Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa
File:                     3af3cf4a-452f-3c16-a0c5-87928368d443.roa (raw, json)
Hash identifier:          P2no4JxUl9PP5nF2besL0EIXrBTpvSmn4dHmzCfnPNI=
Subject key identifier:   BF:57:F7:DD:D2:DD:CF:7B:48:78:42:5B:07:05:0F:B3:97:35:EC:2B
Certificate issuer:       /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
Certificate serial:       010D0C9F432858485470222C8618D17DA2B29780
Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        2605:32c0:a000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:22:2c:86:18:d1:7d:a2:b2:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=46852049-4d5d-41a6-a662-876857039328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d1:cc:87:81:2a:aa:05:a3:81:c3:4e:4b:a4:
                    0c:16:a6:00:8a:80:1c:81:bd:86:cf:7a:d4:6e:31:
                    65:85:39:bd:c2:d8:8a:a6:32:c1:7f:50:c8:42:6a:
                    ce:99:43:43:c9:ca:77:33:2c:b0:44:11:bb:f7:15:
                    fa:19:c4:99:08:f1:bc:e4:96:6d:d9:67:50:0c:a8:
                    9e:f8:26:43:85:e0:ca:4f:5f:3c:be:68:b1:22:ae:
                    42:06:8c:dc:51:74:a5:94:8a:89:c5:63:6c:6b:1d:
                    94:39:a4:95:b9:8a:f0:da:b4:db:96:bf:6e:24:ea:
                    a8:9d:05:65:c5:66:17:2a:98:da:fb:f8:9b:1a:ee:
                    6e:5a:35:8d:b2:ca:2d:c2:6e:35:4a:37:e5:07:08:
                    bb:94:47:df:4c:0f:f4:83:07:9b:c9:da:34:0a:60:
                    36:7f:76:83:0c:96:2b:f6:07:96:40:37:b2:c0:04:
                    c3:5f:d5:0e:09:b2:a5:c2:d3:6c:91:24:76:af:0d:
                    ac:dd:35:5d:2a:b6:fe:0c:47:67:73:da:9a:61:38:
                    58:42:d7:a8:75:8f:42:bf:e2:7f:2e:cc:12:92:70:
                    29:69:97:39:19:11:81:28:28:60:fa:3a:19:42:e5:
                    13:c5:4a:36:fb:e1:67:f5:c8:55:0f:c0:5d:57:1e:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:57:F7:DD:D2:DD:CF:7B:48:78:42:5B:07:05:0F:B3:97:35:EC:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:32c0:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:cb:b6:de:cd:61:ef:c7:dc:a3:24:19:8f:fe:ad:b7:3a:
         b3:05:01:e2:e6:81:23:05:32:aa:52:4a:5e:24:35:6a:d8:5b:
         2b:ec:69:15:04:71:da:6e:2c:7b:f9:93:03:9c:85:7f:cc:71:
         2e:d7:2d:be:76:d4:7e:64:58:70:16:7d:62:58:70:69:81:c1:
         a4:e0:c5:0d:03:46:e9:59:77:fd:ce:f0:91:6e:a2:b4:15:bb:
         b3:4b:03:7e:33:69:39:b1:7a:a7:05:cf:2e:5e:06:88:c1:40:
         97:ee:fc:84:a2:a9:2e:97:11:75:f6:f1:9c:81:42:c6:d1:47:
         00:63:f9:93:ea:8a:c4:b3:7e:49:8f:8a:58:ba:93:cd:83:3f:
         98:46:e5:b1:10:9e:9c:79:2c:6c:99:35:37:c8:c6:0f:56:a9:
         40:64:4f:ca:89:f5:bd:cf:88:2c:fc:22:47:5e:2a:57:90:a2:
         7d:b6:3b:ee:e8:88:37:d9:70:8d:19:82:79:35:0f:67:04:d5:
         00:d4:13:43:92:04:7e:85:48:5e:9d:d0:00:a9:31:83:0a:07:
         2b:ca:6e:ed:ef:d3:02:ee:52:d5:0e:d4:8c:88:c1:f4:a7:ff:
         9b:fd:f1:9c:cf:78:dd:c1:f2:9a:5b:01:56:a0:c9:a5:00:a9:
         17:42:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:11 2025 by rpki-client