Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa
File:                     8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa (raw, json)
Hash identifier:          Sx7IbbpaWo+o5x7+pXqXb8NKCpILI79qOVwhcgHLJPY=
Subject key identifier:   3F:6C:D5:43:5E:03:A4:F7:18:FC:00:85:C1:BA:88:CB:2E:71:A9:4F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F1553EC2D5F79DDD7FD80C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        2604:cb00:f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:3e:c2:d5:f7:9d:dd:7f:d8:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=8d154b53-a600-4eab-a2bc-6b57e631bbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:b0:40:bb:55:84:84:37:9f:2d:6a:e1:5e:
                    9c:db:94:97:88:f0:24:f8:ab:94:4f:5f:e8:c0:f4:
                    1c:c0:55:50:06:22:8f:56:f2:28:cf:93:3e:96:54:
                    3d:c5:a1:a5:42:2d:e3:08:58:7e:01:e7:fc:83:bc:
                    8f:11:89:25:52:2b:fb:95:2f:6f:11:27:57:90:48:
                    61:84:23:d5:69:4d:b5:e7:91:58:b6:0d:d1:81:cc:
                    d2:7d:6f:06:85:8e:8b:59:79:8a:33:11:7f:a5:07:
                    83:2d:96:a1:e9:e3:ad:be:e4:69:a9:a3:be:87:16:
                    06:7b:21:cf:0d:e3:6f:e3:3a:86:4d:e1:44:71:aa:
                    e9:40:b1:6e:8e:cb:ca:f0:50:60:7d:c4:8e:3d:fb:
                    11:72:7f:7b:99:18:8f:90:bf:14:a9:bb:17:16:0a:
                    63:b2:54:6c:5a:b1:05:93:b1:3b:13:03:d4:26:ae:
                    de:1a:46:82:2a:00:cf:6d:12:cc:83:b3:2a:71:80:
                    80:2d:e6:a7:49:e1:1e:7b:3b:e6:c0:62:9f:42:96:
                    9b:81:30:0b:e0:c9:98:79:ff:c0:87:c5:73:19:57:
                    95:48:aa:dd:0b:37:80:7b:0a:95:32:e9:3d:1d:84:
                    ee:03:d1:00:13:44:d2:05:ca:18:21:4e:0b:14:7f:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6C:D5:43:5E:03:A4:F7:18:FC:00:85:C1:BA:88:CB:2E:71:A9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:ea:f3:20:55:53:c5:48:a2:91:72:9a:48:60:7a:6e:0f:
         a9:a2:75:f2:a8:b1:e3:20:0b:c6:aa:c4:01:f6:64:1c:d7:9f:
         fe:84:2a:86:f7:57:16:39:24:d4:fd:30:c7:86:9b:b5:4b:2a:
         12:91:eb:65:f8:fa:7c:1e:ec:a6:89:19:ef:72:4d:04:24:fb:
         37:f2:0e:52:57:1a:dd:3c:ce:ed:76:c8:17:97:5a:96:00:49:
         d9:c6:3a:26:d6:f4:1e:91:ca:fa:dc:ff:54:6b:63:8c:89:2f:
         00:54:96:2d:9a:e5:44:b4:50:e7:44:8b:03:cf:97:3c:a1:ba:
         8d:62:42:59:5d:da:c5:8a:10:a1:d7:9e:f4:45:0a:e8:04:23:
         be:89:be:eb:85:47:03:d1:55:01:5e:04:b9:70:e1:d9:a7:59:
         68:42:76:08:c0:a8:b9:e0:0b:31:e3:ef:47:84:03:77:e0:c4:
         f5:e8:b6:64:fc:2f:1d:05:d0:53:3b:00:78:4d:ab:de:06:18:
         b8:7c:e5:4a:43:83:37:89:c4:7e:6a:e2:92:33:f7:06:20:1a:
         1f:c6:d8:10:0d:88:93:af:f6:bc:ac:2d:77:d1:0a:e2:05:64:
         0c:70:38:3b:87:44:5b:58:0d:9a:20:58:fe:5b:38:06:cb:52:
         05:cf:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:39:12 2025 by rpki-client