Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da/b2ca9e03-713d-337f-819e-cb681e5620a8.roa
File:                     b2ca9e03-713d-337f-819e-cb681e5620a8.roa (raw, json)
Hash identifier:          tPaekHbDY/8qr02leg98Y7Bq2Y+LU7WXVsnpQXoE7fk=
Subject key identifier:   67:7F:3D:D1:AD:92:2F:4A:5C:F1:49:73:09:94:26:C2:9A:80:D3:66
Certificate issuer:       /CN=7aeaa4fc-1808-4eb1-b0b2-74151aa097da
Certificate serial:       010D0C9F432858484C1037C4B303C3619DF10680
Authority key identifier: A8:6A:7A:27:D8:5C:9A:6C:AF:47:AE:C4:96:8B:AA:79:EF:F6:C4:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da/b2ca9e03-713d-337f-819e-cb681e5620a8.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     395522
IP address blocks:        2602:817:b000::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:37:c4:b3:03:c3:61:9d:f1:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aeaa4fc-1808-4eb1-b0b2-74151aa097da
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=7391ddcd-30c5-4a85-a707-58a6b2fa92d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:5d:e9:25:b8:38:cf:03:a3:8b:7e:98:51:
                    76:bd:0e:a1:67:87:af:48:9e:8f:90:a3:e9:f0:a4:
                    fc:bb:96:92:92:a0:87:45:32:b4:93:f8:fe:9f:a3:
                    aa:73:0c:4c:bd:fa:16:78:8b:7e:a7:be:5c:55:a3:
                    d9:a8:b6:cf:5b:b0:52:6f:24:cf:4a:ac:07:df:d0:
                    28:5a:b3:52:d4:63:a8:13:83:dc:d2:76:9b:eb:98:
                    ff:1d:6e:14:64:05:e8:18:87:fe:31:ad:5a:c4:17:
                    6f:2a:da:0d:f9:80:67:ac:9f:2d:00:29:27:22:ef:
                    1a:69:6e:6f:54:03:5a:f4:3a:b8:62:8f:38:c3:69:
                    9e:45:4f:a9:cf:86:91:26:b3:b7:bc:85:e2:93:14:
                    7c:f9:03:d9:c9:df:e4:03:f6:73:85:12:a1:ea:ec:
                    55:38:fe:3f:91:1e:44:ed:c4:5b:40:ad:3c:0e:68:
                    a6:fc:c2:00:ad:ae:49:37:f7:6d:94:7c:9d:a6:53:
                    ff:ab:02:9b:47:ea:a3:71:6b:91:7d:75:df:17:3d:
                    5c:07:c0:a8:28:34:d1:96:80:bd:dd:84:c6:ad:04:
                    57:ab:70:be:f9:3b:3b:97:de:a1:70:b4:f4:16:f3:
                    dc:a1:5b:22:29:02:18:c0:03:e8:3e:39:e7:9c:da:
                    81:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7F:3D:D1:AD:92:2F:4A:5C:F1:49:73:09:94:26:C2:9A:80:D3:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da/b2ca9e03-713d-337f-819e-cb681e5620a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da/7aeaa4fc-1808-4eb1-b0b2-74151aa097da.crl

            X509v3 Authority Key Identifier:
                keyid:A8:6A:7A:27:D8:5C:9A:6C:AF:47:AE:C4:96:8B:AA:79:EF:F6:C4:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:07:ba:83:fd:67:86:81:24:bb:86:b4:02:92:da:58:c7:95:
         8c:96:bc:34:43:f0:0c:b8:35:8e:43:33:3e:6c:a1:e0:d0:01:
         9a:58:86:20:9b:12:bf:fd:b1:86:a1:68:d7:41:1f:c3:84:15:
         de:db:dd:db:c0:84:b4:a7:0c:79:cc:2e:5a:e6:62:17:69:80:
         00:84:36:aa:39:18:03:4b:f3:60:58:a4:20:1e:92:9d:ed:86:
         cf:ec:97:2d:8d:11:69:36:c1:1b:62:5f:be:6f:a1:66:9e:65:
         76:38:e9:10:8c:be:91:c0:33:41:5b:62:a0:85:8b:08:65:74:
         64:ec:59:5c:3f:15:e1:51:b6:a2:4b:0b:fd:1b:85:9a:01:d7:
         10:14:85:77:46:9f:5e:13:b6:f5:1a:45:f2:9e:40:1d:59:e8:
         37:56:35:49:27:e6:e0:4f:96:eb:14:44:88:44:41:2c:0b:80:
         32:15:64:0e:cf:95:b5:6f:a5:bf:5a:b7:fd:12:6a:4f:98:4a:
         f3:12:b4:d3:bc:89:72:96:c1:77:f7:73:c9:5e:8d:7f:1e:03:
         03:ef:a5:d5:d3:d4:fc:4e:24:e1:fd:fd:7f:ed:43:3e:8d:89:
         61:65:87:20:73:4b:70:76:5a:2d:57:7e:f0:f3:5c:13:42:ae:
         9e:e7:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:33:43 2025 by rpki-client