Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78227487-250e-3c99-bdc6-68ed28292eac.roa
File:                     78227487-250e-3c99-bdc6-68ed28292eac.roa (raw, json)
Hash identifier:          K67hzhfa1+tbJuBs+YrLO1wDfoAT04FP9ZJkyvZowao=
Subject key identifier:   5A:51:85:DF:93:3E:CE:75:1D:27:A7:7C:5E:9C:2F:BE:AE:99:ED:BD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848504038EBA59E71B755B30C48
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78227487-250e-3c99-bdc6-68ed28292eac.roa
Signing time:             Tue 24 Dec 2024 14:00:53 +0000
ROA not before:           Tue 24 Dec 2024 14:00:53 +0000
ROA not after:            Mon 24 Mar 2025 13:00:53 +0000
asID:                     398668
IP address blocks:        2001:470:33a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:50:40:38:eb:a5:9e:71:b7:55:b3:0c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 24 14:00:53 2024 GMT
            Not After : Mar 24 13:00:53 2025 GMT
        Subject: CN=b7f335bb-0cc4-4ba3-ab61-37b33e36058a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:86:49:aa:e2:ba:61:f2:a4:8e:c3:4d:fa:d3:
                    13:95:c6:89:09:7c:ca:e7:40:28:b0:df:fb:58:e2:
                    d7:d7:fb:a7:dc:bc:73:b2:32:f8:bd:3a:2f:d8:7b:
                    5d:87:73:15:4f:ac:80:94:d9:f4:c0:15:96:93:10:
                    bd:c6:35:d7:b5:00:7d:eb:5b:42:47:c9:82:89:80:
                    da:ee:37:b0:63:64:b7:a9:61:d7:59:ac:26:9c:46:
                    f5:53:e4:7d:44:3c:d3:30:a6:a0:c8:96:de:ea:d0:
                    91:0d:39:b4:e9:c1:ee:a9:8c:94:d8:0e:8d:78:19:
                    17:a2:fc:89:18:f6:f3:34:e6:c0:c8:03:aa:94:4f:
                    a8:b9:3a:b1:15:98:62:09:7c:c5:a6:fb:5a:e0:ef:
                    fd:4e:aa:8b:0a:ee:30:8f:79:41:1b:39:8c:ab:0a:
                    49:1f:b6:d1:dd:da:05:be:fb:10:87:c9:28:6b:c9:
                    4d:1b:4e:5a:55:39:37:69:29:99:77:b5:eb:b4:33:
                    53:96:84:64:9c:22:9b:a9:72:e9:c6:9b:47:ee:0b:
                    49:97:a9:13:a3:33:ed:d1:0d:28:47:bc:c7:25:c5:
                    8d:64:3c:73:5a:98:de:be:a0:b6:f1:10:56:a5:b7:
                    48:b8:9c:13:08:57:55:04:1e:29:70:60:a3:2c:70:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:51:85:DF:93:3E:CE:75:1D:27:A7:7C:5E:9C:2F:BE:AE:99:ED:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78227487-250e-3c99-bdc6-68ed28292eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:33a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:38:08:e5:f8:c5:91:74:6c:bb:99:4a:5f:f8:8f:04:fb:1f:
         f5:81:f9:e6:34:00:0b:37:80:4c:ee:30:ec:5b:90:05:24:43:
         76:90:4f:0e:0d:8c:aa:ff:ae:89:4c:a5:77:4b:e9:e7:2e:23:
         c0:95:c0:27:17:1d:37:a8:dd:2e:93:5a:0d:ed:81:9a:a1:a5:
         0f:dd:a1:8d:3f:55:99:23:f6:c3:b5:6e:24:91:2d:cf:49:50:
         54:05:bc:55:5d:f9:ce:54:93:2e:31:e4:6b:18:8c:6f:a3:9d:
         d6:dc:90:ed:2b:2e:0a:a8:7e:f9:d0:72:5e:d0:6c:46:2a:90:
         02:36:a3:b6:4e:98:e3:11:d5:6e:02:88:1d:be:b2:34:a6:5e:
         c3:28:c0:9e:f6:df:fe:96:ff:15:d4:fa:e0:9a:60:2b:52:77:
         e7:29:0f:f8:0e:29:78:e4:24:d6:8e:4f:6a:5f:9e:43:33:53:
         c2:b3:f8:dc:99:aa:1c:c2:22:1a:ef:56:45:4a:a9:4d:b4:3b:
         00:77:a7:2f:fc:45:1d:3a:16:57:3c:1c:e0:32:6b:64:e6:41:
         19:78:52:59:23:44:cd:5a:1e:01:fa:cd:39:76:b5:36:db:26:
         55:4b:aa:dc:2d:27:a1:41:c2:48:b0:53:95:ee:40:2a:89:11:
         15:06:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:30 2025 by rpki-client