Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/261f833a-66e3-3d69-8956-e5ed30513310.roa
File:                     261f833a-66e3-3d69-8956-e5ed30513310.roa (raw, json)
Hash identifier:          cWYyXrpOke8H12jmjFq/fa7UBpl+L7c+MzT0Q+cU2gA=
Subject key identifier:   F9:92:2C:8C:72:74:77:60:4F:F6:03:3A:FA:F1:41:E0:E2:DA:62:3D
Certificate issuer:       /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
Certificate serial:       010D0C9F432858480644FED279E79CE83BB91980
Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/261f833a-66e3-3d69-8956-e5ed30513310.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     6327
IP address blocks:        2001:4e8::/32 maxlen: 48
                          2604:3d00::/28 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:fe:d2:79:e7:9c:e8:3b:b9:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=7a046f3a-fa57-496e-868c-e4595375ec10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:4a:9a:4a:2d:63:60:9b:b8:83:58:47:58:
                    2b:2b:5a:0b:37:be:65:d0:8f:4d:c8:4a:fa:d0:9f:
                    1d:f1:9b:92:71:dc:09:ff:8e:b5:83:4b:66:42:42:
                    9d:ce:a0:36:ae:e8:80:8f:9e:1e:58:87:ab:ac:32:
                    10:25:e9:fc:f5:b1:c3:3c:d3:94:40:69:0d:ae:a6:
                    95:16:ea:01:e3:2c:4b:ce:4e:99:be:56:45:df:40:
                    ed:6e:1d:49:de:60:6f:05:99:f9:ed:98:d6:8f:f7:
                    09:3b:b9:fa:ab:e0:13:a2:a0:5c:a2:e8:4d:76:76:
                    16:c1:91:34:6e:cc:5c:ae:c0:0c:90:84:59:ad:3a:
                    94:cb:22:a5:34:c2:7c:81:f3:4a:f2:9a:b4:dd:d7:
                    4b:32:ed:2a:85:c0:a2:9c:ba:27:82:ce:d9:1a:94:
                    85:cf:61:4b:1c:39:74:d2:8d:88:c9:b8:77:84:6e:
                    ff:62:81:c0:30:40:fb:ee:87:a1:db:19:06:a9:bc:
                    0c:5f:64:84:a2:ef:ea:fe:cc:87:a8:ba:1c:e9:5a:
                    74:3a:f1:95:67:3e:28:f0:2c:a0:99:58:ab:06:bd:
                    ef:c7:87:d2:80:a8:00:8a:82:a2:39:ff:34:e5:73:
                    ce:ae:d4:d3:e7:2a:11:66:70:cc:72:6f:60:ad:b2:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:92:2C:8C:72:74:77:60:4F:F6:03:3A:FA:F1:41:E0:E2:DA:62:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/261f833a-66e3-3d69-8956-e5ed30513310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl

            X509v3 Authority Key Identifier:
                keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e8::/32
                  2604:3d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:94:e7:bf:7f:4a:cd:c0:8f:38:e7:31:bd:52:2a:ef:3f:3a:
         e4:d8:cf:c5:1b:b4:21:00:30:67:34:5c:e2:84:43:60:47:f4:
         66:f7:9f:86:d4:6c:e1:b7:85:c3:7c:74:0d:46:81:7a:59:45:
         66:47:63:45:f4:16:64:77:b2:bc:3c:9a:e0:23:48:9b:d2:ac:
         53:0f:cb:d4:d8:d6:67:7b:36:92:04:ff:7b:90:23:26:04:8c:
         03:4a:1e:dc:e2:69:bb:97:87:b2:59:95:ec:a4:ed:fd:04:70:
         d3:e7:74:7d:24:be:15:7e:b1:09:0b:1e:60:c0:47:d7:16:0b:
         b0:a9:de:1d:aa:4b:e9:7f:3c:36:1a:d0:66:fe:25:94:1f:36:
         d3:7e:22:fc:f9:2d:fa:5c:69:de:6c:34:94:8d:15:9a:3a:7f:
         ac:9a:b5:a2:4e:25:c7:e9:b5:58:cd:1c:f3:3e:d4:5a:23:79:
         b6:6a:03:b2:40:71:3f:d4:dc:32:20:c3:33:a0:bf:cc:25:e6:
         fc:ab:ea:05:39:3b:21:9b:d2:e1:12:a5:13:af:4d:bf:46:13:
         66:c3:c2:30:2b:c3:56:23:a8:66:bf:16:88:2e:e8:b3:1f:3c:
         66:d6:6e:11:bc:0c:23:1e:ae:34:61:ae:1b:b3:df:47:46:84:
         50:83:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:10:08 2025 by rpki-client