cd:88:84:1b:ed:07:f9:49:82:49:ea:2b:3b:bb:3c:1e:e3:
         55:83:95:04:2b:af:85:0f:0a:a5:91:b3:a1:a0:53:0d:d7:bb:
         b6:dc:7a:94:5b:cf:79:ef:93:d1:7a:d1:0f:1f:5a:96:20:ba:
         e6:33:90:f7:12:6e:00:09:73:99:75:bc:9f:67:7f:01:a7:03:
         c3:05:fc:90:4c:9d:ef:94:23:f2:e3:d5:61:77:99:e9:d1:de:
         3e:21:8f:83:20:c1:44:81:6d:51:94:32:8d:e8:6e:97:bc:22:
         9c:cf:71:0a:56:87:e2:d1:b6:2e:8d:a1:8c:eb:f9:97:c3:29:
         9a:48:61:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:25 2025 by rpki-client