Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/8ca5b939-f26d-3af6-a54c-135879a692a9.roa
File:                     8ca5b939-f26d-3af6-a54c-135879a692a9.roa (raw, json)
Hash identifier:          6hCpgJ0aVRJ2LwROzZwRBPmziTtfpcSrv4XQSFnKvsk=
Subject key identifier:   51:BB:28:1C:C7:AA:68:B5:4C:9F:60:CE:49:43:4D:E0:29:94:E0:2F
Certificate issuer:       /CN=69036fae-75b3-45ce-a305-23f9913eccea
Certificate serial:       010D0C9F432858480644F9F9920E9CDF4B4A3840
Authority key identifier: CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/8ca5b939-f26d-3af6-a54c-135879a692a9.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     2635
IP address blocks:        2602:fdd7::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f9:f9:92:0e:9c:df:4b:4a:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69036fae-75b3-45ce-a305-23f9913eccea
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=4fa87d41-b193-4ab4-9883-4233767f938d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:4e:64:e0:ca:bc:b3:d6:87:b6:66:ca:08:
                    28:8b:34:4f:20:78:a2:47:92:a5:15:98:2b:4e:81:
                    b8:3e:8e:6e:fd:8d:20:fa:3d:44:cd:42:48:b5:4d:
                    df:cb:d0:a1:83:aa:2e:08:93:17:ec:a3:aa:df:50:
                    ba:ae:dc:00:2f:61:72:73:46:fb:2d:5f:a8:90:6e:
                    68:80:3e:e0:ac:29:47:a0:93:fa:07:a6:d8:a7:db:
                    bc:df:44:a3:ef:90:b3:5b:99:fd:3a:8b:ff:cb:3c:
                    41:33:dc:fd:50:31:ac:bf:25:53:44:cb:65:bc:9d:
                    ca:ec:ff:26:78:56:a3:30:71:9a:66:79:32:c3:3b:
                    f2:6e:5c:cb:ab:85:fb:d4:de:e8:98:22:26:51:bd:
                    59:3c:2a:e3:41:6d:82:2f:d4:1a:0c:5c:a0:c7:51:
                    35:4b:d3:2a:d8:1a:87:5b:cf:21:e7:f8:ba:9d:c1:
                    cd:98:25:a6:8e:32:d2:16:8b:e1:f5:49:fa:d4:9a:
                    38:7a:47:0c:d5:f5:88:43:26:80:da:94:8d:bb:1d:
                    91:20:4c:1b:09:b8:a8:9e:a4:43:7a:f6:46:97:45:
                    96:ad:e2:8e:c1:bb:40:8d:09:e9:21:41:2c:ee:a6:
                    78:d6:ad:64:85:20:2a:e4:1d:d5:8b:2f:9b:18:fe:
                    23:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BB:28:1C:C7:AA:68:B5:4C:9F:60:CE:49:43:4D:E0:29:94:E0:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/8ca5b939-f26d-3af6-a54c-135879a692a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.crl

            X509v3 Authority Key Identifier:
                keyid:CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdd7::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ed:d1:ea:4f:b7:29:5f:44:4a:69:7e:45:ae:5d:b5:52:be:
         1c:39:1b:e3:11:20:59:28:61:ae:d0:36:be:59:ae:71:aa:8e:
         8e:de:14:d5:46:b6:8c:d7:8b:33:1f:fb:24:9f:17:73:80:fa:
         ce:d1:06:da:13:12:18:40:af:2c:1e:15:e8:cf:ea:38:60:1e:
         d2:74:97:ab:a2:d4:2d:10:89:29:82:c2:b9:63:77:f1:3f:0d:
         e2:3e:b3:c3:c7:f5:63:53:f7:9a:9a:41:37:5c:bf:ba:a2:17:
         36:32:41:5f:37:b0:1b:30:04:cc:e4:dd:7c:ab:80:cf:f7:56:
         36:cb:93:c0:25:09:20:b5:6a:79:45:de:63:9d:1e:7f:d0:3f:
         a9:f2:45:9c:30:7b:43:ec:b0:58:74:8c:59:b6:74:70:ea:b6:
         fe:34:48:f0:a8:bd:f9:b7:db:6f:d5:36:a5:57:a7:a0:ce:93:
         a5:c3:33:97:8d:7b:45:37:3c:a2:65:d1:46:1f:01:76:61:e3:
         2a:70:48:75:7a:4a:92:57:bb:c0:7f:df:7f:75:9a:90:de:c3:
         de:a7:9b:c3:41:d3:9e:61:c9:a7:62:52:d0:19:86:a4:a1:e1:
         a7:4a:f0:b1:a4:a4:ca:c8:8c:ce:87:88:94:8f:59:bf:98:b2:
         cb:0c:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:50 2025 by rpki-client