Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/89c19010-b4b2-3194-9e35-6f0d6ef8a346.roa
File:                     89c19010-b4b2-3194-9e35-6f0d6ef8a346.roa (raw, json)
Hash identifier:          4UArzWy8lo+7WFuKig/maNxmM8GQYNnyo+1Sht2kKpw=
Subject key identifier:   52:7A:F2:62:D3:7A:31:FD:C2:B5:48:0B:A1:F3:A7:BB:07:BA:4A:81
Certificate issuer:       /CN=e5333a6e-37dc-4213-b928-ae0341454759
Certificate serial:       010D0C9F43285848100A7AFF045D0AF8EAC70E80
Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/89c19010-b4b2-3194-9e35-6f0d6ef8a346.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     46650
IP address blocks:        2001:1808::/32 maxlen: 48
                          2600:1a00::/32 maxlen: 48
                          2600:1a01::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:7a:ff:04:5d:0a:f8:ea:c7:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=1755f908-a7b5-49d5-ac5f-2b56beac56f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:0f:b1:1c:ec:25:3f:e5:33:5e:a2:39:a5:
                    46:34:19:87:88:43:eb:1a:25:a0:ff:54:ce:25:15:
                    b9:3c:c0:cd:66:2f:78:3f:39:ee:75:8b:72:f6:c3:
                    c5:f4:d0:12:78:c5:a2:d9:b8:3a:71:d0:86:96:fb:
                    46:4c:d6:b0:aa:2e:c9:7d:f7:3e:2f:11:09:bb:c9:
                    2a:ec:d7:ac:21:fb:4a:60:a5:1c:1a:c1:c1:e3:3f:
                    c5:fe:30:d2:42:a9:08:44:36:a3:45:68:f5:01:65:
                    2f:50:79:d5:fe:ad:b5:37:65:d4:29:c7:f4:ed:ee:
                    8f:08:e4:c7:6c:15:78:0d:09:4f:c0:38:ae:89:37:
                    9e:31:8e:31:fa:17:5b:d6:74:75:34:c0:f7:2b:51:
                    38:04:73:57:1a:32:3c:2d:82:1d:a2:7f:61:b8:32:
                    e3:98:34:8c:95:80:35:1e:fa:c8:86:ee:9a:42:0b:
                    db:b9:fa:93:d2:46:c4:2d:a1:9e:c6:af:18:b0:08:
                    ac:83:6e:92:8c:25:0f:d6:07:14:b1:8c:82:d6:17:
                    2b:2c:d7:6b:06:7a:6d:b4:bc:80:37:e7:13:a5:80:
                    96:0d:63:bd:d3:d4:c4:a9:34:34:4d:8a:df:3a:d9:
                    d3:3e:f6:d5:ad:38:95:82:f5:78:87:cf:0b:20:ee:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7A:F2:62:D3:7A:31:FD:C2:B5:48:0B:A1:F3:A7:BB:07:BA:4A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/89c19010-b4b2-3194-9e35-6f0d6ef8a346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl

            X509v3 Authority Key Identifier:
                keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1808::/32
                  2600:1a00::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:93:8f:82:02:7f:61:6f:ed:41:59:0b:52:b0:5a:f5:ed:da:
         cd:6d:6d:94:41:d6:82:a6:dd:0e:d2:54:f0:ae:51:dd:da:b0:
         6a:e7:e2:08:f7:ab:32:08:5d:e2:95:59:1c:ac:5a:58:cb:cb:
         51:ba:03:f5:a9:25:2c:55:58:ed:e2:ed:ed:1d:77:9b:11:8f:
         19:f8:07:db:83:92:23:c6:48:ee:0b:15:ff:63:a7:3d:1c:65:
         cd:53:c6:43:df:b0:c5:e6:08:e7:45:b7:b7:53:d1:2f:88:08:
         31:a5:2b:e4:3b:24:4f:d1:09:41:6b:e6:77:95:80:ac:95:d9:
         fc:d4:c6:0e:b6:74:7e:a6:c4:1b:3a:6a:c6:4d:3a:91:81:5d:
         a4:b7:02:c5:8f:78:d8:9e:af:13:92:1c:1e:76:c9:07:aa:42:
         8c:f0:28:ff:1f:98:7b:5f:59:f0:8d:ce:48:a1:07:2e:5f:d4:
         94:52:3f:cf:ca:d3:6e:4a:aa:07:58:6c:b5:51:9b:67:df:96:
         4f:d1:8c:15:f1:99:18:ef:71:92:d2:69:8a:23:c3:f4:04:94:
         5d:11:a6:2b:2a:72:fd:e4:cb:de:0a:fa:44:70:ea:d3:2d:5e:
         dc:a9:0e:ef:e2:20:ac:40:78:04:2b:3d:0b:3b:75:d5:73:69:
         4a:04:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:07:10 2025 by rpki-client