Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa
File:                     d4b45eb4-09b2-3b7d-a70a-922354aad665.roa (raw, json)
Hash identifier:          PSY1Nvz9y3odNSNk7ZpLojNAymMdkcWnGtITXDgamL8=
Subject key identifier:   1E:AD:95:F2:09:75:FB:F5:54:35:44:F4:C8:88:E2:E2:95:30:E7:8F
Certificate issuer:       /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7
Certificate serial:       010D0C9F432858483455665394092C3C404BDE00
Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     394111
IP address blocks:        2607:6f00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:66:53:94:09:2c:3c:40:4b:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=e8f28ea1-b94d-4c2b-83f1-a655f9f2b353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:bc:1b:dc:2e:68:3a:17:96:02:9b:5a:53:
                    55:06:41:24:85:61:28:da:0e:fd:93:a1:44:3f:c1:
                    42:05:31:b8:07:24:30:e0:1c:fe:15:fa:b5:b1:1b:
                    63:c3:b7:82:f3:71:e7:af:45:ef:93:74:f2:32:56:
                    66:f2:d0:38:ed:e1:36:4d:48:e2:a0:90:21:39:eb:
                    e9:68:85:77:88:65:3f:ff:2d:b6:f5:c8:24:b7:39:
                    ec:e4:6a:8a:36:5f:05:46:be:9f:50:45:c1:0a:21:
                    b9:cf:38:fb:af:cc:ca:3b:b9:97:01:d3:34:83:82:
                    33:f3:49:dd:33:77:36:6a:22:85:6c:a3:1b:c1:5e:
                    0a:62:02:b7:89:83:1d:35:ea:fd:39:75:03:39:02:
                    e4:55:2a:c9:4c:fb:b7:51:cc:33:74:53:ac:92:36:
                    7a:7c:34:1b:f6:a5:27:c4:15:84:8e:a6:cf:21:7e:
                    cc:f9:50:02:a2:7f:31:30:d4:26:03:3b:80:1f:18:
                    54:a9:4e:34:c4:36:b1:1a:bf:93:4c:7b:be:4d:04:
                    69:2e:ce:4d:de:d9:da:7d:dc:92:49:c7:fd:2c:4f:
                    7e:43:07:22:aa:bb:ce:a3:c6:f1:3c:62:5e:9b:91:
                    45:cd:2c:9b:6f:0f:a4:a0:ff:82:d7:83:3f:fd:01:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AD:95:F2:09:75:FB:F5:54:35:44:F4:C8:88:E2:E2:95:30:E7:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2b:f3:2a:4f:63:ac:6f:83:d4:c8:55:af:12:bf:29:c5:f4:
         35:76:c4:e9:e3:f6:52:8a:e1:0f:92:7b:c5:b2:a5:14:99:d6:
         c7:3b:ba:a7:d7:e0:f1:e7:20:2f:b3:2b:8f:4f:ed:e9:e3:8c:
         fb:f1:3f:44:8c:66:c8:f0:b2:88:42:41:df:28:58:27:ad:01:
         5a:0e:67:2d:e0:3a:21:b0:85:20:c4:8f:ee:5e:1b:5c:69:81:
         9e:4e:f6:31:62:d4:e7:9e:3d:aa:a3:c8:3d:41:0e:ec:10:00:
         9b:41:29:de:90:4b:70:4d:c3:b6:0e:5f:57:f7:9a:0b:f6:82:
         dc:7d:1f:cd:d0:ca:a9:1a:e0:63:51:e9:9b:dd:7e:9a:cd:bf:
         45:59:c1:04:92:08:93:f6:53:e0:59:05:37:ec:5c:de:bd:c7:
         33:bb:58:e2:56:02:31:93:9c:27:4e:90:1f:99:10:3a:90:b6:
         bd:6a:4e:4c:03:50:25:bc:38:7d:4e:3d:50:cc:a0:33:18:56:
         a9:5f:7c:6e:60:41:48:40:42:7d:b5:6d:8a:9f:f7:03:61:d6:
         ba:04:1e:0a:55:d9:2c:a1:96:1a:40:3b:55:ca:24:50:dd:66:
         1d:5c:7f:69:4d:9e:aa:0d:17:7c:09:50:f8:d3:5d:85:48:e7:
         70:ec:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:32:49 2025 by rpki-client