Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0031136f-32fb-3c8c-9841-153c769f4d65.roa
File:                     0031136f-32fb-3c8c-9841-153c769f4d65.roa (raw, json)
Hash identifier:          tqFMq/uf+eF4ZHIEvPSPPQLVuyPlGDkRdR8km+TWeyY=
Subject key identifier:   85:95:12:6D:D7:47:E1:41:63:41:E1:C5:EB:D2:BD:64:B6:F3:A6:05
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858487A2089DD228317B9DBDC9320
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0031136f-32fb-3c8c-9841-153c769f4d65.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     30103
IP address blocks:        2620:123:2048::/48 maxlen: 48
                          2620:123:2049::/48 maxlen: 48
                          2620:123:204a::/48 maxlen: 48
                          2620:123:204b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:89:dd:22:83:17:b9:db:dc:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=9a9dd4b0-873a-482b-a3cf-e5e71180cac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:0b:34:cf:9b:91:bc:e4:ca:71:b6:dd:d3:
                    66:32:ef:3a:77:2d:56:4c:6c:54:fd:4f:a1:e8:f6:
                    07:df:67:22:96:6a:35:f1:9f:e2:47:cc:bc:71:2f:
                    1f:4b:df:4b:dc:63:c6:04:c2:5c:73:36:69:11:ea:
                    0a:8f:86:1d:50:d1:56:8d:7b:8b:49:59:68:c7:40:
                    f3:bc:e2:73:04:5e:33:af:da:fa:1d:0d:2f:04:f7:
                    ed:6b:cb:74:10:09:11:d3:9c:07:6e:5e:11:c0:f8:
                    3e:12:d6:32:b3:9d:c6:b8:c3:73:83:e8:e6:d8:78:
                    7c:65:d8:a6:b4:26:e6:bc:8b:03:16:6a:a1:8f:0a:
                    f2:0d:f7:c7:9e:3b:ba:95:82:7d:90:42:83:6f:0c:
                    30:99:49:d5:ea:35:c3:21:4f:e8:96:b2:c9:95:6a:
                    90:36:2b:7e:b0:a0:04:b6:5c:ba:6a:0f:5f:d9:60:
                    1e:fc:09:0a:b0:31:8f:1d:1e:4f:da:36:fe:40:30:
                    9b:f5:a8:7d:dc:35:9f:5b:2c:6e:25:8c:cd:e1:3e:
                    14:34:84:61:2c:af:4d:3c:f0:cb:51:2a:7e:51:66:
                    da:25:08:f8:9f:7f:47:e8:44:e4:13:47:e6:62:62:
                    a3:9e:50:f0:57:bf:4a:58:d9:f0:5e:f1:28:a3:9f:
                    0c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:95:12:6D:D7:47:E1:41:63:41:E1:C5:EB:D2:BD:64:B6:F3:A6:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0031136f-32fb-3c8c-9841-153c769f4d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2048::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ba:63:2c:4a:4b:65:16:5e:73:33:82:fa:ac:98:7f:17:6a:
         42:68:55:f8:a8:e2:0e:04:2c:46:db:a2:bd:b2:be:b7:00:29:
         0f:5d:25:eb:e4:81:dd:57:d6:94:31:b5:2b:f5:0c:12:a6:b0:
         ac:c9:13:89:58:05:e1:82:3e:32:3c:ae:80:77:21:62:63:1b:
         9d:09:f1:0e:85:12:33:e0:56:89:aa:4f:58:26:a8:62:f3:7f:
         9a:0d:75:10:b4:4b:d8:bd:e6:8d:92:e1:58:38:7b:6c:0d:26:
         0e:5b:10:75:d3:71:c1:b1:c1:15:2b:1b:ae:7b:d2:40:84:81:
         4a:d4:df:71:bd:de:dc:48:d8:40:81:d4:9a:aa:00:78:20:fd:
         c0:7e:ed:64:fe:06:25:38:50:d8:02:ed:a0:97:84:84:5f:bd:
         26:f2:7e:12:38:c5:20:2f:78:2b:6a:cd:22:39:37:55:71:95:
         5f:2a:59:16:66:4c:fc:61:ea:37:3e:b8:c8:73:2b:1b:4a:1c:
         f3:98:cb:7f:29:f8:27:bd:12:b8:a4:c4:64:f3:f0:6c:e1:88:
         df:33:72:98:f8:19:47:7e:be:0e:bc:66:22:2a:59:e0:f2:99:
         35:47:64:02:68:70:b3:11:fe:78:87:6f:1e:c3:23:43:45:12:
         43:7c:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:19 2025 by rpki-client