Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6744c6a1-a779-3c96-8a47-a5833bbccc61.roa
File:                     6744c6a1-a779-3c96-8a47-a5833bbccc61.roa (raw, json)
Hash identifier:          i7AyN38zXd/OJDUPdNl9PF78esZ6q1fRTg6EaH5NrCQ=
Subject key identifier:   71:F7:CE:FB:B4:F7:D2:54:37:25:A5:D4:DB:A8:89:65:4E:83:B8:B9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037ADE4A769D2B9C1573B380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6744c6a1-a779-3c96-8a47-a5833bbccc61.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     33588
IP address blocks:        2600:6cf2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:de:4a:76:9d:2b:9c:15:73:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=41e8c35a-ffb3-4581-b7e4-87da3ad55e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:78:f4:0a:5d:b4:22:a4:ba:9a:e3:78:ac:
                    3e:d9:84:ac:54:eb:5e:73:9b:41:a9:72:5c:fe:1a:
                    e0:93:a4:4b:be:eb:57:7d:71:73:13:56:7c:77:20:
                    78:1d:ea:47:92:c8:db:3d:49:0b:e7:ac:05:62:81:
                    87:a5:95:f5:5b:55:a2:f9:a6:fd:5d:74:95:be:54:
                    23:a5:21:47:9a:24:e9:49:b1:32:db:74:46:59:ab:
                    38:79:52:8d:cb:85:fd:62:21:12:26:54:f4:ce:41:
                    90:cb:ba:24:df:d7:36:0e:56:db:8e:55:17:f1:b0:
                    57:49:ec:eb:ac:c4:10:40:b2:ff:b1:b0:e9:a0:7d:
                    45:22:b3:75:e4:b7:49:cd:8f:68:8b:ac:30:70:86:
                    f9:ab:15:2d:f9:f0:f9:3d:0e:d8:2a:16:22:26:50:
                    27:52:a4:aa:e2:0c:3f:4f:06:ec:ea:e6:ff:ac:54:
                    e6:f2:9c:ac:49:73:d5:a6:9c:75:c9:69:cf:eb:4f:
                    70:f4:24:c1:01:6e:89:f0:f8:05:e3:a2:69:7c:ec:
                    7f:04:54:19:07:39:cf:a7:19:ec:ab:1e:4f:d7:44:
                    3d:6c:6a:a6:e2:be:4f:76:c3:f1:db:99:25:5f:86:
                    e0:03:59:bf:f4:2a:a6:59:66:ec:49:b4:7c:cd:82:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F7:CE:FB:B4:F7:D2:54:37:25:A5:D4:DB:A8:89:65:4E:83:B8:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6744c6a1-a779-3c96-8a47-a5833bbccc61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6cf2::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:34:24:eb:53:09:13:9e:0a:d9:72:3c:04:1f:56:c3:b7:94:
         37:0f:45:f0:41:b6:6b:3c:37:23:47:44:88:60:e0:34:5a:6f:
         fb:ac:b5:5e:0a:b4:8b:71:25:df:a1:ef:a0:1a:e1:e7:38:25:
         74:f4:10:e2:15:5d:1b:f0:2a:ca:a3:f4:aa:2f:0c:c9:31:69:
         04:de:f5:88:6a:0a:89:b0:21:e3:c9:f4:c6:3f:e3:28:3c:d1:
         d8:62:ca:61:15:10:f8:05:7f:fc:01:bf:b6:86:14:b8:3d:71:
         3e:d5:a3:a9:71:6e:13:d4:95:d7:c7:ec:b6:a0:56:ec:15:75:
         1f:20:4d:c1:f2:e5:33:80:c2:2a:77:03:36:55:7e:59:c2:a4:
         c5:72:f0:a2:a9:a9:da:a6:49:df:b2:30:a0:df:42:70:ff:8a:
         e6:79:8c:19:9c:8b:40:44:db:7a:8b:04:03:cd:d5:05:3d:4e:
         68:ff:8a:8d:cf:5c:44:80:d0:bc:4a:e6:ad:07:aa:f1:59:e7:
         3c:75:c3:1f:55:fa:e3:5e:17:5b:d0:54:e2:19:ba:8e:da:6c:
         b9:29:bb:d5:74:e4:34:34:79:b2:3a:7f:6e:df:49:b9:27:ed:
         27:f0:e7:f3:d0:40:8e:f7:7a:e1:be:d0:4c:bf:a8:57:95:30:
         f3:95:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:57 2025 by rpki-client