Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa
File:                     ca1db00b-973c-3719-a596-87b6067e983c.roa (raw, json)
Hash identifier:          j4gNgIXYdLI3bBYzVnRoUB+jZ1xLVyH3xo3hJu9xHK0=
Subject key identifier:   8A:92:3C:88:11:60:66:07:42:A0:1B:8A:6A:7B:55:23:D3:1C:F5:F0
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848494565422D03A95DD2BB9A00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     398549
IP address blocks:        2605:dd40:8570::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:65:42:2d:03:a9:5d:d2:bb:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=080b54ed-4561-4084-bec6-693320892420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:c7:d3:a0:74:2d:f4:e3:9c:15:c0:b9:42:
                    36:18:b2:91:fe:b0:66:2c:46:64:a6:d9:3b:36:b9:
                    b1:36:2a:ea:c2:44:73:b2:c6:17:ff:c2:9b:97:b7:
                    5b:fa:92:57:49:7c:b3:58:1b:28:aa:55:90:9c:fc:
                    23:b4:ac:14:bc:e7:8a:38:75:0f:16:9b:bf:c8:e4:
                    20:37:6f:73:b5:6e:f7:96:e2:74:7f:d1:62:17:c1:
                    73:e9:25:94:82:96:a6:f7:3d:5e:a1:61:2e:b3:f9:
                    bd:98:8c:7a:8b:b0:57:30:a1:ee:a6:10:fa:99:77:
                    b7:03:48:9f:fe:8a:bb:a2:c2:e7:f9:48:00:45:6f:
                    b0:30:f1:e2:df:83:18:a0:05:91:cc:6f:69:4d:c2:
                    8b:9c:cf:f1:a9:16:ff:17:fb:f6:f3:1e:fb:a6:de:
                    80:13:a4:41:7f:9b:5d:df:03:ec:53:de:f1:9d:24:
                    6f:e7:07:15:10:bd:36:22:5e:ba:80:4e:54:88:e4:
                    92:a8:32:a6:b1:52:dd:62:d4:54:ab:43:5e:e4:cb:
                    d5:77:c4:3e:6a:63:e8:65:e6:d4:ce:13:ec:16:af:
                    35:03:90:a3:f5:59:60:24:8f:55:5d:a8:5a:53:4c:
                    e5:fc:c5:0e:6e:b9:f1:6f:99:65:aa:7c:29:c7:f4:
                    eb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:92:3C:88:11:60:66:07:42:A0:1B:8A:6A:7B:55:23:D3:1C:F5:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8570::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:58:5f:5c:0f:e0:7b:48:13:45:a6:b6:84:d7:d2:d2:78:cc:
         35:fb:37:01:91:4f:7d:82:d0:19:52:d4:27:8d:38:79:ea:7f:
         34:57:d9:3c:c0:49:bf:20:77:db:54:8a:95:e6:fa:45:1d:ef:
         02:96:c3:b8:af:f9:1d:32:44:3f:51:80:16:2b:25:04:6b:10:
         d3:2e:20:51:09:c8:5b:3c:af:93:43:3c:15:4e:86:00:5e:94:
         ea:8c:e0:34:8d:1f:68:68:87:5c:0e:61:da:7f:72:8a:21:94:
         c4:18:05:f7:b4:d6:51:bc:ee:3b:a9:c6:90:5a:30:ea:fb:bd:
         d0:15:9a:0b:1c:59:d4:20:b5:3f:ee:fb:0b:24:7a:81:ab:d3:
         87:ce:83:3f:04:4f:8f:de:59:90:87:74:9c:7c:e3:c3:27:c9:
         ce:a2:8a:71:02:cb:ae:46:c5:40:f6:15:6c:d5:87:da:24:6c:
         f5:0e:43:1c:70:6f:3b:56:a7:10:c0:f3:ff:aa:9c:90:47:af:
         9c:aa:f5:a9:52:e4:22:26:f0:58:71:0a:d8:5c:06:1f:9c:65:
         1c:2a:a5:28:39:1e:75:b5:fe:46:e7:1b:cf:f6:ef:db:1a:dc:
         79:98:6d:f4:e9:e8:da:be:27:58:f2:cd:9e:cb:3d:cf:e8:8b:
         bc:b5:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:17:10 2025 by rpki-client