Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5cbe6af9-d1b1-35fb-b11a-c733a64d18cd.roa
File:                     5cbe6af9-d1b1-35fb-b11a-c733a64d18cd.roa (raw, json)
Hash identifier:          0GtIDqBpWauvcpxntrvvJd9qRnADol+z4EZKSAjDUfk=
Subject key identifier:   2C:41:46:44:85:46:33:00:BD:A8:22:4A:D0:25:B7:66:41:F0:1A:36
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848222FDE4B9E5A0A6C0A3674E0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5cbe6af9-d1b1-35fb-b11a-c733a64d18cd.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        2605:dd40:8f80::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:de:4b:9e:5a:0a:6c:0a:36:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=7e5af1c8-42a6-4357-b54d-01b6d1308642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:e7:dc:ee:f9:a8:dc:07:33:06:0e:b4:83:
                    42:3f:21:1f:05:70:2e:38:9c:ac:b5:4c:38:52:a9:
                    85:d7:54:a6:d7:ec:38:56:d8:8b:5f:c6:3b:92:4f:
                    22:ec:57:b0:84:2a:e1:a5:e1:23:56:10:9e:4a:e2:
                    03:8f:bd:8f:9f:1c:5e:88:f3:5a:02:9a:4d:d9:5f:
                    6f:b3:22:b5:4c:93:61:68:13:70:f6:33:09:f7:46:
                    37:a3:1d:42:6c:2d:0f:5e:0c:5a:e0:d2:55:95:01:
                    c2:03:19:0b:ba:d7:70:b5:30:c7:54:47:11:bc:db:
                    80:54:53:5c:db:0d:10:44:6c:95:a3:d2:b4:b0:83:
                    8d:04:44:8d:9c:15:06:6a:23:4b:af:de:5b:c7:b2:
                    b5:e8:85:b9:69:28:55:9b:02:53:31:dd:9f:29:c7:
                    a4:8a:ff:95:89:ad:e3:d6:2d:41:33:fb:d1:f8:da:
                    b6:fc:e5:01:2e:b4:b2:53:42:9f:21:ab:27:d0:f2:
                    7f:d0:bf:db:dd:58:bf:cd:ee:fd:ca:03:b4:57:79:
                    d2:10:b5:2c:af:15:ef:8b:55:13:4f:78:74:37:79:
                    2e:3d:a1:f5:dc:fb:11:37:8d:24:e4:e6:59:25:c9:
                    bc:45:e3:ee:72:37:db:74:48:85:cc:e1:9a:77:80:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:41:46:44:85:46:33:00:BD:A8:22:4A:D0:25:B7:66:41:F0:1A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5cbe6af9-d1b1-35fb-b11a-c733a64d18cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8f80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c8:f1:c8:f5:d1:d9:27:6c:50:31:b6:4b:2c:97:1f:eb:f1:
         4a:c6:89:4f:ad:a5:c5:f8:59:e3:d0:30:c4:64:ff:59:ad:41:
         53:af:97:e6:f8:76:53:89:be:02:04:26:f8:5b:aa:6f:d0:89:
         6d:57:90:6b:2f:0f:16:5a:bb:ba:a4:5d:e9:30:34:2e:f8:96:
         12:7c:5e:d8:9a:73:e8:16:b6:1c:67:d3:74:a5:aa:ba:84:32:
         ab:f2:d0:51:63:04:2e:40:a0:d0:ab:9c:e7:5b:79:dd:1e:56:
         b7:50:92:7b:5f:c4:0c:e9:0e:ed:f8:54:23:ac:d8:3e:db:39:
         c9:6d:02:fa:de:83:79:47:45:c2:99:53:27:5c:2f:6d:e7:3e:
         11:97:6f:01:4b:cd:88:a9:04:0f:ca:ca:35:83:e5:1e:d3:90:
         ba:b7:d4:48:2e:84:bc:83:17:fa:55:be:9d:67:d3:db:77:02:
         5e:ec:3d:2a:40:fb:3d:dc:5f:7c:3f:2c:7a:27:dc:d1:15:5c:
         fe:ea:c1:e4:7d:24:14:04:20:94:31:e5:16:5d:00:6a:19:54:
         53:39:0f:ec:05:29:5d:de:5a:53:c1:6d:4c:31:1e:42:82:e5:
         db:30:f4:d3:d9:5e:e0:ab:c7:ba:d7:de:fd:81:f2:c7:54:fb:
         03:5f:d7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:14 2025 by rpki-client