Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa
File:                     fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa (raw, json)
Hash identifier:          MeDVFTRcTOHTATyPfU1Al7ESUj3Gd3FnqDdEqIdmAHQ=
Subject key identifier:   23:FF:46:6E:0B:16:5A:EA:F3:9C:67:DE:A3:28:0E:A6:5A:E8:7F:F5
Certificate issuer:       /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial:       010D0C9F432858491246A66648A950E19A401600
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     0
IP address blocks:        2607:3000::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:a6:66:48:a9:50:e1:9a:40:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=bd9cf913-89d5-4767-a3c7-372a34759960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:f3:25:30:c3:55:d6:5e:8c:23:36:6a:74:
                    73:32:db:fb:5e:42:22:f5:70:ff:55:c3:0e:d5:91:
                    c4:20:df:2d:23:6a:62:00:31:1b:7b:ca:08:be:8f:
                    17:ca:c4:02:50:19:d4:38:de:d2:d6:85:72:2f:f1:
                    76:78:79:11:69:d5:87:f9:23:d7:32:fb:54:4f:55:
                    92:7c:3b:33:5e:39:c8:4f:64:4f:31:72:9c:aa:9c:
                    48:fa:c7:ba:1d:df:b2:d5:e2:a1:94:08:40:82:0d:
                    a6:f6:b3:63:79:6b:f5:e1:32:3e:51:af:39:d9:d2:
                    82:31:f5:2b:f5:4f:a9:e5:c2:85:0b:00:58:2b:a3:
                    8c:eb:77:82:64:91:c3:fa:74:20:45:26:26:d7:3b:
                    06:64:1b:4e:e3:fd:e5:93:7a:85:a9:ff:3f:99:2f:
                    33:44:6d:b0:d0:2a:77:74:7b:c2:ac:4d:94:89:6f:
                    cd:45:6b:78:43:16:11:dd:88:e4:35:fd:cc:60:e4:
                    78:c2:2e:60:7b:2b:d3:c3:19:95:93:e5:4d:e4:cd:
                    6e:ef:f9:d3:d6:65:c2:18:01:7a:03:80:20:75:d3:
                    77:9e:17:58:3a:c9:6b:fe:59:97:f1:02:94:c0:b8:
                    70:1f:26:89:3e:86:18:76:24:a8:92:fb:13:26:97:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FF:46:6E:0B:16:5A:EA:F3:9C:67:DE:A3:28:0E:A6:5A:E8:7F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl

            X509v3 Authority Key Identifier:
                keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5e:b8:3e:d3:ed:24:19:d8:c9:28:02:fb:f2:36:38:6f:c8:
         75:57:b0:0d:79:bc:3c:3f:66:6e:5f:ce:d9:e8:16:bc:50:66:
         84:03:ab:9c:5f:12:92:9e:c1:9c:b1:f6:90:63:91:b8:59:50:
         7b:fd:a2:80:7b:23:c5:34:23:e5:95:c6:ec:47:f6:28:ff:4d:
         09:58:74:a0:8d:63:3e:a2:04:73:13:2b:94:ef:ab:d1:67:a3:
         db:dd:ed:8c:af:d4:9d:fd:06:f3:91:1b:a4:e2:b6:01:7f:1e:
         1a:5d:6b:a7:53:a4:d7:83:fd:88:41:ee:51:c3:97:de:48:80:
         69:35:10:99:a2:b4:92:6c:ed:b7:3a:56:15:e6:4b:b1:70:bb:
         11:e5:d1:92:20:2c:f6:8d:40:77:1e:de:01:b6:4e:7a:49:46:
         51:e1:a2:49:27:68:97:b9:ed:70:4f:85:ae:27:06:64:ae:cb:
         89:47:17:19:c0:1c:bb:9e:b6:aa:9c:63:3c:1a:31:58:a0:93:
         a3:cf:96:09:de:46:35:2c:54:ff:26:eb:6b:aa:e1:41:aa:d2:
         3e:fd:41:03:3d:77:b2:78:02:04:8f:e0:2e:cf:5f:7d:54:63:
         7d:fb:29:1a:31:d4:18:07:f8:e2:54:92:bc:e4:7f:bc:e3:48:
         a0:3c:ac:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:39:09 2025 by rpki-client