Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01f0a56d-58de-49e9-ac51-65c8a08a746e/c01b7fd9-bb19-32c9-bf7e-d6fc5844e687.roa
File:                     c01b7fd9-bb19-32c9-bf7e-d6fc5844e687.roa (raw, json)
Hash identifier:          18ciypVygdrG5DUXsaZdBXfrtQ9jW880lt/cBIvu8OI=
Subject key identifier:   2D:5E:59:55:0D:1F:01:9D:A4:1D:CD:FD:9C:73:86:64:C8:60:F6:AA
Certificate issuer:       /CN=01f0a56d-58de-49e9-ac51-65c8a08a746e
Certificate serial:       010D0C9F432858482BF558963FD88F216D824DC0
Authority key identifier: 34:B8:31:F4:3D:91:89:37:DC:39:8D:1E:12:24:44:A6:87:6D:46:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01f0a56d-58de-49e9-ac51-65c8a08a746e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01f0a56d-58de-49e9-ac51-65c8a08a746e/c01b7fd9-bb19-32c9-bf7e-d6fc5844e687.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     609
IP address blocks:        2602:80d:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:58:96:3f:d8:8f:21:6d:82:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f0a56d-58de-49e9-ac51-65c8a08a746e
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=10fdcc77-9646-43c2-8a83-9ebc25e54ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:95:51:7f:ba:28:92:30:99:4c:1a:49:44:
                    c7:b0:91:6a:7b:55:b1:e2:6c:ab:b2:a3:96:41:92:
                    c5:d2:e1:2f:be:7c:bd:25:c6:0d:66:31:6e:33:88:
                    59:77:6d:3e:21:ef:08:14:5b:28:0a:77:39:b8:2e:
                    68:ad:2a:9c:b5:a4:18:4b:78:20:95:f9:a5:de:e2:
                    94:1d:75:4d:61:ea:5e:95:52:d1:5c:92:96:1b:ca:
                    07:9a:a0:31:55:eb:b1:2c:46:a8:fa:16:9a:f6:cd:
                    a3:4b:42:e5:4e:55:e6:fe:ef:ac:ee:0d:d6:00:6e:
                    03:5f:b6:d0:8e:7a:14:81:d6:7d:91:50:d8:3c:13:
                    13:a4:ad:23:73:81:d0:89:ab:bc:a6:69:5d:56:06:
                    d3:56:71:21:33:b3:ce:87:cb:60:5e:60:6d:5e:bd:
                    1d:55:ce:ca:4b:8a:1b:34:06:46:57:b7:85:57:d0:
                    70:5d:e9:f4:b9:df:6f:8e:29:76:e0:d5:71:78:65:
                    f7:54:57:c7:85:8e:aa:74:f7:6a:46:90:4e:ed:3f:
                    c5:d4:fc:dd:bb:b9:b8:be:c7:cb:17:f7:82:19:f3:
                    c8:94:3f:15:b9:3d:45:fd:e0:0b:80:09:de:dc:84:
                    e9:77:a3:c6:a3:59:ed:de:a4:1d:51:31:4c:82:51:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:59:55:0D:1F:01:9D:A4:1D:CD:FD:9C:73:86:64:C8:60:F6:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01f0a56d-58de-49e9-ac51-65c8a08a746e/c01b7fd9-bb19-32c9-bf7e-d6fc5844e687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01f0a56d-58de-49e9-ac51-65c8a08a746e/01f0a56d-58de-49e9-ac51-65c8a08a746e.crl

            X509v3 Authority Key Identifier:
                keyid:34:B8:31:F4:3D:91:89:37:DC:39:8D:1E:12:24:44:A6:87:6D:46:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01f0a56d-58de-49e9-ac51-65c8a08a746e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80d:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d9:04:07:3d:8d:9b:62:d6:6b:35:8d:ed:de:f4:88:a5:16:
         87:b3:00:03:1a:8b:48:49:c9:4d:70:ea:1c:4d:b6:58:79:06:
         5d:3c:e9:d6:9c:d0:b3:e1:f4:5d:fc:cd:c0:ca:04:ec:1d:3d:
         70:81:79:30:9a:04:9b:07:27:cb:61:f1:b4:14:97:87:0c:d9:
         ea:42:41:c8:3f:c7:a8:b5:22:4d:91:89:54:b6:38:11:bc:66:
         c4:8c:60:c9:01:db:1e:cf:a5:e4:4c:e5:83:ca:c0:0c:05:e5:
         47:b6:89:57:93:34:40:cd:51:78:fd:5a:e7:bc:cf:f0:88:7c:
         45:f0:13:0b:82:8e:bb:75:92:07:f1:b4:a9:53:d1:86:7c:06:
         9f:83:41:23:e3:e6:d6:bb:c4:8c:87:ed:6b:52:42:8f:53:c3:
         5f:5c:9c:46:6b:b4:fd:36:94:d8:02:6e:02:58:17:78:94:81:
         4b:74:09:ab:7a:ec:2a:91:af:b2:db:59:02:36:a2:7b:54:6e:
         18:37:4e:52:01:33:5e:c1:24:a1:18:ab:bb:bf:38:41:e8:22:
         fd:4a:a6:8f:26:86:c7:5d:8b:30:92:8c:a3:54:a5:a9:d0:78:
         11:e3:53:ad:ff:3a:2f:85:93:a0:65:30:9c:4c:1d:c3:46:44:
         bd:64:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----