Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/704353db-ab26-3b20-a1e4-a49b16d7dd2e.roa
File:                     704353db-ab26-3b20-a1e4-a49b16d7dd2e.roa (raw, json)
Hash identifier:          QKjfnfzzRqC6e7RyrTPbRw4EhJdew2dw5tW+1mxqiUg=
Subject key identifier:   71:0B:84:B8:B7:43:CC:2D:B4:03:5D:BC:DE:BE:A4:B8:14:B1:4F:D4
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F432858484AAADF89F0B75F3721A8A700
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/704353db-ab26-3b20-a1e4-a49b16d7dd2e.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     3477
IP address blocks:        2601:a010::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:df:89:f0:b7:5f:37:21:a8:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=49373603-dd52-40ab-8317-500b7ead7a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:94:a9:99:64:90:16:7e:db:82:4c:40:73:
                    56:c5:9b:2d:4c:00:16:33:71:1e:e7:ba:f6:45:f0:
                    30:9c:1b:b1:a5:7d:5f:91:15:14:af:6b:c3:d1:36:
                    67:98:0a:89:4a:e1:fd:22:32:13:56:87:56:26:72:
                    5a:a4:7f:fe:dc:03:de:77:86:cb:57:d4:3d:ff:a4:
                    28:e1:e6:e7:73:cb:eb:03:88:db:ad:6e:1f:96:86:
                    c8:a1:d1:5e:57:3c:a5:ea:79:12:99:42:6f:72:67:
                    ea:b7:23:40:52:d8:d6:48:64:0b:48:af:2d:27:48:
                    d2:bc:7f:32:9c:b1:6c:22:ba:50:1a:c7:e4:4d:9e:
                    16:64:d8:93:11:36:34:4b:de:5d:5a:45:6a:51:c8:
                    76:44:b1:1a:cc:41:7d:42:b6:84:43:5e:f3:a8:e6:
                    76:73:98:12:47:46:b4:61:a6:6f:6c:fd:33:9c:e5:
                    01:6c:e6:d5:2d:48:61:5e:b4:25:9f:30:15:41:ad:
                    31:4d:62:4f:5c:60:5e:b3:66:a1:ef:1b:c2:fb:45:
                    4a:45:e6:f4:5d:4c:ff:3c:a0:7a:7a:e2:de:81:28:
                    dd:d6:69:b6:71:08:c4:4d:f6:70:ff:c5:4f:c1:7c:
                    43:d7:f4:9e:c4:78:22:4b:d7:b7:59:de:34:b2:99:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0B:84:B8:B7:43:CC:2D:B4:03:5D:BC:DE:BE:A4:B8:14:B1:4F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/704353db-ab26-3b20-a1e4-a49b16d7dd2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a010::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:50:a0:01:a5:64:79:7d:19:4c:e9:f4:d2:9e:1b:1a:e6:17:
         ce:1f:a8:2a:6c:23:93:ce:0e:4a:2a:9e:ff:52:6c:61:d3:49:
         75:bf:54:3d:c2:40:bb:05:d5:6e:39:ed:07:09:70:14:b5:48:
         ca:b2:8f:d0:19:3e:98:a6:5a:9d:6b:97:29:4c:87:36:cf:3c:
         44:af:fa:f3:bb:0b:ba:b3:67:7b:00:cf:d8:b7:7e:db:b3:69:
         33:90:28:63:8a:66:ca:27:72:b8:44:19:ba:0d:81:4b:c3:0b:
         a7:d8:5b:2d:fb:5a:0a:93:f3:ab:24:58:63:ce:cb:32:9f:3f:
         e0:f7:93:2d:78:0e:66:81:28:80:1a:7c:f4:56:c8:3a:f6:f3:
         a3:6d:ae:af:b5:82:1a:cd:ba:27:68:60:9b:04:be:d3:ad:aa:
         6b:d1:37:13:d1:99:c9:d6:ea:08:01:9e:e4:e0:bc:92:d5:f2:
         ab:5e:08:a7:18:dc:68:96:5d:dc:41:fa:1c:fc:0b:b3:81:6c:
         3f:e4:88:2d:e8:8a:b2:42:f5:f2:dd:6a:84:aa:00:f8:6e:f4:
         5d:af:04:57:f5:76:fd:bf:c2:0e:91:b0:f7:01:50:60:d6:6d:
         e7:93:fb:e5:ec:ee:a7:58:1f:f0:8a:07:3c:c0:6f:9b:6f:d0:
         ea:c6:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:27:32 2025 by rpki-client