Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9033ce29-1a6c-3772-a526-84a80ca45e6d.roa
File:                     9033ce29-1a6c-3772-a526-84a80ca45e6d.roa (raw, json)
Hash identifier:          smsISzb5hw2GhQ8m3KL2GuNUEJXaDl6DG5oFQrL9Ev8=
Subject key identifier:   04:DB:04:78:DB:72:59:ED:C7:2B:83:F6:1D:0E:74:67:0E:AB:46:89
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFC059B98090F817E5DC40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9033ce29-1a6c-3772-a526-84a80ca45e6d.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c0:59:b9:80:90:f8:17:e5:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=091c33e2-e642-4bb2-9fa4-0a4ccd0998d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:e7:4d:83:ec:31:51:91:cf:7d:09:da:47:
                    81:cc:cb:2c:b0:e3:3b:5c:35:75:25:8a:d1:35:9a:
                    bb:68:e4:9e:89:6c:f8:23:80:45:bb:3a:35:36:55:
                    ff:0c:7e:ee:a9:7b:4e:f8:8b:53:d7:ca:28:ec:0b:
                    b8:18:69:c4:d6:06:d6:34:b4:55:29:95:82:1c:03:
                    df:3b:89:62:e2:99:11:3c:86:a7:a6:a5:3e:14:5f:
                    53:02:bb:7a:c7:51:df:56:e7:2c:44:90:b3:0d:90:
                    27:c1:5c:8d:dd:70:22:bd:3f:74:f9:05:77:c0:50:
                    e9:ac:3d:bc:2e:10:55:d6:e2:d5:70:76:59:a9:ec:
                    a8:13:cc:cb:11:c0:d0:fa:b5:a9:be:a7:b1:8d:b3:
                    52:95:69:b5:09:fc:dc:67:be:4c:ad:37:0a:38:5e:
                    3e:df:13:ec:e5:a7:2b:d8:1f:b6:a7:64:9d:60:28:
                    5b:6b:1d:15:df:c0:4c:0f:fa:c9:07:6c:07:00:84:
                    30:cb:7b:4b:b7:9c:5b:85:59:f7:0e:8c:d8:93:2b:
                    57:23:8d:52:95:d7:be:5e:26:53:0e:6d:4f:94:ac:
                    de:c4:00:b3:66:34:ac:5e:c9:5e:1d:bc:60:ae:1d:
                    39:54:05:e9:fa:69:66:fe:31:33:2a:76:41:f3:51:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DB:04:78:DB:72:59:ED:C7:2B:83:F6:1D:0E:74:67:0E:AB:46:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9033ce29-1a6c-3772-a526-84a80ca45e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:77:bb:0d:c0:bd:41:53:c2:aa:46:01:0d:dc:14:cb:0d:65:
         42:be:11:9e:52:a0:13:b8:3b:d8:ad:2d:6f:75:29:bb:0e:eb:
         4b:b6:82:e8:19:6b:db:c4:f1:69:26:34:63:d4:1e:70:34:01:
         6f:84:12:40:c0:57:2a:e0:7d:95:c4:a8:cf:b4:a8:1e:03:68:
         eb:48:6c:e8:62:10:e9:24:e5:b4:39:de:36:3d:0c:a1:87:62:
         6c:52:3b:8a:12:10:3c:60:cc:a8:b4:4b:1e:d3:b9:62:83:fb:
         7d:9f:73:55:2c:50:03:71:6c:ec:1f:6d:a8:c2:ee:84:4a:d1:
         bb:cf:c2:99:70:1a:a0:f3:e3:2c:fe:8a:43:3f:59:ad:09:d2:
         56:28:17:49:96:dd:66:c6:cb:e9:39:37:76:83:a1:3c:35:f4:
         02:15:3d:c6:fe:78:ba:5a:9a:94:57:3c:2f:89:d6:26:8f:4c:
         a1:3a:33:a4:ab:77:93:c8:48:00:85:f0:78:b2:36:5b:0a:f0:
         f8:4d:cf:18:f7:22:88:b5:f3:45:28:94:a9:55:04:c7:f9:00:
         ec:21:ab:0c:c2:07:40:e3:3f:03:2b:97:11:85:5c:2d:33:d9:
         ac:96:1d:66:04:20:77:b1:6c:50:bb:0b:57:e7:00:65:cd:c2:
         4c:13:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:37 2025 by rpki-client