Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
File:                     17bdc031-206a-3420-b709-d3ce9d5f5850.roa (raw, json)
Hash identifier:          YgFgUiSaIAcuJ4IbyUztHOZufT/48tjRwWmWPyfmxDE=
Subject key identifier:   0D:47:E3:67:1A:2A:4A:D2:15:08:98:13:6E:46:F0:F6:D8:3A:AE:17
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F4328584832F0260ADD470814D41EAD80
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397901
IP address blocks:        2602:fc56::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:26:0a:dd:47:08:14:d4:1e:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=389f7035-3955-4d54-999c-5f1ee8dba332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:14:65:2b:31:e0:c3:74:f2:53:20:fb:22:50:
                    5b:ce:95:d4:f2:ec:fd:92:d6:e5:47:00:ff:78:97:
                    7a:c1:c6:52:87:90:de:a7:b7:c3:3e:6e:9e:8a:19:
                    6b:3f:9c:ff:ff:3a:3e:76:e5:84:9e:5e:be:c1:db:
                    b9:7f:0b:4b:eb:41:6b:fa:fc:f5:05:27:63:c9:ea:
                    2e:92:f2:e4:db:a9:65:b6:ea:9e:13:99:7c:24:d5:
                    39:7f:87:97:7f:72:92:f9:fa:d3:b7:ee:0d:62:da:
                    c0:94:b4:ab:10:00:9c:1b:be:7b:71:ef:f1:b8:4b:
                    1a:74:39:8a:e6:78:c2:1d:d2:6e:a0:a0:f4:c0:e3:
                    ae:4d:2e:a6:3e:c3:32:3e:49:8e:ad:57:0e:6b:58:
                    c0:43:b8:52:8f:6b:37:99:61:3e:d8:cf:bd:27:a8:
                    30:9e:19:28:51:be:6f:89:08:fe:cf:6d:0a:96:7d:
                    27:5a:1b:7d:99:53:bb:bb:27:7d:71:06:ac:44:f3:
                    92:ab:62:62:06:9a:9b:71:ba:74:70:b9:67:2b:42:
                    09:22:cb:88:83:c9:54:cc:88:a5:d4:70:3d:87:28:
                    b9:ce:17:cd:5f:b4:3b:dc:5c:a1:0f:13:4a:06:3e:
                    98:c8:da:3f:85:e2:d6:d7:57:13:90:ca:70:a2:28:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:47:E3:67:1A:2A:4A:D2:15:08:98:13:6E:46:F0:F6:D8:3A:AE:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc56::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e7:3c:ce:d7:f6:c7:1c:46:22:a8:1c:f3:5a:c2:a8:46:9e:
         02:cf:8d:48:db:c4:13:7f:a1:72:5b:ef:c0:27:fc:72:f8:37:
         b0:b1:26:8d:95:e9:09:d4:1c:cd:ac:c3:a1:06:12:f2:52:e6:
         f5:36:bc:8b:77:34:dd:53:76:1f:c0:a7:ee:4d:ed:eb:38:4c:
         ab:77:22:70:95:fa:54:ce:33:47:e8:08:b9:93:64:d8:07:bb:
         49:ea:d0:a0:9b:ec:26:7a:ac:33:04:2a:f4:61:b5:f2:98:ce:
         8a:80:55:3e:cb:cf:e7:de:26:3f:29:8e:c1:6a:86:aa:7d:5d:
         8a:4c:6c:71:c6:32:b0:de:6b:e9:97:02:7c:95:cd:4c:43:26:
         20:c0:f5:24:91:e8:e1:f7:29:35:33:48:a3:0b:da:68:b6:11:
         78:af:a8:bb:29:3b:a8:81:d0:e3:3d:05:55:6a:1d:0e:49:a3:
         73:20:40:9f:68:a6:22:6e:3b:91:0f:ea:46:ee:f8:8a:cf:15:
         53:13:c4:f4:1b:5b:e6:bf:10:df:05:e7:89:c1:bd:02:ec:24:
         8a:3d:dd:32:45:64:4e:f4:c3:79:02:e7:76:a1:92:f3:b5:14:
         05:84:94:c0:26:ba:91:f9:cb:31:95:91:a1:1c:df:14:03:ca:
         b7:8b:3a:86
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgy8CYK3UcIFNQerYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjljNmExOWUtYTgzYy00M2FkLThkMTAtNjhkYWViMTYw
MDMzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
Mzg5ZjcwMzUtMzk1NS00ZDU0LTk5OWMtNWYxZWU4ZGJhMzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRRlKzHgw3TyUyD7IlBbzpXU8uz9ktblRwD/
eJd6wcZSh5Dep7fDPm6eihlrP5z//zo+duWEnl6+wdu5fwtL60Fr+vz1BSdjyeou
kvLk26lltuqeE5l8JNU5f4eXf3KS+frTt+4NYtrAlLSrEACcG757ce/xuEsadDmK
5njCHdJuoKD0wOOuTS6mPsMyPkmOrVcOa1jAQ7hSj2s3mWE+2M+9J6gwnhkoUb5v
iQj+z20Kln0nWht9mVO7uyd9cQasRPOSq2JiBpqbcbp0cLlnK0IJIsuIg8lUzIil
1HA9hyi5zhfNX7Q73FyhDxNKBj6YyNo/heLW11cTkMpwoig64QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFA1H42caKkrSFQiYE25G8PbYOq4XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOWM2
YTE5ZS1hODNjLTQzYWQtOGQxMC02OGRhZWIxNjAwMzMvMTdiZGMwMzEtMjA2YS0z
NDIwLWI3MDktZDNjZTlkNWY1ODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjljNmExOWUtYTgzYy00M2FkLThk
MTAtNjhkYWViMTYwMDMzLzI5YzZhMTllLWE4M2MtNDNhZC04ZDEwLTY4ZGFlYjE2
MDAzMy5jcmwwHwYDVR0jBBgwFoAURYuDipgToB+X1z11nxV01t29atEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yOWM2YTE5ZS1hODNjLTQzYWQtOGQxMC02OGRh
ZWIxNjAwMzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8VgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXuc8ztf2xxxGIqgc81rCqEaeAs+NSNvEE3+hclvvwCf8cvg3sLEm
jZXpCdQczazDoQYS8lLm9Ta8i3c03VN2H8Cn7k3t6zhMq3cicJX6VM4zR+gIuZNk
2Ae7SerQoJvsJnqsMwQq9GG18pjOioBVPsvP594mPymOwWqGqn1dikxsccYysN5r
6ZcCfJXNTEMmIMD1JJHo4fcpNTNIowvaaLYReK+ouyk7qIHQ4z0FVWodDkmjcyBA
n2imIm47kQ/qRu74is8VUxPE9Btb5r8Q3wXnicG9Auwkij3dMkVkTvTDeQLndqGS
87UUBYSUwCa6kfnLMZWRoRzfFAPKt4s6hg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:49:22 2025 by rpki-client