Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa
File:                     824e6379-abbf-3ba1-8155-eeab702f1b96.roa (raw, json)
Hash identifier:          Yj3Y+Qj/x+mfUpFrtmoWuKJpL8RNLl8lgRH9pN/uX/E=
Subject key identifier:   02:A3:70:C7:D4:9A:9E:7E:8A:71:D9:2C:47:1D:30:01:F2:21:7A:A4
Certificate issuer:       /CN=4bc701e5-cff5-4660-9102-08342e5ad35f
Certificate serial:       010D0C9F43285847EFEF7C30D9C6DB143763EA80
Authority key identifier: 62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     26523
IP address blocks:        2620:0:f0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:7c:30:d9:c6:db:14:37:63:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc701e5-cff5-4660-9102-08342e5ad35f
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=2b3b021a-a80c-448d-b4a8-f3762a859cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:7b:5c:09:da:db:0e:b8:f2:64:f5:c2:1a:
                    ad:fe:3f:41:f0:b6:b9:74:cd:2c:9a:d5:c8:63:10:
                    77:a3:72:e6:07:c1:3e:a7:7d:7a:3a:66:38:f4:bd:
                    00:e5:30:e9:f1:0e:7e:44:1c:7f:e3:e4:e8:d0:b2:
                    3a:d4:5e:f1:d1:42:33:98:87:14:0e:e1:e6:2c:df:
                    2e:66:c8:b7:4b:f3:d4:21:39:25:35:7d:de:89:08:
                    0c:b7:19:7b:98:5d:0f:20:75:85:99:31:63:61:58:
                    b0:88:12:76:58:94:0d:b9:e0:47:2c:05:4c:94:6b:
                    57:d0:b3:f1:91:af:0a:0d:14:10:52:72:c4:3b:2a:
                    41:e4:0c:77:2c:d1:53:e1:ac:c3:1e:20:b2:f0:e9:
                    78:a1:ee:71:14:28:42:b7:b9:a3:b3:9e:3d:b0:7c:
                    82:10:6e:da:87:2e:a0:ee:b5:4e:50:7d:a0:02:6d:
                    21:5d:37:b9:ed:bd:bd:41:2c:d5:a3:cf:a4:65:1e:
                    a7:6e:b2:5e:ff:a8:a5:4b:63:5d:16:fa:c9:3e:02:
                    02:de:0f:6b:6d:e6:72:7b:bb:da:78:1b:db:e5:72:
                    53:ae:4c:32:a3:3b:e0:22:b9:74:77:d6:b3:4d:74:
                    30:a6:76:02:a0:73:c8:63:c8:44:49:12:52:83:1a:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A3:70:C7:D4:9A:9E:7E:8A:71:D9:2C:47:1D:30:01:F2:21:7A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl

            X509v3 Authority Key Identifier:
                keyid:62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:6a:28:e8:47:f3:c4:f1:d6:04:e5:35:0b:8d:a7:dc:03:06:
         8a:0a:53:36:82:be:e2:e4:af:95:42:1b:3b:03:70:8c:95:74:
         49:7a:e8:15:14:12:49:ff:e8:9c:4e:46:ad:b9:22:34:00:6a:
         ac:c3:34:6b:85:1f:d8:9c:35:44:fa:8d:d4:1d:56:d6:1b:da:
         c1:29:4b:25:5d:cf:7b:de:82:e8:2f:83:8d:f1:c7:e2:7e:b8:
         52:dd:86:a5:53:b0:05:4e:1d:03:6c:cd:8c:ff:64:d4:bc:72:
         51:0b:99:dc:3b:d5:88:4e:45:d8:7a:21:a4:aa:f8:44:5d:b9:
         0f:20:a4:9f:d8:3e:ef:ee:30:90:1b:f6:12:87:d7:c9:86:51:
         55:94:ca:c4:b2:c8:49:64:55:48:72:f0:2a:9d:ce:6f:8c:97:
         35:a9:34:db:c8:14:50:4b:96:59:21:1c:a8:4c:b5:d3:fc:3a:
         91:18:67:8f:e3:10:25:4e:fb:73:81:13:7c:8f:f6:63:75:5a:
         8b:aa:80:2e:21:ae:6d:a3:84:b6:56:ad:18:fd:3d:b1:73:72:
         4b:58:e9:b3:47:72:14:b8:9a:3c:30:1c:f8:15:2b:b3:a4:fb:
         73:fd:dc:52:d7:17:2a:8e:2b:c2:6c:ff:ae:7f:7a:05:d2:6d:
         df:0d:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:54:44 2025 by rpki-client