Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d947a2aa-3f0d-3eaa-b072-760a6a572fc7.roa
File:                     d947a2aa-3f0d-3eaa-b072-760a6a572fc7.roa (raw, json)
Hash identifier:          DziDSx8tHT1XBN94czrePwP+/8TJwMfV+7sAYFvWknE=
Subject key identifier:   35:BD:29:BB:EF:08:3C:6E:BB:DE:08:C0:F2:86:A5:49:A1:EA:CF:CD
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584854703A0B949F092CE2E8F220
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d947a2aa-3f0d-3eaa-b072-760a6a572fc7.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     10835
IP address blocks:        2601:c000::/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:3a:0b:94:9f:09:2c:e2:e8:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=6fbe25ef-92cc-42d1-9fbd-9dc6ef5ef6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:3a:a4:f6:ea:bd:d1:33:f4:fc:1f:6b:4a:
                    a2:30:bb:53:ce:d2:57:ac:f0:32:0f:72:1d:9b:39:
                    b8:4e:e1:75:e6:51:ae:88:c4:b3:39:73:79:b1:44:
                    bb:9d:bf:ba:05:ca:a8:a7:d6:54:91:45:d6:24:17:
                    dc:e6:74:e1:85:bc:2b:78:c2:79:3e:0a:6b:28:29:
                    15:11:c7:82:af:17:09:29:1e:c4:de:e3:c7:e7:36:
                    76:80:2c:36:2e:0c:e8:ca:12:28:be:8a:b6:5c:51:
                    3b:89:fd:71:ca:6d:57:72:8a:2b:58:ab:31:79:3a:
                    87:c8:d7:3f:96:fe:05:67:e8:a1:bb:91:a4:07:b8:
                    c5:72:e7:5c:e4:66:10:4c:c8:66:4d:47:03:de:87:
                    6f:25:48:54:1a:f3:86:32:b1:79:f7:fc:fd:48:6b:
                    08:72:6d:3f:9c:02:a7:5c:0b:07:0e:9f:60:40:cf:
                    ef:e5:18:61:b5:6e:8d:fe:ca:87:65:86:92:68:99:
                    55:63:28:17:92:8c:ee:47:55:e1:34:c2:2e:2e:15:
                    93:96:c5:ff:de:f8:e0:1a:72:89:4e:04:ca:e2:0c:
                    3d:ac:f5:b2:a9:db:25:19:85:10:39:cf:24:a9:fd:
                    b7:91:12:41:b9:d6:53:3f:27:ff:57:41:bf:f2:7e:
                    ff:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BD:29:BB:EF:08:3C:6E:BB:DE:08:C0:F2:86:A5:49:A1:EA:CF:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d947a2aa-3f0d-3eaa-b072-760a6a572fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:c000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:e9:c2:a7:1a:8a:cc:8e:1a:9c:d4:74:57:64:6a:ce:e0:5f:
         6a:57:6b:1b:26:95:ec:b3:8b:85:2a:25:27:e2:9a:79:9d:5c:
         ed:bc:92:ac:f2:25:9e:fa:d2:fb:d5:e1:72:38:a5:c3:1f:35:
         41:c3:9a:69:90:82:a5:ee:1d:23:f6:64:e6:24:85:13:e3:eb:
         4e:6d:a3:dd:8b:ab:7e:d8:65:8c:a2:67:18:76:9b:c4:9b:cb:
         e6:c5:7e:3f:bd:ba:86:94:ce:40:1e:c0:c1:cf:d6:fb:1e:60:
         55:5d:7e:7d:08:3b:3c:3a:bf:8e:66:fe:20:c0:fb:2c:e9:3e:
         c3:f2:5a:1c:ae:3c:61:61:9e:e3:67:2d:9d:0d:0d:00:54:2d:
         e8:47:6b:6c:de:0e:d2:24:7b:ea:5a:b0:60:2e:e9:95:73:03:
         8d:4c:5f:0d:07:4b:19:1a:f2:c8:e9:54:c1:8f:5c:40:cf:5e:
         b8:54:29:a3:a0:fb:ac:65:6e:59:a7:58:a7:7c:84:75:74:56:
         d7:d7:34:76:1b:13:ea:ea:2c:13:4d:69:e1:33:bd:db:34:da:
         79:95:9a:52:f6:31:e1:ef:f7:5b:ed:8a:10:42:13:d2:ec:ec:
         38:a0:b0:83:d4:ea:5f:85:fa:79:31:1f:21:b8:89:fc:e2:db:
         ed:f4:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:30 2025 by rpki-client