Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9985ba54-b696-3367-9ef8-a9492be60140.roa
File:                     9985ba54-b696-3367-9ef8-a9492be60140.roa (raw, json)
Hash identifier:          evXLWsuLPzX5SsrDXsokoyq+o0W789+nnBM7nckQ8i0=
Subject key identifier:   64:E1:C2:49:0E:3E:8E:21:F5:53:F1:75:98:42:BF:D1:91:AB:91:03
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AFFE9F0C1B5FB155A6FC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9985ba54-b696-3367-9ef8-a9492be60140.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4200::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:ff:e9:f0:c1:b5:fb:15:5a:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=caf53362-1eb3-4db8-98e6-fb3b9ac52e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:2d:89:a0:a3:3c:ed:b6:7b:5e:70:e4:b2:
                    6e:18:7b:24:86:66:28:12:a7:6b:09:fc:c8:2c:3e:
                    ee:ba:b2:fb:f5:66:b4:92:e7:8a:b5:4b:4c:8b:9a:
                    f7:59:41:ac:05:7c:f9:6e:bd:4c:5b:f4:d2:90:81:
                    16:b6:68:36:ae:ed:e0:69:ff:a8:78:f3:73:33:46:
                    6c:0a:26:3b:59:45:f9:5d:a7:9c:bc:d8:ea:4b:b4:
                    0f:9b:a1:81:f5:b8:7c:75:83:3c:54:00:f1:29:a5:
                    23:76:0a:38:04:7f:a0:9a:5c:73:1b:96:11:04:89:
                    0e:5d:f2:26:89:9d:d0:9b:1d:a3:6e:7b:d2:a8:34:
                    e1:59:47:51:67:cd:3b:50:03:88:b1:0a:b7:7e:ef:
                    6d:b6:d3:67:31:b6:cd:fd:cd:7f:e1:49:00:57:a0:
                    0f:c4:20:3a:40:c3:de:b7:ae:4e:f8:c4:28:f1:7c:
                    1f:c2:46:ad:53:5a:71:f3:3a:3a:be:78:f4:81:1f:
                    89:c8:aa:95:f1:c0:f6:d5:1e:a4:94:eb:5e:7c:75:
                    5f:61:e6:e2:ac:a9:06:f4:93:fb:0e:a7:36:57:53:
                    11:9c:06:7e:56:1a:2d:4c:29:68:77:1c:a4:90:2c:
                    f6:b9:ce:14:51:16:81:39:ed:96:d9:ab:7f:95:15:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E1:C2:49:0E:3E:8E:21:F5:53:F1:75:98:42:BF:D1:91:AB:91:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9985ba54-b696-3367-9ef8-a9492be60140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ca:21:0a:bf:54:ea:5c:9d:29:c4:a0:00:25:2c:28:f4:a2:
         bb:60:ad:0b:85:6d:52:2c:1a:59:96:16:5b:e3:8e:a1:d9:89:
         44:ea:1a:99:af:e1:1c:27:71:70:06:a5:38:3c:05:c5:4e:05:
         47:96:34:fd:cf:98:8b:46:dc:ef:bf:a8:be:40:66:56:f4:c5:
         c6:d2:49:a2:35:fc:14:1a:ef:11:0f:4a:48:41:be:62:72:b6:
         7b:73:47:53:ba:2e:39:fb:7c:20:95:de:d5:eb:99:da:08:4e:
         ba:3e:69:a9:0b:75:91:57:eb:4e:ad:d9:cc:c0:f8:5a:82:47:
         d7:39:a1:48:dd:81:46:49:a1:17:aa:f5:71:fa:46:00:9c:c4:
         e3:05:71:75:25:47:1c:e6:63:5e:2d:03:b2:88:d3:6e:ab:71:
         8b:2c:3b:35:29:54:4f:99:23:b6:ee:84:1e:aa:2a:e7:7f:01:
         2c:07:86:d1:83:d8:db:82:e4:f7:32:f8:47:94:4d:8c:30:1e:
         06:be:98:e0:f3:20:62:ae:82:90:37:a7:1f:12:57:3a:70:ca:
         46:94:cc:48:fa:3f:eb:b0:58:1c:c5:fa:f8:e3:51:4b:e9:b2:
         db:00:be:35:89:d7:71:48:e7:68:59:85:16:4f:e7:12:8d:69:
         c8:53:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:51:46 2025 by rpki-client