Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8427be0-9190-3987-8273-e9013149fea2.roa
File:                     a8427be0-9190-3987-8273-e9013149fea2.roa (raw, json)
Hash identifier:          SkF4EZyWzSLsIhoUmklnb4DS1NoDt6Ts1H/FffU5xSA=
Subject key identifier:   58:BC:30:A1:EF:81:D1:F3:F5:9B:19:75:B7:BC:22:B9:F7:21:BD:93
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF8FC70256082EFA1C1C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8427be0-9190-3987-8273-e9013149fea2.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8099::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:8f:c7:02:56:08:2e:fa:1c:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=44efee09-ca66-42f5-9d90-c623dff6391f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:98:66:f9:2c:fe:31:74:70:a1:11:a4:5b:a1:
                    cd:f8:94:fc:6f:13:36:1e:56:cf:7a:6b:4f:67:b0:
                    b2:2f:d3:23:17:27:88:95:46:b2:fd:71:b0:b1:54:
                    72:7d:13:a2:ea:d9:f5:82:ae:85:23:8a:09:62:dd:
                    47:69:93:5b:8a:2e:5d:0b:8e:4b:e7:47:63:dd:ad:
                    4d:af:a0:4f:dc:68:be:2e:9c:d4:54:2f:9d:e3:f5:
                    da:03:3f:31:2c:2e:e3:d2:84:04:b4:f4:5e:ba:22:
                    e3:71:15:b8:fe:46:00:5f:38:4b:c1:1e:ca:08:49:
                    87:55:8f:38:20:13:18:f4:2f:d8:df:57:a0:3c:bf:
                    3f:13:f3:fd:09:2e:65:ac:11:eb:bd:18:41:79:9a:
                    05:5c:ea:5e:75:5a:c3:f9:4e:be:e3:22:27:01:ca:
                    0b:87:28:d3:53:e4:02:47:b0:18:64:88:66:a7:28:
                    98:20:9d:cc:6a:28:61:0d:2b:b2:d0:ed:6d:61:9a:
                    53:9b:d0:f1:8d:a9:06:0a:c8:09:8c:a1:96:97:90:
                    79:d9:cf:2e:9e:22:55:fb:fa:56:b9:db:64:14:85:
                    80:2a:12:cf:26:cc:f9:15:8f:a1:f2:3e:1a:9c:13:
                    07:4d:48:82:33:9c:f0:bb:5c:2f:76:2e:d2:65:b5:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:30:A1:EF:81:D1:F3:F5:9B:19:75:B7:BC:22:B9:F7:21:BD:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8427be0-9190-3987-8273-e9013149fea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8099::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:54:19:b5:59:12:61:a6:25:34:fd:8f:b0:66:5a:0b:d7:14:
         19:37:78:31:e0:40:f9:a5:10:12:c8:3e:ed:9e:12:34:45:96:
         9e:9b:dd:5b:04:19:35:9d:83:08:65:5e:df:85:7e:c5:75:a6:
         bc:08:96:58:ab:c9:f8:bb:a6:77:b3:d5:b2:9e:c8:ce:8c:f8:
         60:9b:18:94:cc:56:73:9c:41:b8:ca:5c:fc:13:c7:a8:35:85:
         7e:e1:4f:66:50:ad:f6:31:19:2a:91:53:06:67:b2:c3:f3:cb:
         05:5d:70:79:63:1b:e8:9b:c7:ba:a8:85:ee:db:cf:8a:d1:d6:
         60:3d:dc:a1:56:d7:74:00:20:71:df:d3:63:a2:36:65:1a:f4:
         f0:e5:54:c4:f6:b4:d5:db:62:d7:71:05:20:98:c5:c5:4a:94:
         a1:01:5e:fe:85:63:0c:77:e7:43:f7:7a:f4:5c:3c:b0:88:57:
         48:8e:08:0a:1c:73:8e:45:82:e7:e2:2c:5d:4e:64:19:92:32:
         5f:55:ab:cf:3a:21:d2:28:60:9a:fb:e0:fa:d7:97:05:c8:9d:
         dc:3a:7a:1a:05:c7:ac:ce:18:0d:ba:77:8b:97:5f:1d:21:56:
         11:d8:16:2b:3c:5d:46:a2:c0:c2:e0:b6:cd:74:25:8f:c7:6c:
         85:40:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:49:09 2025 by rpki-client