Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e8d4c08d-0a80-39a6-993a-a1b3559f9c22.roa
File:                     e8d4c08d-0a80-39a6-993a-a1b3559f9c22.roa (raw, json)
Hash identifier:          GFiZLhnsOWoGQMQ/Q6gUsSFKRJ/QvsHqbdd4DzmEDK4=
Subject key identifier:   35:6C:D6:1A:DE:AF:4B:5F:DA:57:C5:F3:7A:58:61:A3:50:AB:10:FA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AEE14E6ACECE4B93AE280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e8d4c08d-0a80-39a6-993a-a1b3559f9c22.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:48d0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:ee:14:e6:ac:ec:e4:b9:3a:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=c69de65e-3c9d-4c04-bdfa-ad242acb3f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:93:70:15:f2:3e:94:73:9f:b3:38:e6:f7:
                    34:f4:65:36:6b:1d:e9:77:2b:54:d9:db:9e:e3:74:
                    8a:1b:ff:fb:55:09:a4:3f:3f:4f:65:d3:e4:a3:14:
                    ad:e2:ea:69:67:8a:50:1a:0f:85:93:b8:a1:fe:c4:
                    a7:04:46:ab:b7:08:98:49:11:8e:1a:a8:0f:93:21:
                    d3:a3:66:89:95:59:29:75:7e:89:8e:5c:7b:76:0b:
                    6b:d9:5e:db:a8:3b:dc:16:64:10:e0:4c:64:4d:f6:
                    c7:60:e5:e1:e1:ee:ed:32:d0:ad:27:82:08:c3:8d:
                    23:aa:cc:13:6d:e0:c4:3b:5a:a5:fc:d9:f2:67:9a:
                    a6:8b:d4:3c:9d:23:3d:9b:6f:e3:ef:1d:a1:12:ee:
                    53:f4:6e:55:0a:98:c1:07:0f:36:c2:69:bb:8f:d1:
                    e0:06:a5:3b:11:9a:f6:0b:4a:8b:77:65:d6:ce:d8:
                    a1:60:42:9c:76:b1:ff:6a:53:46:07:84:64:77:17:
                    56:ef:98:8a:f9:d3:9d:19:c8:5b:7b:bc:91:fb:69:
                    f0:d7:7d:ad:df:f0:8e:7e:af:98:7c:7e:64:3e:4c:
                    d5:ec:74:06:61:46:73:3d:50:43:c9:15:c7:7f:61:
                    5d:08:7d:ac:a0:64:df:3f:9c:eb:88:d3:f0:ba:a5:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6C:D6:1A:DE:AF:4B:5F:DA:57:C5:F3:7A:58:61:A3:50:AB:10:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e8d4c08d-0a80-39a6-993a-a1b3559f9c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:48d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:9a:d4:2b:d7:ef:53:e5:67:35:3e:fb:c5:a0:b5:ab:07:
         f9:d3:b0:c0:5c:9d:73:1b:c9:7d:89:0a:51:57:1d:c7:df:3c:
         a2:bd:06:e3:55:2f:f3:4e:a2:4f:f6:85:53:b1:02:df:ff:34:
         d0:0b:8b:3f:eb:fe:27:87:15:d3:9b:e9:65:1f:0b:f4:2a:61:
         44:1e:4f:ea:cd:c8:ca:41:c8:be:ee:b0:45:71:bc:4e:34:d1:
         8e:0f:fd:38:e6:61:d6:12:33:bf:aa:20:9c:a8:bf:b4:11:90:
         54:77:23:ad:41:68:70:25:85:5f:47:10:80:10:4e:0f:5d:f9:
         47:36:2a:f7:2e:fa:09:a0:e5:43:fb:6c:44:2e:41:40:a3:40:
         79:bc:59:f7:b0:d7:01:cd:f1:59:02:ad:f9:77:7c:62:e2:3b:
         fa:ec:f8:be:ee:29:aa:81:a5:91:ea:38:42:53:67:c2:19:09:
         6c:14:0d:08:99:1d:d9:fe:d5:81:1c:bd:5d:bb:9d:34:df:3d:
         61:27:6d:49:e3:06:a2:31:43:1a:6c:49:cf:89:ff:87:22:9d:
         75:0b:bd:a0:ef:ed:bd:13:2d:f7:83:60:66:3f:a4:5c:17:f9:
         61:cb:0b:1f:95:44:f8:0b:61:64:b5:49:3d:70:4e:75:54:f8:
         23:81:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:19:40 2025 by rpki-client