Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/1298e627-64f2-30b0-94f5-1d45a35a642f.roa
File:                     1298e627-64f2-30b0-94f5-1d45a35a642f.roa (raw, json)
Hash identifier:          elnmBwwtYe2qpHdpwo2VUthdBlMeBa8TU+bTMyDGHTA=
Subject key identifier:   DE:41:48:6B:B5:CB:ED:CA:03:CF:B2:2E:3E:A5:B3:C2:D0:5D:A8:14
Certificate issuer:       /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial:       010D0C9F432858485F9AE0758F2FA3D0E82C4880
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/1298e627-64f2-30b0-94f5-1d45a35a642f.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     399686
IP address blocks:        2606:62c0:11::/48 maxlen: 48
                          2606:62c0:12::/48 maxlen: 48
                          2606:62c0:13::/48 maxlen: 48
                          2606:62c0:17::/48 maxlen: 48
                          2606:62c0:18::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:e0:75:8f:2f:a3:d0:e8:2c:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=1ff23818-2fe8-41e8-a82d-f845d78073fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a0:3e:30:14:0a:8c:68:ad:8d:21:ca:60:f3:
                    49:a2:90:bd:8d:4d:eb:00:22:c7:3b:40:f8:bb:58:
                    82:99:71:7b:65:30:a7:0a:5c:0b:d8:ef:cc:68:47:
                    35:63:fd:da:c8:b9:1d:02:bc:13:c4:1d:28:ef:05:
                    fe:c0:d9:7e:eb:ba:52:f5:07:88:44:96:97:1d:4e:
                    12:c7:9a:2e:4b:8e:08:03:f5:83:22:c0:20:74:6c:
                    02:49:ed:35:e7:c9:11:b4:b9:55:c9:19:dd:8c:62:
                    34:b1:8a:79:82:0f:40:0c:7e:e8:b7:7e:b3:dc:3e:
                    14:12:be:d3:96:03:cc:d3:5b:37:03:21:6b:34:31:
                    e9:0e:13:c8:e6:ec:a7:ea:2f:4c:75:df:35:0c:89:
                    42:a2:be:8a:4b:41:be:3e:98:6f:5f:a7:f0:c1:f0:
                    a4:71:af:70:fe:fa:8a:d2:bf:16:23:f0:d6:fe:bc:
                    b7:da:a8:47:04:2f:42:14:d3:0c:f3:42:c9:82:8a:
                    b9:c1:9e:5f:df:09:3e:c5:33:35:5f:56:7a:af:0c:
                    8d:cd:7d:40:9c:65:f0:a6:83:52:9d:4a:29:0f:fb:
                    b8:43:02:63:c2:ea:aa:c1:3a:4a:f6:9d:87:64:06:
                    2e:e6:90:be:83:de:3c:98:83:b9:ad:80:74:c6:73:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:41:48:6B:B5:CB:ED:CA:03:CF:B2:2E:3E:A5:B3:C2:D0:5D:A8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/1298e627-64f2-30b0-94f5-1d45a35a642f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl

            X509v3 Authority Key Identifier:
                keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:62c0:11::-2606:62c0:13:ffff:ffff:ffff:ffff:ffff
                  2606:62c0:17::-2606:62c0:18:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:fa:6c:53:c5:2b:2e:b9:db:19:ef:c2:88:41:10:20:6e:f2:
         07:0d:06:5f:2a:04:93:97:58:36:ca:79:6a:00:11:cc:41:be:
         d7:ad:66:9e:69:21:12:9b:bb:33:2e:22:2c:e0:29:5e:8e:61:
         ed:3c:a0:dd:76:47:84:33:74:14:9c:3c:e4:59:6b:a3:ca:9a:
         de:5d:59:1f:76:62:39:64:2d:35:6f:e5:53:c3:df:64:bc:a1:
         19:a2:33:ec:47:42:d5:87:35:e6:0c:2c:41:27:d8:27:77:f6:
         e1:6c:23:13:8f:a7:dd:78:1a:e1:14:e5:fe:d0:e7:66:b2:c9:
         e4:40:5a:d6:b3:67:ae:36:61:60:fa:c4:d7:06:b7:dd:53:74:
         18:81:97:aa:58:ca:70:cd:50:a6:eb:ce:dc:8f:c9:bc:8f:ba:
         c2:9b:17:55:6f:cc:64:f9:14:dc:42:64:ad:24:1f:48:91:51:
         cd:24:ff:f0:00:d1:37:8d:14:99:a4:89:04:4d:d1:12:0d:6e:
         dc:03:81:44:ae:ea:cf:ab:de:c8:99:0a:33:12:18:77:70:d3:
         dd:13:2f:08:83:71:58:38:8f:88:61:fe:f8:33:8c:8d:3b:39:
         a7:ce:05:64:6c:04:9e:7d:f1:b2:c1:db:b2:4a:cc:6b:2a:19:
         25:43:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:17:05 2025 by rpki-client