Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa
File:                     e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa (raw, json)
Hash identifier:          neq+NxAgpoE/hvV/6C19w6RhftANFASLcsF+lQbA5kE=
Subject key identifier:   E1:49:CC:22:5D:0E:71:38:BB:B3:1B:59:19:59:76:06:5C:6A:6C:19
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848530ADF61F8CCB76A45341680
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     1239
IP address blocks:        2001:49f0:d049::/48 maxlen: 48
                          2001:49f0:d04a::/48 maxlen: 48
                          2001:49f0:d077::/48 maxlen: 48
                          2001:49f0:d078::/48 maxlen: 48
                          2001:49f0:d07a::/48 maxlen: 48
                          2001:49f0:d07b::/48 maxlen: 48
                          2001:49f0:d07d::/48 maxlen: 48
                          2001:49f0:d07e::/48 maxlen: 48
                          2001:49f0:d07f::/48 maxlen: 48
                          2001:49f0:d081::/48 maxlen: 48
                          2001:49f0:d082::/48 maxlen: 48
                          2001:49f0:d083::/48 maxlen: 48
                          2001:49f0:d084::/48 maxlen: 48
                          2001:49f0:d087::/48 maxlen: 48
                          2001:49f0:d089::/48 maxlen: 48
                          2001:49f0:d08a::/48 maxlen: 48
                          2001:49f0:d08f::/48 maxlen: 48
                          2001:49f0:d097::/49 maxlen: 49
                          2001:49f0:d0a5::/48 maxlen: 48
                          2001:49f0:d0b2::/48 maxlen: 48
                          2001:49f0:d0b3::/48 maxlen: 48
                          2001:49f0:d0b4::/48 maxlen: 48
                          2001:49f0:d0b5::/48 maxlen: 48
                          2001:49f0:d0b6::/48 maxlen: 48
                          2001:49f0:d0d5::/48 maxlen: 48
                          2001:49f0:d0d6::/48 maxlen: 48
                          2001:49f0:d0d7::/48 maxlen: 48
                          2001:49f0:d0dd::/48 maxlen: 48
                          2001:49f0:d0e1::/48 maxlen: 48
                          2001:49f0:d0e2::/48 maxlen: 48
                          2001:49f0:d0e3::/48 maxlen: 48
                          2001:49f0:d105::/48 maxlen: 48
                          2001:49f0:d106::/48 maxlen: 48
                          2001:49f0:d107::/48 maxlen: 48
                          2001:49f0:d108::/48 maxlen: 48
                          2001:49f0:d109::/48 maxlen: 48
                          2001:49f0:d10a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:df:61:f8:cc:b7:6a:45:34:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=409fc84e-9161-4fcb-8313-5e64154e55c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:68:9d:d2:df:1e:6b:c3:2e:12:5d:07:ec:
                    58:59:8f:34:d6:a2:10:2f:74:1e:a1:66:b0:be:b4:
                    0f:ca:ba:25:af:84:2c:44:fd:c5:5d:bd:41:73:10:
                    f8:78:c7:88:60:11:b4:07:eb:49:fa:12:75:6a:20:
                    cc:17:ac:43:93:5c:0d:8d:ce:40:f7:07:ef:7e:bb:
                    ae:30:92:25:41:06:01:82:cb:c3:94:47:db:ec:bf:
                    ad:ed:28:44:c9:42:79:14:51:5c:fb:3f:1c:dc:ee:
                    99:3e:76:fd:92:a0:08:06:97:5a:a0:21:8f:bd:d4:
                    ff:e7:10:32:53:87:84:a1:79:c2:c6:7b:fa:70:82:
                    51:e5:82:c6:a2:e1:fe:72:a4:5f:27:a4:c9:eb:6c:
                    25:c2:79:33:18:02:2e:4b:d5:96:7a:09:a9:5f:4d:
                    37:04:84:55:8a:9f:cb:75:bc:8f:68:9b:ab:14:56:
                    35:f7:e6:f6:17:b7:08:f0:62:0f:ee:17:15:2e:43:
                    75:e7:b0:d4:95:12:96:92:6e:e3:f8:c0:f6:5e:1c:
                    4c:74:9b:78:29:77:14:8c:28:ed:26:75:a2:91:42:
                    08:77:cf:df:dc:d3:7e:f7:a2:87:a2:bb:e7:b1:83:
                    4d:0b:66:53:c8:f6:82:be:8b:34:3d:a1:b8:df:f2:
                    cb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:49:CC:22:5D:0E:71:38:BB:B3:1B:59:19:59:76:06:5C:6A:6C:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d07a::/47
                  2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d087::/48
                  2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d08f::/48
                  2001:49f0:d097::/49
                  2001:49f0:d0a5::/48
                  2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d0dd::/48
                  2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:09:bb:83:40:8c:52:12:b5:6f:fa:55:00:63:ab:5b:67:bb:
         c6:f5:14:d9:2a:eb:97:1c:3e:5c:1e:da:48:e0:f5:80:d4:a7:
         17:6d:1b:5e:50:50:46:6c:d1:97:5e:65:e0:b4:59:9c:4b:49:
         84:bc:f9:ce:3f:6b:d1:6a:56:59:40:3f:70:c1:e7:de:d2:7a:
         1d:b2:3f:47:76:6c:e8:d4:5c:39:f6:4c:b1:36:2f:7c:a5:4a:
         41:3d:23:fd:c8:19:db:d8:25:65:39:1e:92:e3:d9:40:ff:14:
         ec:b8:ef:59:df:6b:d4:3c:9a:c1:d5:51:e5:7b:53:39:03:ef:
         5f:cd:84:79:5a:98:48:77:9f:6b:3c:d3:e5:52:1c:72:11:03:
         8a:b3:f7:6a:8f:97:dd:74:90:d2:75:9b:51:18:fd:7d:1c:47:
         2a:38:18:c5:ec:a8:5a:37:7d:d3:40:3c:8a:9a:d8:c6:04:04:
         36:33:d9:72:75:56:7a:53:30:ab:aa:ff:76:be:89:a5:56:2d:
         7f:5f:66:48:c8:05:4c:40:7e:e7:f3:a5:93:bf:6c:a8:b3:43:
         7b:9b:c9:08:dc:b0:69:a8:ef:a5:b0:69:5e:8f:33:bb:eb:5b:
         92:c7:f5:d5:77:31:f4:40:9a:63:f9:3c:4a:27:51:70:e0:63:
         28:3b:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:15 2025 by rpki-client