Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa
File:                     1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa (raw, json)
Hash identifier:          eblQEw6ohAsO6R0cBM0Tnnm2YWOMvJOXKSI5sgYlqTE=
Subject key identifier:   B5:70:FA:7E:13:8A:47:40:9F:82:0D:5D:65:1C:AF:74:A5:77:B7:CD
Certificate issuer:       /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71
Certificate serial:       010D0C9F4328584886B07B6B27363D0BBE67B680
Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     395388
IP address blocks:        2620:c2:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:7b:6b:27:36:3d:0b:be:67:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=6fd35d57-34c9-441d-a892-5f7a4fb1a1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:5c:04:f1:26:c7:c2:ff:6f:5a:12:db:ce:
                    78:4a:b5:09:cf:c3:80:54:70:d7:3c:1c:80:e7:b4:
                    6d:dc:6d:d1:4f:1f:c6:8b:e6:ca:b0:cb:1e:4b:fc:
                    ba:59:a0:3b:b1:66:b4:cb:66:6b:69:d3:53:6a:fc:
                    95:5c:69:ad:e1:f0:31:66:30:42:54:16:a0:91:1b:
                    fa:56:90:c2:ca:ca:e9:c9:eb:c3:db:6f:f8:48:86:
                    a7:d1:fe:0a:cb:fd:ef:f5:1a:a5:3d:1c:19:b6:f0:
                    56:36:e0:af:e8:c1:2d:81:53:03:6b:c6:19:5e:e7:
                    7e:55:e3:66:c9:1c:a3:3a:7f:5f:46:42:45:b0:35:
                    8c:8d:04:90:74:e2:ba:09:d8:1a:1c:b1:60:57:54:
                    a2:c7:30:ad:23:09:a9:26:19:25:a4:3d:10:e0:2a:
                    8f:76:8a:a2:74:76:72:5a:19:5b:f1:c1:8d:ee:d6:
                    3b:88:1c:0a:0f:8c:aa:4d:05:f0:98:d8:80:0e:63:
                    f2:5d:ea:fa:eb:d6:06:7c:d0:b5:ec:a7:38:90:e1:
                    2d:38:57:32:c7:b1:98:4e:3d:30:19:fa:70:ea:09:
                    cb:e0:5c:db:62:3a:78:67:f3:5e:8d:fc:19:5e:9b:
                    ff:9d:6b:6f:a2:3c:3f:ea:32:e8:ba:4e:72:8a:ce:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:70:FA:7E:13:8A:47:40:9F:82:0D:5D:65:1C:AF:74:A5:77:B7:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl

            X509v3 Authority Key Identifier:
                keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c2:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:86:e8:1b:87:e7:9a:1f:53:f9:13:b7:4e:63:55:c7:e5:80:
         92:c0:01:b8:47:c1:9f:dd:bc:74:34:0c:ad:08:54:79:87:55:
         f8:5a:45:37:69:d9:38:35:70:19:70:37:f6:5f:a4:03:18:5b:
         22:15:21:8f:bc:41:06:7b:bd:9d:a2:f7:5f:43:05:a0:4e:3d:
         c2:b9:a7:1b:45:2f:d0:bf:1a:34:c6:99:93:bb:d6:a8:45:06:
         aa:18:d7:ac:7c:9e:5f:07:fc:3a:f2:7d:77:37:51:f1:c5:03:
         4e:c1:20:46:93:09:5b:67:8c:9f:d1:99:79:dd:9d:b2:88:42:
         63:25:d7:83:19:9f:d1:45:ed:2d:bc:bb:10:53:ec:85:da:ed:
         78:b3:9d:95:59:ec:d6:d0:60:c3:7b:0f:9f:d7:d3:97:49:52:
         ef:bf:44:b8:77:ba:45:64:b0:6f:aa:1c:db:8f:b4:c5:8f:04:
         c5:9e:39:44:2e:d5:a1:fe:18:bd:63:96:48:a5:be:c3:bf:bc:
         0f:f1:c2:66:77:d9:cd:57:ba:69:91:77:5a:fb:90:77:e1:c3:
         49:d6:5f:f0:e3:44:c0:65:85:5f:c5:5f:92:4f:ed:1d:77:41:
         13:a9:a3:92:22:0e:eb:cd:54:d3:c0:35:25:68:df:88:a2:f8:
         8e:cb:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:17:08 2025 by rpki-client