Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0104ff7a-9f3c-3905-80ce-c2c8bb2e4537.roa
File:                     0104ff7a-9f3c-3905-80ce-c2c8bb2e4537.roa (raw, json)
Hash identifier:          1FQIRqRNABECbNjUufr5rZ47mZr5mMUZHJIAu5PuvLY=
Subject key identifier:   B3:65:13:E6:74:B1:24:A0:E7:D1:74:2B:FF:AE:FB:45:92:69:87:78
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858483B50165DDAB0DF66C0477580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0104ff7a-9f3c-3905-80ce-c2c8bb2e4537.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     22773
IP address blocks:        2001:579:62b5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:16:5d:da:b0:df:66:c0:47:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=95292512-8224-43c7-b587-f55636c44e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:9c:07:de:fc:19:9a:f9:19:7a:7c:3b:a0:
                    9d:57:24:24:2a:06:7c:31:80:81:2a:0f:7b:3c:2f:
                    50:71:27:e6:78:8e:65:bc:c6:26:08:e4:8d:ff:91:
                    d3:bf:48:f3:cc:be:a3:c4:93:cc:7f:a1:9e:38:d5:
                    bb:b1:6e:7f:0c:12:2e:a6:57:c1:68:e2:da:8f:a1:
                    80:ab:c6:87:36:8b:fb:b7:56:0e:02:58:ca:e3:ac:
                    63:37:57:a8:16:0a:85:65:03:0f:98:c8:dd:1e:c6:
                    59:5f:2b:90:56:05:58:03:16:05:a3:70:43:22:21:
                    9d:db:f0:ef:ff:af:51:6f:99:34:69:f6:1d:27:e5:
                    ad:9b:dc:64:71:b5:8c:03:e6:47:8f:ce:38:e7:41:
                    43:1f:0e:84:40:14:7a:a1:42:bc:24:85:1b:4e:08:
                    ce:ac:b7:7d:3b:04:69:32:37:a1:1c:31:09:5d:5e:
                    93:b4:53:21:db:3f:d0:d4:b6:7c:96:06:e5:b0:ea:
                    f7:0f:ff:66:31:eb:5d:9d:99:e8:4c:3d:91:8d:e0:
                    19:05:fb:20:58:46:2b:7a:ee:b4:60:cd:96:3a:f4:
                    af:80:9f:81:be:16:ab:91:b3:a8:ac:31:fe:8b:a1:
                    49:df:7e:9b:65:e4:3a:21:ef:56:7e:b9:31:ec:5d:
                    6b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:65:13:E6:74:B1:24:A0:E7:D1:74:2B:FF:AE:FB:45:92:69:87:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0104ff7a-9f3c-3905-80ce-c2c8bb2e4537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:62b5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1c:4e:b6:7b:4b:f2:9f:7a:31:e5:7c:ba:c6:ef:d6:34:93:
         94:52:65:00:5b:da:4a:59:5a:a1:ea:04:6e:65:8c:70:5e:b0:
         62:08:8d:79:f5:1a:5c:d4:30:3d:03:56:42:57:10:54:22:c6:
         b4:6f:83:84:53:c4:d9:c2:18:91:b0:80:05:84:5f:b3:18:81:
         ad:84:dc:63:95:02:53:a4:6f:4c:8a:12:90:64:04:ec:98:cb:
         8d:6f:e6:67:26:2c:44:b9:70:43:5f:e7:76:3e:8d:1f:1d:ac:
         3a:f4:7e:62:74:f9:1f:84:88:1d:e3:da:b4:bb:e8:70:06:2d:
         69:36:a0:3a:75:58:c1:9d:73:c7:13:c1:1d:1c:fa:14:7f:f8:
         9f:f7:3f:e7:24:b2:75:10:44:de:26:6a:df:22:b0:df:aa:d1:
         df:70:da:25:02:54:f9:89:fe:47:37:db:be:63:f9:35:d6:3a:
         0d:5e:03:fd:0f:7a:00:22:11:d1:31:f9:0a:2d:8f:88:e6:b4:
         45:73:d3:8d:05:9b:89:cf:79:f2:73:83:7a:3f:ae:53:c4:8d:
         bb:9b:64:7b:e0:9d:0d:f1:cc:ee:79:4d:38:49:84:d0:84:f4:
         2b:c3:f1:3c:9c:e1:fc:8a:9d:71:5b:78:fc:16:a8:dd:8c:2c:
         2d:31:20:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:51 2025 by rpki-client