Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/2a5dba13-7df2-349e-82ab-549d049c45c5.roa
File:                     2a5dba13-7df2-349e-82ab-549d049c45c5.roa (raw, json)
Hash identifier:          4AZMsqSwa3RUPt5jLGPDseUZwTJ5SfYiHFRv9IW2nYI=
Subject key identifier:   D2:E7:28:88:52:22:17:E5:A6:7D:93:40:87:94:08:11:C4:A3:31:77
Certificate issuer:       /CN=3c374cc3-37f8-48a7-88bc-e046c1661931
Certificate serial:       010D0C9F4328584804DFBE91E5CADEA50BEDC740
Authority key identifier: 10:E9:2F:E6:FF:F1:FE:3D:03:31:B9:D1:7F:6A:0E:AF:B3:EC:83:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/2a5dba13-7df2-349e-82ab-549d049c45c5.roa
Signing time:             Wed 27 Nov 2024 14:00:52 +0000
ROA not before:           Wed 27 Nov 2024 14:00:52 +0000
ROA not after:            Tue 25 Feb 2025 14:00:52 +0000
asID:                     401084
IP address blocks:        2607:8e40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:04:df:be:91:e5:ca:de:a5:0b:ed:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c374cc3-37f8-48a7-88bc-e046c1661931
        Validity
            Not Before: Nov 27 14:00:52 2024 GMT
            Not After : Feb 25 14:00:52 2025 GMT
        Subject: CN=aa9a95db-b583-43ff-aab1-e4e2b3cb8de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:c0:de:66:b2:f1:8f:b7:ea:56:a1:bf:d5:
                    56:40:bb:24:31:c9:30:fc:d3:af:8f:0d:6d:21:61:
                    04:65:4b:32:3c:1e:78:fc:2e:b5:3b:63:ef:39:52:
                    4c:af:7b:b3:1f:78:fb:fa:c3:6c:45:cb:48:fd:4d:
                    0a:3c:aa:fa:17:45:74:94:ce:0c:fd:77:60:50:18:
                    98:91:45:d2:72:05:f6:23:ed:1d:7d:0b:21:f3:95:
                    66:13:44:36:8d:99:14:9e:97:5f:5b:68:04:45:e5:
                    51:c0:f6:89:36:70:4c:03:60:5a:4e:3f:35:4c:69:
                    a9:cc:01:98:0f:4e:2a:c9:67:60:34:fa:0a:ce:8b:
                    8e:b2:24:75:05:f3:66:65:43:16:91:bf:4f:66:5d:
                    62:eb:01:b4:23:bc:59:24:06:c0:49:f7:c3:37:92:
                    54:51:f3:5c:1e:dc:93:92:58:b2:5a:04:1b:95:8e:
                    01:27:c5:4b:f1:ea:57:63:4b:20:31:db:d0:74:b1:
                    de:96:81:8b:66:eb:70:14:57:6e:0b:70:e1:26:47:
                    9c:3a:28:8b:f1:a6:bd:6c:26:54:4c:e2:49:af:de:
                    3f:79:3a:fa:ff:4a:cd:6e:db:ad:19:8d:6a:66:4f:
                    9d:8b:c4:f7:70:fd:3b:11:b0:00:1f:2f:c6:51:df:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:28:88:52:22:17:E5:A6:7D:93:40:87:94:08:11:C4:A3:31:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/2a5dba13-7df2-349e-82ab-549d049c45c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/3c374cc3-37f8-48a7-88bc-e046c1661931.crl

            X509v3 Authority Key Identifier:
                keyid:10:E9:2F:E6:FF:F1:FE:3D:03:31:B9:D1:7F:6A:0E:AF:B3:EC:83:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8e40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:47:c5:1f:41:09:9b:04:06:13:da:7f:6c:53:c3:54:ff:01:
         73:e5:4e:07:95:e4:e2:30:35:77:4e:1b:d2:b8:22:a3:70:d3:
         67:5c:6e:da:b7:3d:07:86:c0:1a:db:36:dc:11:b4:c8:ae:8b:
         46:af:5f:d2:6f:2f:25:aa:ea:f7:a2:dd:b2:6e:6f:8b:da:c8:
         e7:ee:29:2f:b5:d4:97:4c:45:6b:45:be:58:e5:56:28:75:b8:
         81:00:20:06:bc:e5:21:0b:40:a9:bc:c9:30:31:8d:c4:72:09:
         d8:b1:da:dc:39:e3:b7:6f:31:27:32:e6:f6:41:c4:13:7b:96:
         51:3d:b1:52:a1:10:35:7e:8f:3b:7a:7f:8c:fe:1d:44:58:a7:
         91:7a:cb:00:36:ea:bc:be:7c:7f:28:d0:d1:1b:5a:52:45:06:
         4d:db:ad:eb:29:20:5c:2d:a8:ec:63:68:bb:1e:12:cc:d8:5a:
         bb:d6:2b:57:f6:98:c0:65:86:69:71:b0:ee:5f:fe:5d:b2:07:
         a0:d9:0f:70:a4:05:9a:58:5c:1b:e5:4b:7b:74:94:64:32:09:
         bf:d7:2c:63:f4:82:12:2f:5f:8a:15:99:22:44:32:48:93:2f:
         e4:6d:aa:f1:16:cb:43:84:85:33:e6:5b:d1:dd:9e:96:1c:f0:
         6a:89:0d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:35:12 2025 by rpki-client