Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/ee116b9b-3843-3020-b1f5-a01cdadea43f.roa
File:                     ee116b9b-3843-3020-b1f5-a01cdadea43f.roa (raw, json)
Hash identifier:          wlAYjwMnMuUIyXGw9Af1OOFsarRAJSCBDGJWdB44488=
Subject key identifier:   EB:7C:52:FD:FE:B6:E7:16:58:86:4F:1C:44:97:13:41:4C:40:0F:2A
Certificate issuer:       /CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
Certificate serial:       010D0C9F432858481F65364A2A413D6366405900
Authority key identifier: DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/ee116b9b-3843-3020-b1f5-a01cdadea43f.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        2602:fb2a:c0::/42 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:36:4a:2a:41:3d:63:66:40:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=289c7b30-762e-48f0-b763-1d7ccab91d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c9:9c:5e:42:6c:4d:cd:02:6f:cf:2f:25:4d:
                    03:ae:39:1a:5f:98:65:32:f5:ef:3c:91:f0:75:0e:
                    d8:bc:3a:43:e0:05:5f:c6:5d:09:9b:95:83:43:c6:
                    d5:b9:99:3b:47:f7:05:26:6b:fc:47:92:d4:b7:e7:
                    48:1d:27:08:09:f8:cb:d3:33:ae:fe:86:1e:1f:74:
                    7c:23:65:b4:17:85:7c:e4:6d:49:b3:c2:bc:fc:e7:
                    c7:38:64:55:2d:51:b2:33:0c:20:fb:80:c2:1a:c5:
                    8f:a1:1e:a4:cf:76:fb:2a:34:15:04:72:a1:59:fc:
                    99:dd:67:36:5e:4e:29:b9:18:6e:75:75:ce:af:26:
                    6e:fa:a3:9e:fc:d9:dd:74:fc:51:39:80:98:5a:12:
                    13:39:ab:3c:01:80:2d:cd:bf:2d:e6:8a:35:f7:53:
                    f2:47:76:12:7d:4b:61:74:8c:67:d3:0a:7f:1b:e8:
                    1e:a6:b4:6b:82:06:f0:e2:ab:2a:06:f1:3c:ab:d1:
                    b2:9c:cb:31:20:f2:61:c0:ff:ce:73:cd:25:7b:2b:
                    c1:7f:a9:44:60:e2:99:d2:82:ca:6b:9c:44:91:ea:
                    6c:9c:48:63:b2:03:04:38:47:aa:9a:22:6d:b9:3b:
                    47:cb:64:15:66:74:f2:51:25:9b:eb:38:55:d0:65:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7C:52:FD:FE:B6:E7:16:58:86:4F:1C:44:97:13:41:4C:40:0F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/ee116b9b-3843-3020-b1f5-a01cdadea43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl

            X509v3 Authority Key Identifier:
                keyid:DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb2a:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a2:94:0b:85:ce:c1:e9:b4:34:90:08:cf:6e:68:54:0d:e6:
         0f:f9:12:96:0f:11:ac:b0:69:2a:9e:e5:4f:13:bc:0f:d8:70:
         0d:7d:b1:26:38:71:33:73:06:94:f4:f7:3a:43:e1:94:92:76:
         9f:7e:55:76:08:6f:60:6c:47:a0:b2:87:c1:f2:58:71:35:7b:
         83:70:a4:e1:de:18:30:f4:3a:63:53:39:fe:af:5e:c4:ac:c1:
         4b:b4:9b:6b:7c:c2:ca:7d:62:81:e9:4d:d0:77:75:b2:53:0a:
         14:e8:af:b3:1b:fc:e4:2d:0b:d4:47:ee:1d:c5:39:5c:29:39:
         72:fd:28:d0:d5:1d:9f:f8:a4:16:48:36:f9:bb:2b:08:aa:37:
         3a:f5:43:2b:71:37:df:b6:f7:53:7b:6a:5a:4b:31:dc:a1:d2:
         08:00:c6:47:e3:70:6e:33:2b:ef:91:c1:97:34:d1:63:51:bb:
         e1:b3:db:6d:55:47:de:50:ed:cf:81:9b:a0:b6:3a:5c:e5:18:
         3f:ae:3b:98:21:ce:35:cb:e7:b8:76:69:4b:17:c0:72:71:40:
         26:cc:41:82:f0:96:88:a2:e7:c4:05:ae:87:41:0e:69:15:77:
         2b:8a:3f:d1:70:e9:9b:a3:8f:59:e9:fa:f5:f7:85:fe:0f:5c:
         b7:b8:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:32 2025 by rpki-client