Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa
File:                     cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa (raw, json)
Hash identifier:          8wTTW0PKvuJXdyHyNDBjXz8vMpVvHXoOv5/FR0g/Sxk=
Subject key identifier:   FA:15:C8:00:0F:93:57:DA:8F:FF:DC:FC:AA:6A:DA:7E:08:A3:EF:47
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F432858485470245C8008A3193761E680
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1060::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:24:5c:80:08:a3:19:37:61:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=9fbe917c-51df-4f12-b3c9-ac0c57768a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:1c:6a:7f:5f:74:63:74:6b:a1:0e:a1:f4:
                    32:73:d7:27:4a:9a:54:ff:e3:e8:0f:c3:85:76:99:
                    58:28:ce:de:13:ce:d9:61:e5:9e:18:25:00:db:9d:
                    d7:0e:94:88:10:e3:55:64:9a:04:cc:19:33:01:9a:
                    9a:54:69:24:21:9c:ad:35:79:0c:0d:76:04:0e:9c:
                    72:59:62:20:6e:40:87:e9:04:e3:82:90:55:90:a1:
                    60:b0:fe:02:0d:2f:c5:6d:49:90:41:18:79:cd:9b:
                    59:05:dd:99:08:3c:0d:08:b6:33:eb:d5:7b:12:12:
                    e7:fe:82:91:1f:2f:23:02:75:1d:89:02:1b:d8:06:
                    d1:f5:4b:dc:f2:5a:7a:75:ed:1d:43:d2:58:ad:9f:
                    5b:a5:25:56:09:70:47:01:87:b7:2b:19:71:a4:60:
                    ad:bd:7f:ca:ff:b8:65:08:cc:1a:4c:de:ae:08:c8:
                    05:c4:7f:d5:86:8e:33:79:3a:04:39:ca:56:e1:5d:
                    18:90:9a:a1:6b:a0:b9:f3:93:c3:4d:74:7d:f5:68:
                    c8:41:07:ca:62:70:7e:93:b0:47:34:d6:d3:77:a8:
                    fe:6e:da:16:a5:6d:75:fc:e4:85:9c:e3:f9:4d:d1:
                    05:9d:ed:b2:35:94:64:1c:41:67:99:f0:4e:d3:df:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:C8:00:0F:93:57:DA:8F:FF:DC:FC:AA:6A:DA:7E:08:A3:EF:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:70:b0:d4:59:dc:fa:7b:a0:9e:f6:42:36:67:e1:ae:b2:5a:
         e5:ca:43:71:d8:25:1d:e4:a6:1d:db:06:bb:bb:10:e8:e5:99:
         7f:4a:be:83:82:8e:f4:ef:df:4a:5f:b7:a3:5b:3e:28:dc:69:
         34:cd:64:0f:d9:f5:f3:95:da:68:cf:22:68:9f:18:3a:21:68:
         e3:80:79:61:3a:0f:5c:80:50:e4:04:c2:a9:70:82:38:7c:69:
         63:e6:d3:11:27:4e:da:0e:26:28:1e:54:9e:b3:0a:ed:a6:eb:
         bc:0a:a6:fa:23:42:d4:8a:19:cd:9f:45:36:63:8f:dd:a9:96:
         46:3d:af:0a:5c:e4:72:2d:59:47:54:02:a3:c8:1a:36:2e:d7:
         c9:99:35:f6:eb:ad:07:eb:f1:74:a7:15:29:d4:ca:5e:a2:8d:
         a9:1a:89:ee:04:6b:95:6a:86:56:b3:84:dc:3f:80:13:b6:ce:
         fe:ed:2d:ae:7b:ed:d7:16:6d:84:45:b3:27:42:c5:f1:b3:14:
         19:66:a1:17:9b:54:94:8b:54:8d:9f:40:11:9e:a0:5c:87:2c:
         7e:b5:7a:d8:1f:09:99:04:16:5f:f4:0a:98:db:c3:12:c0:ac:
         5b:c5:2f:19:65:0c:a6:74:08:cb:39:79:b9:5a:16:20:0c:ce:
         a1:c3:88:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:42 2025 by rpki-client