Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1e4c9f85-98c4-3004-a8f2-6892aa3b5827.roa
File:                     1e4c9f85-98c4-3004-a8f2-6892aa3b5827.roa (raw, json)
Hash identifier:          vIAuOvds6DZ85q8/oQ6iPLV286B5YqOtNmQIH1GTjAU=
Subject key identifier:   D4:85:AF:71:FD:8D:06:2B:81:BB:DC:13:E8:B8:42:83:1B:2B:2A:B4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF95C5B2DF77EDCED74A80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1e4c9f85-98c4-3004-a8f2-6892aa3b5827.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8071::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:95:c5:b2:df:77:ed:ce:d7:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=ff73d70b-4351-4302-8f68-080ddb63b0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:49:62:ae:38:08:38:d8:2b:cc:7e:5c:a6:
                    16:c6:25:c1:d5:c4:ca:85:33:18:c6:37:4d:74:9c:
                    b6:e0:27:d4:8f:3a:41:60:19:e1:87:d7:f7:69:c1:
                    9f:ff:b0:88:25:69:ac:2c:7e:f3:99:b1:5b:bf:1c:
                    43:bd:85:18:7b:c5:d2:d3:37:95:6b:8a:e5:80:ed:
                    b4:74:56:e0:7c:40:7b:e4:ac:a6:ee:bc:74:d5:57:
                    d9:e6:a6:5a:2e:f9:21:d7:fe:bc:0b:20:84:ad:ff:
                    08:83:6f:ab:82:44:74:fa:06:a4:be:b1:f2:bd:8a:
                    ca:dd:8d:ac:ee:03:18:fc:5e:bd:ee:82:6a:40:1d:
                    b1:f5:29:f5:0f:35:8f:53:00:9d:3f:0d:79:ec:8d:
                    b7:30:f2:ba:3d:70:31:f6:d5:6b:f1:c2:ff:15:85:
                    a7:d1:a5:b7:dd:9f:86:2a:d2:96:79:e8:24:04:f4:
                    fe:53:fb:3e:76:d3:e7:96:d3:f5:d9:f3:60:ee:0a:
                    88:9b:ff:88:7a:c4:d5:d5:fb:01:04:8b:87:d3:fe:
                    b7:55:37:8b:62:c7:be:e4:ad:dc:54:b6:b1:16:43:
                    9c:96:d5:d0:b6:4c:5e:59:5c:bc:85:27:8d:35:2e:
                    0a:b2:76:cc:f8:b2:42:54:17:18:c4:04:ae:08:8f:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:85:AF:71:FD:8D:06:2B:81:BB:DC:13:E8:B8:42:83:1B:2B:2A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1e4c9f85-98c4-3004-a8f2-6892aa3b5827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8071::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1e:20:92:ee:91:45:c4:c6:f7:aa:bc:16:82:d4:da:ff:5d:
         a6:6d:68:0b:ae:a3:6f:f3:62:f8:3f:f9:e7:3d:5b:8b:58:28:
         81:7c:a0:36:b3:06:5f:c3:37:f9:bb:51:ac:80:2f:bf:c4:b3:
         d7:bf:94:fc:71:13:06:c9:a0:07:e0:5d:c5:db:23:6e:b7:7c:
         2d:c2:ef:74:7d:f0:3f:16:70:f8:35:e3:b2:56:74:9e:cb:58:
         24:01:9d:2b:bc:00:5f:d9:f5:95:f2:b3:af:9c:39:39:16:d6:
         1e:d5:10:bd:48:02:7b:fe:7b:df:cf:5a:14:9a:05:12:0c:c3:
         b7:73:cc:6e:f8:1e:85:ff:29:57:44:76:3a:f0:36:5d:9d:50:
         41:7f:d7:7c:89:c7:17:cd:82:93:37:4b:f7:8d:00:94:4e:d6:
         5b:a0:1e:f0:7c:5c:01:bb:04:83:52:3d:76:fb:49:fa:64:6e:
         92:b2:b6:2f:29:93:8b:e3:49:2e:3e:b4:27:a8:a8:5a:af:d9:
         a2:55:db:81:d2:6e:92:2f:31:05:af:08:9c:f0:db:38:5a:29:
         57:04:b1:c4:d4:fb:0c:12:54:3c:c3:cf:0e:94:de:7c:de:85:
         88:f2:ce:58:ad:66:b8:26:6f:ff:41:2a:e4:7c:78:6a:e3:a4:
         49:65:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:44:10 2025 by rpki-client