Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/1bc212ef-c15c-392d-b4e5-648f5755c240.roa
File:                     1bc212ef-c15c-392d-b4e5-648f5755c240.roa (raw, json)
Hash identifier:          AwkPDS00oYRSUKEGqA59LYIJaCQJ1pSZNaLjbyhCtXE=
Subject key identifier:   3E:11:F5:CC:4E:6D:FC:21:D8:60:47:E5:94:0D:9D:37:DC:62:52:4B
Certificate issuer:       /CN=77728ad0-067a-4ac0-884f-39d45b479fda
Certificate serial:       010D0C9F432858487325B82886DE85E3A8EB5EE0
Authority key identifier: D7:9F:73:41:48:B7:DC:6C:32:16:B0:5C:84:6F:63:BC:52:E2:EA:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/1bc212ef-c15c-392d-b4e5-648f5755c240.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     14482
IP address blocks:        2602:fa3b::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:b8:28:86:de:85:e3:a8:eb:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77728ad0-067a-4ac0-884f-39d45b479fda
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=aa0d961b-eb08-4f50-8ae2-18ce51b8dc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:af:d5:63:80:91:43:16:53:c4:1a:42:40:
                    62:45:1c:50:f8:05:ae:8d:46:64:52:9a:4d:34:e4:
                    5e:bd:cb:ea:27:71:ec:dd:0c:f4:9e:e9:05:ae:92:
                    67:c6:a2:97:43:84:aa:1c:c7:1e:77:15:07:80:c6:
                    b1:90:a2:6f:5b:dc:6a:1c:be:f9:ca:75:a8:40:f2:
                    71:2b:7e:1a:2f:db:26:d0:42:27:f1:07:29:d9:f4:
                    4e:d1:6f:43:af:50:a3:e8:b0:84:fb:ad:b8:5d:c1:
                    d0:83:0a:54:1f:9e:e0:e8:45:1a:70:37:c3:b1:77:
                    55:7a:74:4e:e8:c6:5d:ed:ce:db:88:9a:53:b6:0d:
                    f4:ea:13:60:bf:23:d1:b9:fe:d6:a6:46:76:1c:c0:
                    2f:28:88:02:0d:97:df:0f:e4:7a:8c:0c:2c:2f:f0:
                    e1:0d:0a:91:bb:44:fd:97:6b:13:91:b3:44:e8:ce:
                    1f:be:f3:4d:d9:b3:bc:db:e9:ac:13:e1:6d:f5:34:
                    67:73:c9:1c:2a:41:eb:1e:ed:d2:7c:cd:a3:fc:16:
                    15:ed:54:9b:1c:a2:a6:d1:e0:36:ae:43:6f:e7:e7:
                    c1:77:6f:ca:c2:7e:db:14:08:59:33:74:8c:c6:ab:
                    0d:90:b8:af:e9:f8:ae:d0:b6:44:bf:e9:4f:23:23:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:11:F5:CC:4E:6D:FC:21:D8:60:47:E5:94:0D:9D:37:DC:62:52:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/1bc212ef-c15c-392d-b4e5-648f5755c240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/77728ad0-067a-4ac0-884f-39d45b479fda.crl

            X509v3 Authority Key Identifier:
                keyid:D7:9F:73:41:48:B7:DC:6C:32:16:B0:5C:84:6F:63:BC:52:E2:EA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:cf:7c:a0:65:da:4e:39:7d:8c:b6:6e:0a:9f:53:89:8f:
         f4:81:30:21:61:db:b5:fd:ce:eb:3d:b3:4d:66:40:3f:4c:9b:
         16:b7:61:48:a9:9b:08:cf:da:32:f7:54:2a:60:b9:81:a5:73:
         8a:1d:55:d6:9f:c2:7e:f7:dd:90:40:ab:f2:e8:41:f5:df:f8:
         66:1d:e1:57:f8:ce:00:f6:51:d1:f6:1a:75:74:93:03:4d:d2:
         6b:a3:23:44:a0:ab:10:87:b0:16:f4:bc:ec:4e:c0:50:01:cf:
         d3:bd:46:3f:8d:60:cd:18:2e:41:d1:e9:5c:a0:c4:a0:13:13:
         49:a9:49:cb:45:1c:f5:59:72:7f:3f:a9:04:05:b7:86:a4:00:
         f7:a0:63:0a:c5:0f:8d:3b:63:63:7b:c3:25:f1:62:3d:58:03:
         6c:72:14:a8:da:d8:f9:7d:38:5f:e1:95:a2:f0:5e:5f:ed:b7:
         65:c1:00:71:bb:cc:2d:82:b2:ca:df:8e:bd:1b:1b:f5:24:1b:
         26:59:00:ec:c5:32:d8:e3:a9:10:42:87:14:e8:63:6a:7d:c5:
         c2:f4:a3:f2:79:d9:c0:0a:bd:8b:0d:22:c2:ba:d8:b6:f5:7d:
         78:61:c2:33:1d:70:09:e0:00:4b:c2:ee:95:f8:00:48:e6:40:
         14:f5:91:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:23:20 2025 by rpki-client