Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667cb728-ad3b-3d7b-abf2-c9bfb3d6836a.roa
File:                     667cb728-ad3b-3d7b-abf2-c9bfb3d6836a.roa (raw, json)
Hash identifier:          3/DwO52CDS+LIkhdRu/IhjsLqQzWogx3pB04s/GO4fI=
Subject key identifier:   26:DC:B1:D8:B0:27:D0:A1:BB:45:18:5F:AA:3F:1F:E1:11:1E:A9:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AD305A7D17B08412056C8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667cb728-ad3b-3d7b-abf2-c9bfb3d6836a.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        2601:18c::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:d3:05:a7:d1:7b:08:41:20:56:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=d898e8e3-9112-43fd-be2d-dcae94eb274a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:66:1e:b6:64:5e:8a:24:11:4d:f1:40:c3:
                    eb:64:b7:01:92:0b:27:b0:64:b9:6d:e7:3b:bd:31:
                    7d:ba:92:2e:57:72:61:5d:88:39:dc:02:2b:85:3c:
                    1f:a4:fc:84:02:4b:e8:92:af:03:b4:cf:80:4a:21:
                    15:83:73:80:86:b0:7c:9c:53:a8:c5:f0:75:51:86:
                    b0:73:35:e2:09:76:4f:fd:0b:83:73:c8:65:ef:9c:
                    85:f1:82:b1:d2:ed:7d:c0:c2:9e:29:23:9c:f4:df:
                    88:8c:59:aa:4d:30:03:14:7d:f7:ca:d3:09:3c:fc:
                    ca:d1:67:83:07:4e:44:c2:f5:dc:9e:83:36:29:43:
                    1e:14:de:a5:9e:85:64:16:f8:ff:08:e0:2e:c3:77:
                    c1:bf:85:89:8a:05:a0:a1:a8:ca:34:24:9c:6e:13:
                    d5:08:38:d1:67:9e:e8:7b:18:a2:e0:d2:2c:0d:04:
                    1f:b5:76:22:60:6c:3e:9b:f3:38:11:53:bc:bf:89:
                    89:7d:54:f2:5f:0e:47:e2:69:41:66:36:95:b1:44:
                    a4:9b:f1:fa:24:61:1f:1a:0a:47:25:11:33:6a:eb:
                    62:e6:e3:b1:1f:1f:fc:11:2d:9e:e3:29:60:3a:86:
                    e7:bc:b2:8a:dd:82:c0:17:f1:92:75:33:7a:72:df:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DC:B1:D8:B0:27:D0:A1:BB:45:18:5F:AA:3F:1F:E1:11:1E:A9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667cb728-ad3b-3d7b-abf2-c9bfb3d6836a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:18c::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:fb:07:97:17:af:96:39:f6:d2:87:a9:cb:33:e6:28:9e:3d:
         43:d7:e9:63:a6:79:6e:07:0b:a3:53:71:87:ba:fa:43:28:dc:
         23:ee:71:48:8a:be:ff:2d:73:7f:f1:cb:93:c4:c5:44:29:57:
         2f:38:d2:9d:56:e8:54:64:e1:e7:28:a0:96:36:60:2b:dc:14:
         9f:1a:52:2b:bc:de:57:d7:d5:72:40:6c:06:53:21:5d:37:06:
         a6:bf:0e:42:23:82:72:86:be:80:73:dd:b7:c4:dd:0e:98:a0:
         b8:92:67:54:de:d7:e7:ce:c8:9c:b2:a1:ec:62:26:f9:d5:89:
         fb:06:9d:bf:34:4f:8f:10:f0:bd:80:5f:39:bf:88:dc:e8:46:
         bd:24:1c:5a:99:91:17:b2:42:43:d9:50:21:c7:d3:99:6f:df:
         62:a9:50:46:d2:b5:c7:1c:c7:c3:23:f4:c1:a2:b6:c3:1f:2e:
         a8:17:69:f4:ae:03:c0:c9:8c:17:eb:b2:ff:a9:36:a8:c4:fb:
         00:8e:00:7d:b2:43:06:04:22:30:9b:3e:f5:d2:d2:90:61:54:
         57:40:41:77:fe:97:ac:2d:9c:bc:83:19:70:8d:57:6c:30:5b:
         17:49:2a:26:6e:11:a3:bf:0f:6c:02:c0:ac:d6:f6:25:df:8f:
         ed:ce:68:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:48 2025 by rpki-client