Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa
File:                     2077fbb3-a712-382e-8a9f-fa3151f59015.roa (raw, json)
Hash identifier:          BbscMpOJwuW5fwg8OZdRNhjJsEWwpdTUbzIq6EGgspA=
Subject key identifier:   0E:E3:82:99:F7:61:78:FC:47:3D:57:09:BA:D2:30:28:C8:AE:35:8C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848305E85896A1E4F056E55AFC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa
Signing time:             Fri 13 Dec 2024 03:56:08 +0000
ROA not before:           Fri 13 Dec 2024 03:56:08 +0000
ROA not after:            Thu 13 Mar 2025 02:56:08 +0000
asID:                     13335
IP address blocks:        2606:4700:68::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:5e:85:89:6a:1e:4f:05:6e:55:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 13 03:56:08 2024 GMT
            Not After : Mar 13 02:56:08 2025 GMT
        Subject: CN=bf3a9839-d128-462d-a3d9-a2aaa38b0dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:a5:66:ff:69:86:5a:2b:5a:b5:a7:11:cd:
                    24:78:4e:57:f9:ad:9b:e6:9e:af:33:57:0d:70:27:
                    c1:a2:38:0a:99:d5:64:f5:12:d7:49:90:04:34:1d:
                    26:a3:3a:75:6a:e5:33:23:ab:bd:38:32:a8:d3:90:
                    d1:c1:eb:8a:aa:e7:02:14:77:2d:28:56:b0:00:f2:
                    55:8d:af:b4:c1:14:36:82:2f:36:c3:d4:42:b7:c9:
                    46:c8:67:6f:87:6d:9d:44:83:40:5f:cc:f3:cd:ae:
                    38:99:42:20:69:c7:22:05:8e:fc:3a:e5:83:a6:4c:
                    d1:a8:4d:42:ac:ff:b4:2b:3b:a9:2a:70:27:50:3b:
                    5e:94:cc:63:d8:ed:31:a6:c3:3c:ed:ec:9b:ef:3d:
                    3e:a0:cf:d3:86:e6:c8:0e:17:cb:3b:d0:c7:10:e6:
                    de:37:e9:7d:bf:8d:18:6e:1b:63:0c:ae:55:79:81:
                    95:8a:99:4f:b8:19:fc:5b:b5:90:27:ad:39:55:68:
                    d3:8b:a0:92:5a:b1:ef:aa:29:ab:d1:d0:ae:a8:da:
                    3a:f2:70:74:e6:c8:1d:dc:a5:af:64:18:ef:3a:8b:
                    e6:fe:b8:a5:da:7b:a1:f4:23:cb:79:0d:20:20:02:
                    e8:14:aa:c7:da:13:10:31:ff:54:e7:5f:4f:e6:20:
                    73:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:82:99:F7:61:78:FC:47:3D:57:09:BA:D2:30:28:C8:AE:35:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:68::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:19:3c:6a:3e:da:a4:7f:32:dc:74:94:cd:ce:03:49:d4:71:
         7e:7c:ce:5a:77:3c:9a:28:01:cc:1f:86:45:2c:3e:42:e1:4b:
         c1:9b:7b:0b:c5:22:7a:ed:f2:9b:4b:99:1b:c8:e6:1f:24:99:
         1d:75:de:fc:9e:08:a2:cc:6d:d3:0a:9d:58:e4:ad:7b:64:e6:
         32:a7:0d:aa:f3:f4:85:7e:2b:98:a6:94:53:c0:a5:a9:64:e8:
         75:40:aa:74:57:df:bc:1d:6a:50:24:c2:14:43:9c:e2:43:51:
         6a:56:a2:f6:9c:97:4b:79:c2:82:c5:cc:af:3f:61:39:a1:90:
         0a:de:c1:95:23:27:5f:f1:91:38:a5:8f:bb:7c:c7:1e:ca:53:
         9a:a7:14:df:28:e1:40:e0:73:c8:03:a9:db:82:c4:de:c8:0e:
         8b:28:5e:51:e0:44:2a:e5:c3:7b:44:d9:62:47:ef:cc:5a:06:
         ed:cc:e7:63:77:b2:8e:15:29:94:e7:24:c3:96:ad:56:28:c6:
         3f:5b:84:71:d5:ae:f4:29:a1:64:77:e7:cc:87:cc:a1:2e:8e:
         3c:7d:67:5c:61:3c:aa:0a:43:18:55:b6:0c:de:fc:93:7d:d7:
         7b:4b:a3:ac:30:03:d0:e4:0a:e7:11:8b:2e:1f:0d:29:3c:a1:
         4e:97:7e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:24 2025 by rpki-client