Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/6b71d84a-9a0e-36aa-b7dd-07a724d32261.roa
File:                     6b71d84a-9a0e-36aa-b7dd-07a724d32261.roa (raw, json)
Hash identifier:          rTZlmuXdau8QrFzgK9VTQ27rXuHfrscfcplPlDHItEs=
Subject key identifier:   BF:9A:59:75:B9:22:5F:F2:2F:F1:4F:34:08:AE:A6:84:1A:34:7B:52
Certificate issuer:       /CN=b16b3fcc-0a15-499f-8a99-d97f68a2f543
Certificate serial:       010D0C9F43285847FB1A20762DEE0758DA95B6C0
Authority key identifier: 6B:AF:86:D8:3C:10:DA:9F:87:27:40:A4:EC:70:3A:38:45:A3:21:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/6b71d84a-9a0e-36aa-b7dd-07a724d32261.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     16934
IP address blocks:        2607:c700::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:20:76:2d:ee:07:58:da:95:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16b3fcc-0a15-499f-8a99-d97f68a2f543
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=309606aa-45ba-4384-9b77-08db0194089b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:d9:ad:ae:d5:12:21:ca:93:56:a4:c1:3f:
                    4c:1b:e4:a4:d4:7d:97:ae:36:84:3e:37:67:e8:5e:
                    c2:ee:c9:d0:26:c5:b0:b6:be:95:3d:39:aa:e9:1c:
                    0e:b6:a1:79:87:6f:fc:d8:42:db:fc:c2:fe:dc:76:
                    28:07:a7:e5:74:6c:6e:f1:6d:dc:74:57:e5:b5:0c:
                    b0:f7:50:3e:7f:c4:3e:24:ff:32:63:4f:32:04:d0:
                    62:a9:ed:d5:8f:d1:9b:89:1a:d5:08:76:45:ef:fa:
                    88:eb:3f:fc:96:eb:b2:29:1b:e0:99:78:5a:d1:02:
                    aa:30:20:57:22:5a:66:fb:4f:a7:82:f5:4f:2d:e4:
                    3b:f0:5e:58:9b:2f:8f:60:ec:90:a5:8a:c6:57:9d:
                    8e:bb:b0:92:81:f3:24:1f:fb:11:42:74:3c:dc:be:
                    14:1b:55:8f:9a:b0:0c:e1:77:ea:a8:22:34:88:17:
                    5f:b8:4e:92:51:c8:5a:76:86:5d:e0:81:01:cb:0a:
                    0b:70:7c:6e:63:b4:7b:9b:44:3a:9d:b3:60:40:39:
                    c8:18:8f:06:8d:4b:3e:aa:74:6d:aa:33:78:4f:3a:
                    2a:6c:e5:0a:1c:f4:8c:89:e9:9c:99:38:de:63:5f:
                    c5:84:dd:5f:20:09:01:dc:68:b9:5f:7c:e1:0c:ce:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9A:59:75:B9:22:5F:F2:2F:F1:4F:34:08:AE:A6:84:1A:34:7B:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/6b71d84a-9a0e-36aa-b7dd-07a724d32261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/b16b3fcc-0a15-499f-8a99-d97f68a2f543.crl

            X509v3 Authority Key Identifier:
                keyid:6B:AF:86:D8:3C:10:DA:9F:87:27:40:A4:EC:70:3A:38:45:A3:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:d8:50:82:5c:d6:2b:d1:e2:54:94:5a:1c:6a:b7:f3:ec:
         8c:1f:fd:26:bd:a3:c7:d8:25:6b:09:84:69:2f:8d:a6:75:e3:
         8d:24:91:84:a3:bd:49:0e:cd:2e:ec:88:a0:c1:d8:c2:64:3b:
         e7:a3:d3:bc:83:11:38:09:cc:da:fe:5f:2b:b5:30:bf:7b:54:
         fa:d9:34:28:b5:6d:d3:ee:cd:73:bf:71:ca:7b:4b:e3:17:37:
         f1:17:6e:0f:64:63:ec:58:9c:94:50:85:6f:a5:fb:64:d8:e1:
         b0:b1:fa:c2:5e:7f:e9:a1:e3:38:e3:b8:c1:55:72:57:9d:92:
         16:4d:c0:dd:7b:45:c4:35:ee:1d:e1:02:bf:69:7d:2c:93:ae:
         e7:c5:48:ac:a0:9b:7d:c8:60:c2:79:85:bf:48:d8:5b:85:4c:
         18:11:99:40:1c:ae:80:ac:35:0d:68:ea:58:22:73:7e:d5:da:
         a2:4a:45:69:43:19:af:50:4e:5d:1c:c4:79:d5:9a:74:23:62:
         2d:44:9c:d5:73:f4:5a:25:41:1b:6e:47:3d:09:36:d8:ae:f3:
         ea:c5:80:0b:61:db:c6:81:d9:fa:7d:c6:2c:85:97:8f:ea:c2:
         85:e2:9f:be:a7:3a:55:df:55:4c:04:7b:fb:e4:b1:5f:d5:2e:
         0f:fb:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:26:59 2025 by rpki-client