Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a176d9b-785e-3762-89c5-a9affb346f74.roa
File:                     9a176d9b-785e-3762-89c5-a9affb346f74.roa (raw, json)
Hash identifier:          U8tL6tTUNLoJ6a/HIFzsIKSdhubW6ZQ/8paSoT+nMh0=
Subject key identifier:   E5:C1:15:43:93:79:23:25:D6:F4:A1:1F:D9:E2:DC:A8:97:5A:F0:97
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584839EAC9C673177274372D6600
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a176d9b-785e-3762-89c5-a9affb346f74.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     397601
IP address blocks:        2001:418:1456:b22::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:c9:c6:73:17:72:74:37:2d:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=6f246f0c-ea80-4c4e-9571-206921e4fd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:b7:19:e2:8f:25:b3:05:78:ff:a5:10:80:
                    92:75:69:06:9a:77:c7:99:bf:71:be:ab:48:c3:1c:
                    38:4e:b6:ec:b6:e8:f4:55:ad:c7:ea:62:d2:29:68:
                    7e:5d:4e:5c:a1:56:f6:1f:5d:17:46:cb:10:99:0a:
                    56:5f:c2:2b:28:bf:75:8e:de:34:d8:4b:82:18:93:
                    f2:f9:3d:bc:5a:06:38:19:c8:02:d1:c2:55:d8:87:
                    37:9d:d4:dc:0b:53:54:db:57:89:47:b5:08:ce:bc:
                    3d:ce:85:77:89:8f:e2:21:ba:0d:29:ec:ad:03:09:
                    64:d1:37:82:06:08:a6:c4:16:12:a3:d4:96:bc:01:
                    bd:6b:59:38:4b:1a:e6:c6:72:1f:86:c3:56:ef:40:
                    2d:25:c6:15:48:c7:17:cd:d4:2d:d0:3b:b5:42:51:
                    44:e6:64:5d:8f:ae:a3:9b:fb:10:f6:74:69:8d:43:
                    b8:f5:ad:5a:10:d8:e9:cb:5e:83:25:03:3c:9b:51:
                    4c:17:ce:2b:cc:89:74:af:45:de:55:1e:14:78:a4:
                    44:67:be:6f:9c:bf:ad:bb:20:01:04:6b:7b:54:ff:
                    b3:fc:10:e6:4f:50:0b:15:13:c0:25:6c:1b:3d:a3:
                    0c:5b:fd:07:9f:41:c1:f2:68:20:59:cb:e5:95:e7:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C1:15:43:93:79:23:25:D6:F4:A1:1F:D9:E2:DC:A8:97:5A:F0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a176d9b-785e-3762-89c5-a9affb346f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b22::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:41:e0:db:92:e2:7b:84:54:1c:72:a3:05:47:a9:55:88:f5:
         29:51:7e:2a:65:1d:0f:10:98:46:22:70:76:9e:c1:58:b8:61:
         fe:b8:9a:39:41:9e:19:ed:e9:ad:2c:36:ed:49:0b:1c:39:c0:
         00:24:57:68:e2:0f:c4:d6:46:aa:c9:24:21:33:13:2d:1e:3d:
         b3:b6:20:09:aa:d6:aa:7d:08:ca:9e:3b:91:4f:c4:c9:75:3b:
         2b:80:ef:f0:a9:27:5d:2e:b7:c0:d1:c4:d0:85:3a:57:a0:00:
         ba:4a:7e:cb:cc:bf:47:6a:78:5b:b7:02:28:82:55:9b:6a:9d:
         aa:26:bf:66:d8:d8:3d:73:07:51:01:be:a2:77:e8:8c:a6:9a:
         48:51:ab:3d:b3:50:eb:15:cf:28:4d:b1:f8:60:23:f3:2b:01:
         3c:0e:75:a9:6c:11:13:71:69:88:9c:72:90:50:c9:95:a3:a5:
         32:56:fd:24:b3:36:35:8f:89:14:76:3d:b4:c5:47:20:f7:ad:
         d6:e0:00:25:df:93:fb:a2:b9:9c:fa:3e:48:7e:ff:9f:e9:70:
         7b:5d:90:59:fc:40:c7:0e:b2:bb:3e:b7:3c:be:3c:fe:19:cf:
         89:f4:0c:1e:01:72:0d:43:e0:04:bb:11:bc:f5:1c:ea:83:ca:
         b3:4b:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:59 2025 by rpki-client