Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa
File:                     9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa (raw, json)
Hash identifier:          0SVKZUU6YX0H8X89IMt6RefqABBLBDxg1wgBTGYAkwk=
Subject key identifier:   68:D5:5D:8C:9C:8D:82:EF:CA:1A:69:1C:BA:6E:0F:2A:6B:1F:04:0A
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858488AE0A7B888276B474B28E980
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     30103
IP address blocks:        2620:123:2009::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a7:b8:88:27:6b:47:4b:28:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=4ef6326d-ef10-4e85-b44a-032a19dad085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:c8:ea:80:d6:2a:a2:fb:04:1f:7a:ab:a9:
                    6a:b3:63:01:75:fe:eb:63:60:a8:85:d0:0f:2d:eb:
                    62:5e:c0:b0:5d:a6:10:56:a8:fb:5f:db:e5:c6:e5:
                    92:c2:bf:bf:4c:2c:eb:5b:a4:b2:2a:61:23:cd:23:
                    fc:ed:62:ac:2e:3b:1a:52:a2:82:54:4e:50:6d:0d:
                    20:5f:9e:b8:dd:2f:00:91:99:b1:f5:60:d1:60:a8:
                    fa:2a:cd:53:15:e3:4f:73:8f:f3:0f:15:90:1f:60:
                    d5:e0:17:cf:66:20:9f:1e:88:38:8f:6b:6d:56:88:
                    03:25:9e:e2:fa:aa:b2:44:5c:aa:30:2d:f4:39:c1:
                    15:9b:a7:6a:ad:a7:9f:b9:64:27:5c:15:85:31:c6:
                    60:43:c2:43:57:b7:95:7e:50:86:29:be:54:7e:80:
                    47:a5:4b:17:d4:53:03:2b:42:2c:4c:2a:ae:41:0d:
                    29:e8:4f:26:47:1c:bb:16:3a:6d:0a:ba:c9:ee:9d:
                    9b:f9:99:38:2b:06:ff:16:08:6e:76:dc:65:52:20:
                    e1:0f:31:88:ce:22:04:d1:65:5a:b6:9b:9b:ce:ca:
                    36:6f:8b:f1:56:a2:3e:2d:92:0a:f0:33:f7:da:02:
                    f5:69:ae:4b:3a:04:47:d2:1c:9f:56:fc:80:bf:8a:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D5:5D:8C:9C:8D:82:EF:CA:1A:69:1C:BA:6E:0F:2A:6B:1F:04:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:3f:ec:f1:b6:e1:5d:65:c0:fc:c1:df:71:4b:a8:76:04:
         3b:73:28:a4:ad:22:ca:91:ae:2a:ce:44:02:48:c1:c4:fa:00:
         ee:7e:db:f8:fe:16:1c:6e:da:0d:86:0a:5b:8d:a3:65:d3:3d:
         e7:d3:86:6b:00:77:cd:9d:47:c5:7e:0d:32:a3:e4:aa:44:04:
         5d:ad:d2:58:d2:02:69:ed:59:fc:5d:3e:6d:f1:7a:0f:d3:91:
         d6:ef:93:46:64:ed:d0:bb:27:db:61:91:c1:97:7a:20:62:8e:
         71:e8:fc:6c:01:3c:7d:50:67:60:9c:ed:a1:4b:ea:a8:63:13:
         23:ad:f6:08:90:5b:c8:ad:eb:bb:96:67:6d:e1:06:21:7b:19:
         c5:40:8a:1d:cd:9b:ba:7c:66:bd:d2:5f:14:64:36:21:df:26:
         d8:7d:14:d1:d5:9f:bc:84:c0:6f:ea:2c:ba:ca:c8:30:54:dd:
         40:b8:cf:b2:e4:92:dd:dc:78:49:c1:74:52:89:ef:4d:c4:30:
         6f:33:be:a5:d1:10:03:18:bb:33:53:4d:f9:1b:77:a3:f8:26:
         da:6c:04:75:f3:b4:3e:ca:2d:df:a4:89:0a:cf:d7:ef:ec:09:
         42:db:0b:56:83:6c:62:07:1e:81:10:40:b6:fd:26:8a:34:6d:
         7e:af:86:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:06 2025 by rpki-client