Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/615170f0-6374-35a3-9f46-b8b1811c3add.roa
File:                     615170f0-6374-35a3-9f46-b8b1811c3add.roa (raw, json)
Hash identifier:          dOEVXnavRa5McZQQOkiypEmqDDM0dgkxU3Q4I7wEs2U=
Subject key identifier:   E8:BF:02:FA:C3:D8:B8:DF:4A:38:E2:AA:C4:39:D8:0E:AA:A5:7C:5C
Certificate issuer:       /CN=d3f6e139-58be-4d6a-b3c6-398860ef8f16
Certificate serial:       010D0C9F4328584802150CDFBE9C69D8E9323BB8
Authority key identifier: 1C:8E:2A:B4:36:07:53:B3:D0:76:05:F2:A9:52:2B:31:EC:31:73:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/615170f0-6374-35a3-9f46-b8b1811c3add.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     19700
IP address blocks:        2602:f9d1::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:15:0c:df:be:9c:69:d8:e9:32:3b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f6e139-58be-4d6a-b3c6-398860ef8f16
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=1fd00d3e-7bcd-417d-9152-79292257822d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fd:bf:72:7a:65:70:ab:4c:49:87:e7:f2:94:
                    59:ac:d5:f4:24:ee:60:09:f1:2c:a2:d6:d3:f4:4b:
                    d0:2b:3f:c8:14:fb:e2:f0:77:e1:82:99:e5:75:d0:
                    17:ae:90:fd:ca:65:3f:5e:16:45:d0:1a:22:02:2d:
                    e7:01:ac:f0:2f:a3:8b:25:78:a3:09:a8:e9:92:5b:
                    a5:a1:b9:88:86:ea:21:e5:7a:f3:64:4f:d2:1f:40:
                    82:58:b1:14:cb:fa:c6:70:b7:d9:64:44:c1:43:a0:
                    1f:21:6d:2f:f6:56:b2:46:42:21:3b:dc:8a:2c:04:
                    7a:1a:d9:2b:71:58:23:6c:99:76:12:e6:9a:91:20:
                    65:40:8b:47:d0:56:54:36:cd:4f:24:9c:48:7e:31:
                    c2:28:8c:9a:e3:5d:81:e9:69:03:6d:49:d0:f2:c0:
                    f4:c5:63:63:8d:a6:80:c4:65:1c:03:15:13:e3:0a:
                    71:13:3d:73:fe:6f:ce:52:11:b4:1e:6c:e5:9d:86:
                    97:c4:f5:da:1c:4c:1a:4c:14:34:18:ca:ed:8a:e1:
                    60:bd:e0:49:a4:e5:e2:7c:79:5a:9c:fb:ff:4c:e1:
                    94:d8:99:32:a4:2a:a4:8f:2f:fc:07:bc:33:1c:44:
                    7c:3f:37:85:13:44:04:24:72:6a:d2:66:14:9a:61:
                    50:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BF:02:FA:C3:D8:B8:DF:4A:38:E2:AA:C4:39:D8:0E:AA:A5:7C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/615170f0-6374-35a3-9f46-b8b1811c3add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/d3f6e139-58be-4d6a-b3c6-398860ef8f16.crl

            X509v3 Authority Key Identifier:
                keyid:1C:8E:2A:B4:36:07:53:B3:D0:76:05:F2:A9:52:2B:31:EC:31:73:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:de:16:e1:bf:e1:0e:c0:8b:9e:30:af:cf:2e:85:80:a3:2c:
         03:e1:b3:ed:91:eb:b0:fd:63:93:64:96:17:59:87:cf:4b:7e:
         71:6d:fc:d6:8e:57:65:16:9b:9d:9b:54:18:69:e1:df:9f:25:
         cb:4b:c9:36:f1:60:e4:d0:90:c4:f9:16:c8:f8:6a:eb:96:98:
         1e:52:de:7f:ec:ec:2a:c1:cb:fc:41:62:c6:f4:ba:76:4c:ea:
         da:30:9a:93:2a:28:fb:34:36:81:1b:94:af:ff:8c:ad:e7:7c:
         a7:b0:e6:ed:5d:d2:46:0b:44:df:4f:99:49:65:85:6e:10:dd:
         d4:97:4a:e4:17:6e:09:61:4d:e5:c5:6a:7e:e8:97:60:69:54:
         ab:d8:40:7c:7e:5c:b3:44:a0:a2:23:f0:dc:a3:20:d5:ee:5e:
         57:9d:b9:b1:42:5c:92:00:81:f0:23:26:22:42:7d:63:8e:0e:
         91:c2:be:a6:3a:de:dd:a8:96:2a:45:5e:be:99:1e:1f:c6:c4:
         5c:de:27:ef:ac:84:0b:7e:de:1e:9d:80:aa:52:c1:fc:ff:1d:
         58:59:54:7a:c4:28:82:b0:ed:b2:b3:49:ce:be:36:86:b2:2c:
         02:ec:f3:3f:88:02:25:5b:96:a1:10:f8:d2:2f:62:a2:e6:47:
         8f:6f:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:39 2025 by rpki-client