Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa
File:                     b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (raw, json)
Hash identifier:          lV2EB4j/RXwAtT4rzzsbFUzc2L5mCRQHBrkwk1cufRs=
Subject key identifier:   58:1E:28:BD:C8:BD:CB:D9:2F:7A:FE:73:E0:F5:19:23:F8:73:F1:D6
Certificate issuer:       /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
Certificate serial:       010D0C9F43285848467AC095F79A86A1C7899F80
Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa
Signing time:             Sat 21 Dec 2024 02:00:39 +0000
ROA not before:           Sat 21 Dec 2024 02:00:39 +0000
ROA not after:            Fri 21 Mar 2025 01:00:39 +0000
asID:                     3390
IP address blocks:        2610:e0:a040::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:46:7a:c0:95:f7:9a:86:a1:c7:89:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
        Validity
            Not Before: Dec 21 02:00:39 2024 GMT
            Not After : Mar 21 01:00:39 2025 GMT
        Subject: CN=e8b399e4-5b0c-476b-a272-c868096a6732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:26:fa:ab:30:f5:d6:2b:fc:11:86:b4:f2:36:
                    12:83:6d:57:08:fd:94:b3:e5:ad:e5:18:e9:1f:23:
                    d0:c1:22:df:aa:36:5a:86:1f:ec:14:6a:d4:41:78:
                    6c:38:6b:a2:65:0e:22:9f:4c:e2:60:42:90:0f:b6:
                    f2:2e:6a:7f:66:aa:56:d8:34:90:89:3e:df:9e:a7:
                    db:73:44:1a:de:96:b3:5e:31:b6:c3:67:6a:21:8a:
                    f5:20:89:0d:f4:21:1d:0d:49:da:07:42:38:93:2e:
                    54:9b:02:2f:fd:41:8d:39:85:8c:41:4c:21:8a:54:
                    98:4b:9e:74:a5:e8:b0:ee:54:8d:e0:51:93:d8:cd:
                    fd:05:96:7a:11:cb:3f:d6:b9:f3:01:aa:e8:c2:88:
                    a5:90:2f:62:f8:87:f4:69:38:2f:87:be:31:14:fd:
                    2c:ee:0a:2c:50:85:37:61:06:1f:f9:dd:2d:db:00:
                    ea:70:31:e3:7e:c8:50:0e:53:d2:8f:c9:e9:f6:6b:
                    88:2c:8f:d6:87:c8:fa:f4:dc:3e:eb:60:d5:5b:cc:
                    37:40:67:1a:71:f2:f0:93:22:50:dd:cf:78:54:e2:
                    66:c7:e3:9a:83:fb:7a:04:c6:c1:95:73:3d:93:36:
                    e0:cf:c0:a7:46:0b:20:0c:20:bf:84:8a:85:d9:71:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1E:28:BD:C8:BD:CB:D9:2F:7A:FE:73:E0:F5:19:23:F8:73:F1:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl

            X509v3 Authority Key Identifier:
                keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e0:a040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6d:1c:de:57:22:26:0d:75:ec:6b:59:36:d0:d6:93:49:a9:
         f0:7e:f4:26:92:58:c8:fe:f6:46:20:05:30:34:94:96:bc:95:
         f3:b1:c6:08:6d:03:2e:77:87:7e:70:73:62:ff:01:aa:31:04:
         13:30:d2:73:c5:b5:7e:ab:6a:fc:d5:4e:d1:6d:2b:80:e1:73:
         b0:31:43:00:28:10:c3:7b:00:85:ed:c1:5d:f7:a0:2c:90:51:
         5d:86:41:19:f9:02:89:03:4d:39:c6:b3:63:da:16:2e:f5:c7:
         c6:a4:be:b8:5f:95:07:d4:11:b3:e8:5a:d6:91:6f:1b:8d:d2:
         43:55:65:d0:19:40:eb:4a:08:0d:63:9e:6a:ff:1b:c8:d4:6e:
         89:21:07:e0:08:3a:7a:76:8f:25:58:f0:d0:69:e4:9f:68:05:
         c4:d3:a1:af:27:f5:7f:58:f2:09:5f:ff:47:f0:6f:1a:8d:5a:
         85:4d:50:58:46:c9:35:b8:d2:9a:fc:8a:a5:f7:b5:b9:a6:20:
         36:50:cb:c1:e6:d3:e3:10:49:cd:ee:a9:e2:b1:32:52:48:d3:
         da:12:11:af:46:5d:2a:94:ab:ec:bc:72:c2:fd:9c:69:6d:ec:
         5b:e6:0d:f9:f1:4d:3d:0a:a7:e5:fb:6c:fd:32:d5:9b:02:ba:
         a8:f6:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:06 2025 by rpki-client