Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/1f31816f-660e-37d8-a95b-1c37676acb78.roa
File:                     1f31816f-660e-37d8-a95b-1c37676acb78.roa (raw, json)
Hash identifier:          4OU/3iZXxO7PgY2G7BbVO4sGdIHn6xT+LouJX5PQ2nk=
Subject key identifier:   BA:28:91:4C:34:37:59:DE:04:58:96:86:B7:6F:07:CF:72:AF:B8:06
Certificate issuer:       /CN=7c7d2d2d-ac35-4ded-839a-18fb60af38c6
Certificate serial:       010D0C9F43285848100A86AED9AEC1F7C29CF200
Authority key identifier: EC:20:D8:C9:F9:D9:2A:AD:30:5A:7E:63:27:89:13:DD:A6:AF:2D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/1f31816f-660e-37d8-a95b-1c37676acb78.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     395262
IP address blocks:        2620:0:7f00::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:86:ae:d9:ae:c1:f7:c2:9c:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7d2d2d-ac35-4ded-839a-18fb60af38c6
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=4d0b22a3-61ff-43e6-9e6a-55571b55df95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:c7:b7:3e:58:75:c9:a4:93:7d:5d:0e:1e:
                    b8:f8:97:ec:da:61:a8:9e:9d:c6:46:b1:cc:b9:91:
                    44:ed:ec:14:48:11:a1:5a:e0:0c:d1:eb:70:cb:4f:
                    76:ea:5a:66:ea:6f:21:18:37:75:55:3e:b2:22:c1:
                    fb:27:2f:5b:8a:92:df:85:64:ed:59:b7:8f:72:ce:
                    27:f9:94:6b:4e:21:15:ef:36:57:24:fa:82:07:b5:
                    93:f5:a6:7a:91:24:28:c2:85:af:52:01:83:47:1b:
                    2f:5c:72:29:79:29:b1:19:87:f3:98:a4:0e:fc:2b:
                    8b:cb:93:04:12:de:75:93:1d:4f:4e:2b:d9:1b:4e:
                    b6:f0:ec:be:92:28:24:9c:af:d5:36:81:2f:7e:99:
                    5e:a6:df:f9:96:a9:35:9c:2b:63:a5:11:85:f2:95:
                    22:1f:9c:12:80:f3:27:87:50:92:77:11:16:55:f1:
                    6f:6a:94:86:78:f9:40:ce:75:64:74:29:66:fb:c4:
                    c6:6d:3f:cb:a0:c1:1c:c6:fd:36:a5:19:2f:a2:cf:
                    34:16:02:3c:28:26:00:8e:25:9e:7f:c6:48:ef:93:
                    a1:38:c2:a2:78:8d:90:9a:06:78:a6:37:17:b8:73:
                    46:a8:49:4f:ff:55:a0:27:74:a0:1f:cc:8d:20:8c:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:28:91:4C:34:37:59:DE:04:58:96:86:B7:6F:07:CF:72:AF:B8:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/1f31816f-660e-37d8-a95b-1c37676acb78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.crl

            X509v3 Authority Key Identifier:
                keyid:EC:20:D8:C9:F9:D9:2A:AD:30:5A:7E:63:27:89:13:DD:A6:AF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:7f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:52:51:40:dd:d9:cf:73:8a:cb:b7:49:bd:6c:5f:bb:9d:35:
         78:0b:4a:4a:f3:d2:51:f0:fb:7e:50:a6:45:d7:75:ee:b7:ab:
         d2:e2:06:49:2c:3b:1d:37:44:4e:66:d5:2e:80:64:a1:18:51:
         84:bd:48:22:ac:c8:a9:42:d9:e5:2e:c5:a6:d2:6c:69:71:0e:
         b3:88:09:75:d6:d6:b3:8e:8a:a0:87:79:38:ef:d0:52:c3:5c:
         42:18:68:b4:2f:b3:15:da:fd:00:21:03:ad:da:63:ed:f5:33:
         44:a0:49:a7:d7:82:f2:d4:2f:34:db:f7:93:69:f5:cb:3d:7f:
         05:03:24:01:09:58:b9:81:83:da:4a:85:b4:14:43:7f:9b:4a:
         3a:f2:2c:fe:c0:4a:ab:22:e5:ab:a5:d7:fd:94:18:0f:f4:47:
         a6:9b:20:f5:0b:91:6d:d7:7c:8b:cf:51:9d:ea:38:d7:19:b5:
         18:9f:78:b8:93:4a:ca:14:eb:70:42:a3:c9:61:84:a7:85:d1:
         ac:bb:3a:6e:da:68:6b:f6:6f:dd:fa:ac:01:d3:d5:19:5f:d1:
         8d:ed:ac:6f:11:7c:88:db:d1:d1:99:5b:31:ae:65:9e:ef:91:
         d3:05:f0:04:ae:29:ac:6e:24:c8:fd:81:e6:c3:4d:30:3e:88:
         9f:3b:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:32:39 2025 by rpki-client