Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa
File:                     f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa (raw, json)
Hash identifier:          26VRgsUF2Fnq01nwat5Ds21XGCjRZecaqEFu8wyS7Ak=
Subject key identifier:   D2:E7:48:AA:1C:F6:0E:8B:A5:34:10:D4:BF:4F:3C:44:D2:E5:9F:A0
Certificate issuer:       /CN=17436076-857b-4889-82e9-22151c59a4b1
Certificate serial:       010D0C9F432858483E1ABD1CC0E57689C147F380
Authority key identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     46644
IP address blocks:        2620:bf:2000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:bd:1c:c0:e5:76:89:c1:47:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17436076-857b-4889-82e9-22151c59a4b1
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=9527a5c4-8b35-4a82-bfd0-c50f5b1c5c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:8b:16:e4:e1:c8:3c:d5:f6:ed:72:ab:fe:
                    2c:f4:37:bc:28:2c:8c:fe:01:b3:5d:fe:8c:7b:79:
                    d5:b4:ec:16:9e:c2:ea:23:61:73:f7:79:3c:93:11:
                    b8:79:78:81:3d:39:20:77:ea:64:15:ef:5c:e4:aa:
                    77:5c:03:a1:ff:cf:d1:3c:63:75:4e:9d:33:e1:e9:
                    09:9a:99:3a:93:e8:c0:c6:2f:ac:c0:0f:75:33:05:
                    97:66:51:05:60:94:20:11:8f:b7:58:b3:b8:6e:49:
                    2c:ac:2c:49:8c:04:c2:1d:de:86:25:06:df:d0:df:
                    1a:a3:1d:e4:41:4d:76:a6:8d:30:28:28:e7:84:57:
                    f1:11:31:d2:ea:46:89:4b:30:78:34:5b:92:38:06:
                    03:fc:ee:d1:05:39:70:cf:f9:00:92:95:f6:25:9d:
                    0a:bc:cd:a8:c0:2c:32:85:66:23:06:4b:fa:c8:64:
                    89:d8:ec:06:45:1a:f5:fc:c1:ea:0e:f7:5d:54:1b:
                    c7:39:31:ca:a9:d0:31:1e:ca:87:7f:39:19:14:32:
                    05:4d:ee:5b:05:80:a1:7d:76:5d:c5:d0:11:ca:e5:
                    77:54:31:6c:72:be:f0:89:64:da:d4:56:d4:1d:64:
                    69:85:ba:03:f8:37:70:96:e3:60:2b:e6:b2:b7:b1:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:48:AA:1C:F6:0E:8B:A5:34:10:D4:BF:4F:3C:44:D2:E5:9F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl

            X509v3 Authority Key Identifier:
                keyid:47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bf:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:64:82:93:f5:63:79:66:bc:f7:fa:c9:46:19:67:cf:24:a9:
         9a:1d:6e:92:d6:98:24:13:38:86:a0:54:19:45:6f:8f:6f:19:
         a3:a8:61:33:46:0c:6a:18:14:24:4b:29:b7:17:68:4c:80:c5:
         3a:ad:76:93:04:ea:d7:8a:a7:43:f4:60:a3:a9:61:e7:fe:5e:
         83:6d:bf:c8:59:3b:5d:9b:3f:f5:5c:87:ba:f1:a9:4f:8e:0c:
         a3:1d:31:e0:27:5e:46:cb:a8:30:53:d4:51:c4:2b:56:cf:ed:
         90:fb:1a:3f:e5:cb:5e:bc:f4:fe:ae:46:9c:0f:42:1c:67:c4:
         4f:e4:11:4e:a0:46:3a:4f:bb:ed:0f:9b:42:c8:35:75:44:af:
         e0:d0:4e:f0:c7:cf:e5:b1:64:aa:5c:d6:82:bb:88:ff:aa:c6:
         9c:ea:91:bc:58:a4:e0:b0:0f:e5:77:b1:48:16:cd:07:ff:ee:
         bb:fd:0c:67:43:b6:fd:d3:90:79:79:8e:1f:24:e6:6a:63:fc:
         94:b8:0d:ea:89:4e:f0:7b:9c:dd:7f:02:ed:a1:df:a7:2c:bf:
         10:fb:0e:84:92:77:d4:23:07:58:a8:12:7b:38:59:b2:cd:43:
         d6:06:e1:61:df:90:c7:79:79:83:ab:9c:48:e7:e8:e6:de:d0:
         a3:22:c0:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg+Gr0cwOV2icFH84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0MzYwNzYtODU3Yi00ODg5LTgyZTktMjIxNTFjNTlh
NGIxMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
OTUyN2E1YzQtOGIzNS00YTgyLWJmZDAtYzUwZjViMWM1YzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaGLFuThyDzV9u1yq/4s9De8KCyM/gGzXf6M
e3nVtOwWnsLqI2Fz93k8kxG4eXiBPTkgd+pkFe9c5Kp3XAOh/8/RPGN1Tp0z4ekJ
mpk6k+jAxi+swA91MwWXZlEFYJQgEY+3WLO4bkksrCxJjATCHd6GJQbf0N8aox3k
QU12po0wKCjnhFfxETHS6kaJSzB4NFuSOAYD/O7RBTlwz/kAkpX2JZ0KvM2owCwy
hWYjBkv6yGSJ2OwGRRr1/MHqDvddVBvHOTHKqdAxHsqHfzkZFDIFTe5bBYChfXZd
xdARyuV3VDFscr7wiWTa1FbUHWRphboD+DdwluNgK+ayt7EJowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNLnSKoc9g6LpTQQ1L9PPETS5Z+gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xNzQz
NjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1MWM1OWE0YjEvZjM4NWFkODItMzMwNi0z
ZTZlLWIzMjItY2RkNWYwMWEwZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTc0MzYwNzYtODU3Yi00ODg5LTgy
ZTktMjIxNTFjNTlhNGIxLzE3NDM2MDc2LTg1N2ItNDg4OS04MmU5LTIyMTUxYzU5
YTRiMS5jcmwwHwYDVR0jBBgwFoAURwr6VrkJyafubX7+uiMMy4AYHR0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xNzQzNjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1
MWM1OWE0YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAvyAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFdkgpP1Y3lmvPf6yUYZZ88kqZodbpLWmCQTOIagVBlFb49vGaOo
YTNGDGoYFCRLKbcXaEyAxTqtdpME6teKp0P0YKOpYef+XoNtv8hZO12bP/Vch7rx
qU+ODKMdMeAnXkbLqDBT1FHEK1bP7ZD7Gj/ly1689P6uRpwPQhxnxE/kEU6gRjpP
u+0Pm0LINXVEr+DQTvDHz+WxZKpc1oK7iP+qxpzqkbxYpOCwD+V3sUgWzQf/7rv9
DGdDtv3TkHl5jh8k5mpj/JS4DeqJTvB7nN1/Au2h36csvxD7DoSSd9QjB1ioEns4
WbLNQ9YG4WHfkMd5eYOrnEjn6Obe0KMiwME=
-----END CERTIFICATE-----
Generated at Mon May 12 16:28:21 2025 by rpki-client