Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ad930943-9046-3b79-85f4-d46214bcc2a1.roa
File:                     ad930943-9046-3b79-85f4-d46214bcc2a1.roa (raw, json)
Hash identifier:          8aXmh/5aBWH1j/8O2bRsnFzEkeS+LLCwC5UB6qErHRI=
Subject key identifier:   1F:68:C3:B6:8C:B1:18:9E:B7:33:81:82:23:AC:52:81:DB:E7:5B:54
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285847FB1A2919FABD5FBB6314B000
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ad930943-9046-3b79-85f4-d46214bcc2a1.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     11537
IP address blocks:        2001:468:f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:29:19:fa:bd:5f:bb:63:14:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=0e2d1a82-e28c-48ce-97df-84c578eb833a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:d3:5e:a6:f3:40:d2:84:d5:ac:2b:86:f6:
                    3b:d7:77:a4:6c:57:a0:02:29:51:c2:97:08:81:15:
                    99:5e:e3:8a:68:75:d0:ec:67:6c:85:cd:52:0b:b8:
                    98:c7:12:f0:8b:f6:8f:5e:61:a7:54:d7:12:1e:ee:
                    49:90:5c:2b:78:b8:3d:58:e6:c4:cd:37:c0:60:b0:
                    dd:29:46:3b:b3:82:a4:73:eb:31:eb:57:3e:67:67:
                    71:01:18:55:72:1c:8e:73:e1:a4:83:fd:64:d0:05:
                    52:84:1a:78:46:b8:27:05:e0:ae:63:78:9c:1d:da:
                    5d:52:65:f7:45:b4:53:60:a0:c5:16:02:b3:3e:1f:
                    2d:2c:fe:c9:8a:6a:1d:e8:6b:ec:ea:3e:7d:67:b4:
                    45:11:36:12:33:05:9d:33:29:5b:bd:16:13:e6:77:
                    39:1a:11:58:98:d8:ef:b2:fb:f4:7b:ed:0a:84:d2:
                    98:50:74:4d:31:76:27:85:8a:c5:42:28:60:54:fb:
                    cf:14:66:09:e4:c6:bf:21:3c:0b:65:e2:0e:ea:bd:
                    12:69:1b:65:56:6f:8b:85:ec:dc:02:e1:e8:e9:c6:
                    93:58:ce:4e:16:4e:a2:dc:16:57:73:11:d8:a1:ed:
                    ca:35:df:16:4d:a3:ad:b9:81:a8:81:7d:46:36:75:
                    95:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:68:C3:B6:8C:B1:18:9E:B7:33:81:82:23:AC:52:81:DB:E7:5B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ad930943-9046-3b79-85f4-d46214bcc2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a9:c7:8a:3a:88:a0:ae:5a:18:87:9b:0c:c4:f2:92:35:fc:
         8e:58:4d:9b:86:ce:e0:0e:d8:72:62:bd:2c:54:cf:d8:b1:96:
         b3:21:1c:27:71:a6:6a:a6:9f:48:e5:fd:fb:1b:cc:7c:12:05:
         9a:84:a4:00:f1:71:f7:03:29:81:52:64:a3:2b:7e:33:9b:16:
         db:20:13:ae:1f:bc:7f:2b:8e:96:80:8e:07:68:a5:94:24:d1:
         ae:0e:47:4b:65:0a:53:00:3a:c2:14:9d:64:b5:90:55:ff:04:
         05:71:38:e1:e9:08:82:04:1c:bb:f5:2d:83:c9:9e:80:6f:f3:
         51:2a:47:a9:9e:f9:7f:c9:99:f6:50:9a:a4:bc:db:e8:13:38:
         6e:ac:6a:9b:f2:04:b2:01:96:85:7a:5e:f8:c7:63:7d:bc:28:
         61:8e:ef:8e:3d:a9:94:d8:01:87:88:71:ff:d6:88:f9:b7:54:
         a6:38:03:61:4b:22:75:f3:14:74:8c:46:b6:1f:79:ba:03:ed:
         4a:0a:f2:33:01:1d:98:4b:ba:ed:e5:c4:e3:ad:d0:a1:10:4e:
         c2:43:4e:cd:cc:cf:6e:3f:46:98:4b:06:50:8a:81:80:04:76:
         b4:96:e3:2d:a7:5e:12:4b:02:9e:d9:b1:6a:09:9f:65:71:3d:
         57:51:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:11:20 2025 by rpki-client