Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117a675a-437d-3d26-bd21-20643d61ed4f.roa
File:                     117a675a-437d-3d26-bd21-20643d61ed4f.roa (raw, json)
Hash identifier:          EgTPYK1rXJLQlV3Cb4zOm505nihorRjBztShEDVHRAc=
Subject key identifier:   79:AF:E2:42:F0:BB:43:12:62:B8:B5:1E:70:6F:BE:A3:0C:0A:60:1F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F1550F7E0E54680EB26AAA80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117a675a-437d-3d26-bd21-20643d61ed4f.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        2604:cb00:a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:0f:7e:0e:54:68:0e:b2:6a:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=fda1115d-7892-49ad-924e-67b16c14ca7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:e2:b0:c9:50:24:7c:ef:88:7e:a1:1f:f1:
                    b9:23:0d:a5:b1:59:89:74:af:06:fd:e5:fe:60:0d:
                    a9:d1:36:fe:35:74:5d:6d:44:d5:42:62:58:b4:96:
                    40:6a:70:fc:b0:c1:62:34:13:26:4e:a4:74:59:9a:
                    ff:47:e8:09:0a:2d:49:ee:16:ae:3d:39:5a:82:be:
                    25:75:56:22:08:34:f3:f0:c9:48:ea:0b:8a:f3:b1:
                    70:10:d2:84:fe:d7:f8:74:89:6e:d7:d1:02:80:d3:
                    b6:64:a3:f5:74:66:3f:2a:da:f4:4e:df:6d:47:e1:
                    01:81:3a:db:a9:d4:56:ed:18:c8:2b:c0:58:d3:91:
                    44:de:32:27:1e:c7:d1:72:21:04:7f:99:3d:af:9d:
                    21:12:12:46:d7:c6:f2:95:67:02:39:e7:2d:af:d0:
                    eb:1f:85:45:b9:93:e8:ae:02:35:dc:5d:0e:02:ee:
                    9e:08:31:58:1e:19:5d:d7:20:15:79:2a:8a:50:e0:
                    a5:ac:df:5d:78:a9:17:ce:77:e9:93:df:4f:a5:8b:
                    8a:bf:f4:8a:52:c0:18:6b:0f:56:2b:15:8a:07:24:
                    79:c3:21:12:9e:78:eb:d9:25:d9:f0:31:cf:30:b4:
                    7b:98:bf:0f:a9:d5:db:c4:01:3e:bc:2e:80:78:5e:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:E2:42:F0:BB:43:12:62:B8:B5:1E:70:6F:BE:A3:0C:0A:60:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117a675a-437d-3d26-bd21-20643d61ed4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:60:1b:0a:b6:0b:6f:74:c3:77:bd:e9:90:5a:48:6e:f2:f0:
         d4:d3:30:4d:ce:61:22:c7:11:f8:46:23:7c:70:85:98:d4:00:
         ed:06:7b:3b:5d:43:97:20:f5:ea:46:7a:e3:44:2c:67:f3:42:
         ee:40:9a:b1:14:e8:68:47:58:a8:06:c4:0b:77:14:24:9d:3d:
         24:ff:9b:2d:90:d2:30:d6:b9:7e:a1:12:50:4c:38:2a:78:73:
         97:70:cf:0f:16:22:5f:27:2a:bf:73:e9:8c:3d:86:59:47:7e:
         68:a2:55:65:8d:8d:69:c8:1e:70:a3:06:97:4f:2d:eb:a9:a9:
         6a:61:d5:56:d8:8f:c7:2d:03:0f:06:29:37:46:fd:5e:08:1c:
         8b:f5:40:21:09:dc:a0:11:5e:fd:14:cd:fd:04:ed:6b:37:90:
         06:a8:13:fd:43:48:16:11:7e:aa:51:41:a4:65:a6:f6:ad:50:
         7a:fd:53:71:8a:fc:75:3e:ef:bf:4c:43:58:22:a1:cd:86:0e:
         06:e0:3b:f1:b4:c8:7a:3e:3b:5b:3a:e3:27:2e:9b:7d:6d:ac:
         63:6a:81:dc:99:e9:4b:29:c4:78:d5:1c:fc:76:a4:ad:48:31:
         31:76:2b:60:36:be:78:30:26:c8:9e:ad:01:76:6b:67:95:cd:
         95:64:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:56:30 2025 by rpki-client