Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa
File:                     5c2617d4-b863-3aea-89a8-20002822ac28.roa (raw, json)
Hash identifier:          P4bjEu8x8VuzUbZdRimt42A9o2UelzoS3oD/MbBagKg=
Subject key identifier:   93:9D:D9:78:AB:4F:97:4D:A9:BC:E6:67:60:60:F4:31:EB:99:89:AC
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F43285848265FF543E74AC5A07885A780
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     18914
IP address blocks:        2607:1cc0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f5:43:e7:4a:c5:a0:78:85:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=230bd970-1f2f-4418-a57a-2cb4eae9dc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5b:39:46:6a:47:71:08:66:02:a3:a5:b4:e1:
                    95:54:0a:a9:4c:cc:80:bd:b6:eb:95:d2:61:e3:bf:
                    b0:f8:a5:e6:45:64:ba:67:52:8d:65:bd:c7:2d:16:
                    a3:59:fb:80:e2:3c:83:bd:ac:4c:bb:22:1b:9a:6b:
                    1b:74:48:e4:9b:88:4c:b3:50:2b:48:5c:04:7f:f8:
                    bf:54:da:d4:a1:e8:5c:b4:89:22:f9:68:37:96:ed:
                    dd:43:39:4e:9b:13:39:15:51:42:75:83:4c:d0:6a:
                    2b:bd:ba:48:1e:e0:62:a0:1d:d1:81:cd:74:78:b9:
                    43:93:d3:f6:5b:c3:b0:3d:38:6b:d8:5e:19:41:57:
                    aa:05:1e:12:f3:c5:5d:33:4e:32:85:13:9d:28:eb:
                    8e:2f:ba:c3:8f:e7:9d:ab:3c:d3:1a:76:db:b6:c5:
                    9d:9f:b6:0a:56:4b:2c:5e:9f:99:ce:dd:a5:b0:34:
                    d1:7d:71:c5:8e:5a:02:12:b9:fe:72:78:c6:b7:6f:
                    69:14:4c:e0:9f:c0:86:13:84:b0:49:bb:87:dd:1e:
                    1d:ed:b7:42:d9:af:bb:f0:a2:b2:62:8a:8c:6b:aa:
                    76:b0:5a:7d:50:95:72:27:6a:7d:c5:2e:09:a9:b4:
                    cd:e2:6c:82:0c:15:2b:df:57:61:29:6b:ae:c6:02:
                    be:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9D:D9:78:AB:4F:97:4D:A9:BC:E6:67:60:60:F4:31:EB:99:89:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:0e:cb:d6:50:09:39:e1:da:c4:da:96:fa:24:0f:37:e7:
         f1:c5:4e:fc:8b:e7:35:d5:60:81:1a:65:86:97:86:b0:81:2a:
         34:a0:9c:25:c2:99:ec:d0:73:48:f7:f4:95:1b:20:04:ea:1a:
         67:44:59:cf:fe:f1:c0:4f:66:4d:99:ca:f8:4a:f4:6f:5d:a9:
         95:18:cb:4c:61:e9:f5:06:bb:6c:5c:16:3b:36:32:0d:71:10:
         0d:a5:9c:df:8e:f7:ce:ab:83:0c:ff:a2:ea:e8:2b:3f:71:1d:
         89:2f:94:30:6c:43:c2:a6:78:18:e7:12:cd:5d:1d:4b:3a:82:
         ff:a7:e1:a6:af:4a:e0:59:42:ef:7d:10:0a:48:57:85:89:90:
         f8:ac:60:70:6b:5c:38:d2:04:79:af:27:9b:fb:c0:a6:89:53:
         c2:dd:b8:cb:20:1c:45:b7:ad:94:60:02:aa:f7:4e:49:79:49:
         e1:e5:b9:83:21:03:c6:8e:af:60:57:84:42:39:64:7d:2b:81:
         64:4c:c2:87:24:fa:ec:f5:e6:ac:a8:c2:c0:99:c6:65:05:c0:
         f5:ad:80:db:6e:84:9a:a8:98:2e:55:1d:c8:f6:b3:26:ae:51:
         12:75:be:e3:61:2b:53:ad:86:4b:dd:9f:d5:7a:8e:37:34:f5:
         d5:fa:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:42:58 2025 by rpki-client