Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/100890b2-cb63-38f6-a327-be1ff3bbbb34.roa
File:                     100890b2-cb63-38f6-a327-be1ff3bbbb34.roa (raw, json)
Hash identifier:          KWBEWWNp/0bGeOcTkvkjIorziULYZqiSS2ZZSeawWaw=
Subject key identifier:   5B:04:02:91:D0:14:E2:F4:F1:A6:88:A9:B9:BD:96:8B:CF:D7:0D:4A
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F43285848037B6E7C4A799B990A80DF00
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/100890b2-cb63-38f6-a327-be1ff3bbbb34.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     31898
IP address blocks:        2602:80f:9003::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:6e:7c:4a:79:9b:99:0a:80:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=fd02b54d-720e-46a3-acef-71a1a13948cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:5b:9e:91:82:3d:d3:3b:a5:84:29:ec:8e:
                    a2:5e:5b:c9:32:44:1e:d1:9d:8e:08:a2:a8:5c:a2:
                    6b:e1:22:ca:e5:e7:ac:c1:ac:4c:7c:0d:73:5b:be:
                    e1:80:70:7c:03:d8:4f:60:df:f8:30:e1:cc:0f:29:
                    ca:c3:93:2b:cb:22:ad:58:bb:43:3e:f0:c2:0b:89:
                    9a:93:e5:03:71:04:da:64:9d:3f:38:c7:f4:4c:8c:
                    3d:2c:95:61:15:11:64:ac:31:ce:91:7a:a4:f0:d0:
                    16:07:a4:94:04:91:e6:68:3e:8b:b1:62:6b:f7:6a:
                    b5:b5:d4:ba:f8:14:6f:3d:62:3b:1b:3a:b7:dc:e4:
                    38:2c:0f:03:63:87:e7:fe:5c:01:76:63:4c:8e:da:
                    ff:eb:ca:d4:c1:af:99:17:d0:86:72:38:57:73:78:
                    ab:50:aa:14:06:0b:87:60:68:00:96:18:44:e0:4d:
                    7a:60:23:2d:71:4e:ca:21:cb:81:3f:a6:f0:61:27:
                    13:8f:bc:50:30:67:00:89:af:97:7a:61:12:4a:05:
                    7f:89:b5:fe:ca:29:f6:08:20:5d:06:e8:f5:0a:51:
                    f7:a5:2f:f7:05:27:88:78:8a:97:d1:db:c8:a0:6a:
                    89:dd:4e:7b:5e:23:6c:a0:d0:d6:34:f1:2e:b8:2c:
                    39:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:04:02:91:D0:14:E2:F4:F1:A6:88:A9:B9:BD:96:8B:CF:D7:0D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/100890b2-cb63-38f6-a327-be1ff3bbbb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:9003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c4:ea:2c:52:0b:c3:08:b7:f8:35:e7:f2:74:dc:58:cd:04:
         a7:c5:ae:a9:fc:0f:c3:11:67:8e:13:c3:d4:35:22:0b:1e:b0:
         37:1c:49:48:e7:da:a6:d9:0e:19:1e:c4:67:b5:33:da:dd:db:
         a5:68:22:03:2a:e6:73:47:b2:bd:97:06:6c:51:db:fe:4d:65:
         17:a5:6d:02:a8:57:07:6f:20:17:44:3c:5a:9e:9b:42:bc:ad:
         28:39:24:7d:b7:40:7f:bb:30:bf:5a:83:38:ce:be:78:0b:c5:
         80:8d:59:4c:f6:3e:91:ff:6f:de:6e:96:d2:19:65:46:ed:4e:
         d1:33:6e:0b:5d:e7:26:99:e1:c9:b6:14:a7:f1:ce:f8:95:36:
         80:2b:cd:63:b6:cb:5f:d8:ae:8e:3d:e6:2d:80:31:d0:ea:eb:
         e5:e7:cd:4c:a1:01:cc:91:8f:13:27:b1:ac:21:a2:d9:69:21:
         c7:b4:7f:04:0e:bb:47:4e:dc:22:f5:52:7c:d1:dd:8c:79:35:
         d7:bf:dc:71:76:18:7f:31:fc:10:09:9d:1e:f7:1c:e9:94:bf:
         39:82:6b:d2:f9:11:11:18:11:40:94:25:b8:83:1d:2f:8b:bd:
         7d:59:c0:3f:8a:90:fa:73:70:17:a0:54:5e:04:b3:b0:f9:9c:
         b7:2c:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:07:28 2025 by rpki-client