Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e203535313538.roa
File:                     323630353a3963303a3a2f33322d3438203d3e203535313538.roa (raw, json)
Hash identifier:          wPIjqCqEGjK87/iqBG97Zlz5vFDjkow+GyKWXSi3fQQ=
Subject key identifier:   43:CB:8B:8C:42:58:FB:2B:20:97:36:B0:F1:E2:1B:C9:63:FD:36:70
Certificate issuer:       /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial:       421030E64CD5F9837CCFC7D5F2592A3DE29A57C5
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e203535313538.roa
Signing time:             Wed 25 Dec 2024 03:41:28 +0000
ROA not before:           Wed 25 Dec 2024 03:36:28 +0000
ROA not after:            Wed 24 Dec 2025 03:41:28 +0000
asID:                     55158
IP address blocks:        2605:9c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:10:30:e6:4c:d5:f9:83:7c:cf:c7:d5:f2:59:2a:3d:e2:9a:57:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
        Validity
            Not Before: Dec 25 03:36:28 2024 GMT
            Not After : Dec 24 03:41:28 2025 GMT
        Subject: CN=43CB8B8C4258FB2B209736B0F1E21BC963FD3670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:54:b9:04:6a:3a:a4:c7:9f:52:eb:11:ce:
                    b8:46:c7:1e:ab:75:fd:7b:cf:fe:dd:81:33:a5:cf:
                    23:28:01:8c:e6:2b:b7:7a:8e:8d:31:51:0d:a4:ef:
                    8b:20:70:2f:74:58:e2:5a:db:65:be:53:7c:18:15:
                    b7:2e:9f:65:42:4b:30:4a:5f:4a:e8:cc:99:a1:21:
                    7a:e0:1e:be:d9:1d:4b:d9:f5:c5:18:da:61:fe:a4:
                    be:d6:f5:3f:f8:78:9f:56:af:21:60:ef:43:98:ca:
                    f8:64:fa:e3:69:c6:cb:1e:e2:d4:c7:90:0c:2d:59:
                    bd:30:31:7f:d2:ea:aa:d9:5a:16:71:17:36:80:91:
                    c3:64:7c:a0:4b:3d:73:5c:04:cc:0c:3a:21:15:93:
                    37:8f:62:5a:e5:23:1e:8f:a2:ba:07:1c:63:21:6e:
                    5e:5a:f0:07:76:2b:85:79:35:e1:a5:72:56:1a:23:
                    fb:87:db:bd:60:de:8e:0e:19:d6:56:61:2c:28:6d:
                    cd:00:60:8c:7b:58:26:e0:b7:22:da:38:22:af:70:
                    7b:e3:66:fa:10:83:c2:34:29:0e:f8:6b:ed:bc:ae:
                    4b:93:97:ea:77:8d:b7:6d:08:28:21:24:c5:29:ca:
                    ea:ef:10:30:eb:7b:a8:cd:04:6e:57:b3:24:af:3b:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CB:8B:8C:42:58:FB:2B:20:97:36:B0:F1:E2:1B:C9:63:FD:36:70
            X509v3 Authority Key Identifier:
                keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e203535313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:f1:4e:25:b4:58:db:85:eb:f3:7d:75:8a:38:91:86:b2:
         1e:88:15:3b:68:66:75:b3:f5:0c:29:21:d0:ad:f3:5e:98:f5:
         b2:c6:56:53:1a:33:e3:9b:77:c6:4e:84:07:e0:cc:9d:67:41:
         72:2d:8d:43:9c:e0:1f:00:50:30:c1:a1:53:40:da:b2:29:c0:
         29:3d:42:d8:22:9a:91:ed:fe:25:8b:06:a4:d1:aa:ec:1c:e2:
         b1:1b:d7:1f:ee:17:09:47:41:3a:2a:b9:63:e1:39:5e:78:51:
         50:38:ee:7d:01:a1:95:9e:db:47:bb:94:0c:6f:b5:73:61:c4:
         1a:fb:37:5e:37:31:4a:43:a4:38:f2:82:b4:f9:c2:f8:b7:c6:
         e0:3e:17:1d:34:4b:f2:2f:c8:62:29:8e:36:b9:89:62:4e:d9:
         d0:ca:f8:dd:1e:a7:d0:bf:cf:b0:9b:c6:aa:b9:5d:2e:76:7f:
         7b:61:a1:e5:64:42:39:26:48:3f:09:6d:5f:91:41:64:a3:6f:
         b7:f8:4a:29:22:12:35:1c:03:7b:14:19:93:3a:29:c0:f1:ca:
         69:a6:bf:44:71:2c:43:fc:6e:0d:f7:58:d7:83:c1:75:c9:06:
         77:9a:75:0c:00:05:65:6b:42:f2:0b:33:8e:14:ba:17:f9:0f:
         d3:7c:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:09:01 2025 by rpki-client