Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa
File:                     bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa (raw, json)
Hash identifier:          ZqkYIo+acHxf2lXBkrd/XBhiL3Ea2zthU9VGuRz1UxY=
Subject key identifier:   64:2D:BC:FB:6B:93:3A:1F:DD:79:CD:71:A2:CB:CC:37:EE:9B:AF:B2
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F432858486EF5BE001FE6DF2AB0A7F000
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     30698
IP address blocks:        2606:e740::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:be:00:1f:e6:df:2a:b0:a7:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=e223ae8e-bfec-4e30-bdba-ab477b79253f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5b:17:aa:ae:21:3e:eb:f3:44:b7:26:f1:1b:
                    2c:4d:6e:e9:63:42:65:50:b3:5c:4a:56:40:00:91:
                    66:da:2a:32:12:40:90:db:09:d0:f1:06:09:d8:53:
                    a4:1a:33:b6:c5:aa:c0:24:77:3c:20:c0:55:71:85:
                    65:c2:33:e4:44:ec:f3:6b:07:a6:fe:60:d2:4a:0a:
                    ed:36:21:a2:b9:c6:2a:af:52:c6:b0:86:ab:01:7e:
                    14:cf:5a:aa:a1:de:a7:3d:94:ce:99:db:03:5d:d6:
                    ff:ff:56:f2:ec:64:8d:6a:a6:81:9d:80:84:f0:77:
                    53:61:07:33:66:44:6c:07:ba:81:6d:52:b7:7d:0f:
                    98:7c:24:50:8f:15:33:3c:58:be:4b:18:0f:37:0d:
                    95:69:71:df:dc:58:4b:0e:6f:c8:7c:3b:1f:f2:01:
                    9d:d3:7a:c1:82:f6:8c:30:79:d1:3b:1a:19:41:ca:
                    31:5a:8b:bd:02:77:9b:32:e2:b6:9b:97:e7:dd:ef:
                    37:60:a9:f5:08:00:41:9f:6e:65:94:54:a8:c8:58:
                    c0:da:a9:8f:8f:0e:c1:3c:f2:ce:82:63:4f:ba:be:
                    40:62:a1:80:6d:e8:7c:eb:f7:fd:d0:70:48:b2:4b:
                    2a:bf:72:24:94:72:81:1e:27:bd:e4:76:7e:67:e5:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2D:BC:FB:6B:93:3A:1F:DD:79:CD:71:A2:CB:CC:37:EE:9B:AF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:10:b9:4e:15:e0:5d:7b:1f:33:36:27:9d:2d:01:8a:70:1f:
         8a:64:d6:e7:3a:15:0c:8a:4e:15:f7:11:6f:5b:1f:85:8a:6f:
         d1:d7:3e:33:b5:b1:00:b0:cd:7f:b5:49:f6:0b:ea:a0:8d:c3:
         bc:99:6a:c1:63:e4:a8:96:eb:c8:9b:fa:f2:69:73:4f:39:ae:
         1b:de:b2:54:4b:d8:9f:a9:18:fb:5a:2d:1d:e5:46:d8:ba:c2:
         12:08:b0:26:92:ad:ab:8c:91:68:ea:66:42:37:31:2a:54:16:
         af:1c:ea:d0:8d:03:f9:c7:7f:96:88:a9:39:37:63:5e:57:04:
         bc:01:12:ad:77:70:ed:13:72:61:ec:15:c6:7e:eb:73:85:ec:
         b1:6c:db:4f:30:0d:05:56:5b:1b:66:62:ff:9f:07:71:cb:d2:
         d4:5e:d1:80:60:92:7a:17:d6:32:73:98:7a:a0:90:f8:82:45:
         47:8f:97:16:ec:3a:01:0b:ef:cb:d6:da:67:4d:1a:e9:95:f3:
         84:b3:24:c2:0c:cc:e7:f9:88:37:b0:6c:7e:b4:f1:4d:6f:1c:
         27:90:82:05:23:c1:2e:ab:b3:12:84:d6:d1:9a:be:a9:05:f9:
         e0:21:23:ab:38:a6:d5:45:13:13:cb:ac:da:ec:1b:a7:6f:5d:
         fa:58:7a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:21:33 2025 by rpki-client