Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a77eb0aa-d906-3644-b692-70b1a00a1d4e.roa
File:                     a77eb0aa-d906-3644-b692-70b1a00a1d4e.roa (raw, json)
Hash identifier:          in93d0a+Z3Bltp/zaW/i1vRDpH3oXngzAImgu1ttgxM=
Subject key identifier:   ED:3F:27:B9:9E:06:9D:1C:79:E7:5F:BE:00:59:0D:AB:33:37:19:71
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFFF5E8D293C8761116A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a77eb0aa-d906-3644-b692-70b1a00a1d4e.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     15176
IP address blocks:        2001:470:27b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:ff:5e:8d:29:3c:87:61:11:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=f5838799-ca04-4a80-b7af-4353c6216f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cb:d0:42:2f:20:70:6d:20:6a:ca:61:29:5d:
                    8f:eb:fc:f9:59:22:f4:b7:3e:3d:8a:3d:6d:63:dd:
                    fc:07:ca:e9:ae:28:67:2f:9d:92:0b:12:2b:6c:2b:
                    23:53:69:d3:56:23:8c:09:d5:65:44:a6:fc:cb:53:
                    f5:52:a6:61:9c:e1:63:1a:5e:f8:01:d8:2d:0b:59:
                    8c:2c:03:f6:16:2d:62:98:9a:3d:f8:17:8a:95:b2:
                    43:76:2c:0a:db:ae:a6:e7:f2:b6:f7:7e:8d:ed:1e:
                    42:29:ff:ea:44:5d:66:9d:1c:73:ab:97:28:c3:c4:
                    6a:7f:30:a2:f7:40:51:bb:fc:1e:ec:db:dc:bf:04:
                    79:f3:e0:ce:07:b5:ac:c6:d3:02:ef:0a:96:d9:2b:
                    c3:4a:21:0b:b0:b4:8a:a0:ec:c2:45:e2:da:d7:20:
                    7d:a3:6f:ce:4e:2a:fc:a7:a5:cb:5b:e5:2d:58:c3:
                    48:f0:9f:20:0a:e7:f2:b2:af:25:61:a0:fe:fe:ab:
                    de:fa:3d:24:43:d4:44:85:a6:b1:cb:f3:84:1d:92:
                    c0:02:18:4b:6c:4f:b9:69:cf:0c:c8:5c:2d:82:79:
                    1d:02:25:54:ca:36:d6:55:c1:d4:eb:f9:82:1d:e5:
                    d6:ac:4f:94:b9:64:01:cb:9d:e6:16:e9:78:e2:69:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3F:27:B9:9E:06:9D:1C:79:E7:5F:BE:00:59:0D:AB:33:37:19:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a77eb0aa-d906-3644-b692-70b1a00a1d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:27b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:f1:ab:55:f7:cb:71:9a:ca:41:71:e2:55:08:01:9a:82:24:
         a0:b8:28:c2:61:ea:45:28:31:61:94:4d:67:eb:68:92:6c:b8:
         43:e4:a9:f6:08:3a:1e:58:d7:38:88:09:ad:8b:c6:83:6d:aa:
         08:cd:30:59:7c:b1:0e:96:5a:d9:8a:23:b0:50:05:f9:8f:d9:
         a6:ae:3a:24:e0:82:1c:76:b0:4d:47:7d:89:1c:17:21:90:f5:
         be:63:7f:bc:e4:e6:76:62:03:dd:6b:2a:82:dc:b4:ce:72:20:
         3b:42:3f:e6:78:d2:ce:c0:01:95:92:36:b1:48:45:3a:11:85:
         aa:6f:7d:cd:a5:77:d2:c5:85:8f:2d:59:f1:e6:6b:8e:1b:8d:
         dd:d2:fd:9f:64:51:f3:23:a9:0c:d0:d9:9c:50:bd:51:ec:c8:
         32:14:c0:8c:b6:3f:50:90:e6:82:f2:a8:1e:96:27:b2:88:58:
         46:78:14:81:b6:1f:24:9f:5b:25:df:eb:ba:e0:27:f0:3b:01:
         78:73:c2:12:87:ec:ca:44:24:7f:17:f1:4e:b6:dc:0e:62:f9:
         a2:36:80:09:bd:1f:9b:07:67:0a:ee:27:7a:b5:a4:eb:0f:b4:
         3a:89:1e:a1:58:8b:f4:62:a4:b9:83:4b:bf:0b:d9:c5:fc:eb:
         b6:10:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:48 2025 by rpki-client