Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3588145e-fe93-34c9-9ffe-e2628fd8d094.roa
File:                     3588145e-fe93-34c9-9ffe-e2628fd8d094.roa (raw, json)
Hash identifier:          sz66YudBN1EENbNWlIqzmf82M4AuMOquccu37LJvbG0=
Subject key identifier:   F6:68:8B:27:8A:E6:5C:86:C7:A3:68:CB:6E:F6:D7:36:FC:01:77:C9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF936572399AEE95C9DEE0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3588145e-fe93-34c9-9ffe-e2628fd8d094.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:83ad::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:93:65:72:39:9a:ee:95:c9:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=5045dde8-3c88-4042-85fb-e27077290b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:df:9e:a9:af:d9:9c:3a:9a:76:7d:af:bf:
                    9c:38:c7:0f:d3:66:f4:9a:ec:6b:81:53:58:c5:7f:
                    60:ca:3d:12:1e:bf:76:5a:21:66:ce:65:5c:f2:7d:
                    ab:b3:a7:c8:cc:c8:2b:ac:9e:55:cd:2a:bd:39:a6:
                    1b:f5:79:7e:3c:10:00:09:16:db:62:f5:64:a4:7c:
                    12:0f:b7:87:96:bd:dd:2c:44:69:2c:84:a8:26:ae:
                    08:c4:7f:16:59:4f:56:0b:4a:57:b4:84:b5:9d:91:
                    2f:59:95:d9:44:21:1b:7d:84:3a:9e:f7:0b:0b:ba:
                    98:84:cf:26:60:6e:8a:f5:a7:fc:7a:cb:7e:ec:2d:
                    8a:77:00:e0:9b:9d:7c:20:23:94:34:e9:57:47:8e:
                    a2:f8:ca:8e:8e:28:15:8e:c6:77:af:67:a2:ef:43:
                    03:81:87:a4:82:9e:0b:65:d6:98:47:4a:08:a7:6c:
                    92:4e:36:fc:76:ac:ff:e6:6b:40:23:db:44:28:dd:
                    a6:3e:09:0d:88:6b:bb:c8:20:df:93:de:1f:48:f6:
                    9d:f3:1e:04:7d:98:78:f2:99:bb:80:e5:d7:40:46:
                    eb:2e:83:37:26:0f:43:90:c9:69:3d:f5:4f:4a:6e:
                    4f:16:cc:88:c7:85:63:f5:2e:02:d3:56:c2:8a:25:
                    be:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:68:8B:27:8A:E6:5C:86:C7:A3:68:CB:6E:F6:D7:36:FC:01:77:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3588145e-fe93-34c9-9ffe-e2628fd8d094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:83ad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:59:fd:de:80:3d:4c:21:1e:1f:9e:c6:9f:a1:c2:a1:5c:5c:
         84:e6:6c:e5:37:ec:ff:66:54:9b:3d:a2:e9:cf:00:eb:1b:b3:
         45:47:5c:a9:ab:cb:c4:49:38:8c:1d:6b:0a:9d:6f:15:4e:e8:
         b3:f4:49:68:25:17:ee:40:5c:23:76:ff:f4:a9:74:66:ce:c3:
         df:bc:8b:a5:85:06:1f:ff:a1:a6:8e:3c:8e:f3:87:dc:c9:da:
         70:2e:b1:f3:a5:f3:72:6c:05:7d:83:12:3d:ba:c1:d0:cd:3d:
         e4:d5:58:52:de:43:a9:47:b0:db:f9:92:37:c8:a8:74:22:b3:
         20:70:4f:12:9e:3e:58:5d:86:28:c3:c3:4c:a7:e1:d4:22:d8:
         3e:e6:f2:61:16:76:b5:01:fb:0e:8a:e6:b8:4d:d5:b2:89:67:
         24:dc:29:99:23:ab:85:1e:fb:1a:43:e6:23:dc:73:9d:9a:f8:
         41:c7:93:94:70:ab:25:c9:1d:5f:48:d9:f3:1c:af:ae:44:5d:
         1c:2d:37:86:a0:08:7f:b1:e9:6c:bc:79:9c:a8:73:bc:bd:80:
         1c:5f:c2:8b:ef:9a:e4:b6:1d:d2:06:e6:a0:75:a5:61:87:88:
         a3:9f:09:f9:00:c0:50:d3:36:d9:50:c5:42:5c:14:dc:d0:65:
         dc:fb:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:42:43 2025 by rpki-client