Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/833224cb-bd10-31f7-b89a-5dd938893e65.roa
File:                     833224cb-bd10-31f7-b89a-5dd938893e65.roa (raw, json)
Hash identifier:          uW0YXEdOn2vJo88VUm4RuI8xwbbA+FzzP1MIPyAUaR0=
Subject key identifier:   8D:5E:EE:BC:71:7F:FF:46:33:EA:91:6B:92:BD:79:A2:09:5D:75:A8
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F43285848CC7B9BAFBD141DCACC2377C0
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/833224cb-bd10-31f7-b89a-5dd938893e65.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     394593
IP address blocks:        2602:f99c:300::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:9b:af:bd:14:1d:ca:cc:23:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=6c725484-10d6-4282-943c-147231344833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:83:52:22:19:55:38:92:3f:19:9f:a2:6d:
                    d3:7a:94:c6:bd:fe:5c:bb:5e:f5:bf:1e:b9:d6:59:
                    63:6f:a1:32:8d:95:48:1b:45:60:cd:54:6c:44:81:
                    21:c0:71:d5:96:4b:1e:07:1e:4c:f8:e5:cc:29:d9:
                    bc:c4:24:f4:39:7f:6a:23:e8:fa:30:3e:5a:c4:39:
                    13:89:05:f3:da:3b:80:a6:18:f3:d7:c5:2f:df:86:
                    d7:3e:57:37:f0:b7:40:d3:f8:d0:fa:41:65:4f:0c:
                    2b:e0:c6:dd:2e:89:23:30:5a:1f:d1:48:c6:6d:21:
                    f8:2f:6f:88:94:2b:86:f2:75:0c:b3:41:8e:62:83:
                    30:0a:37:b7:68:ef:26:c3:b9:01:13:cf:bf:35:ea:
                    92:8a:19:58:f9:10:b3:4b:14:9a:f8:a0:6e:a2:ef:
                    55:30:a9:d5:cb:50:d6:4f:44:bb:c6:ab:5b:9e:7a:
                    dc:92:23:b5:14:79:f2:64:b2:b9:82:94:30:e7:0c:
                    6d:0b:7d:b4:1d:de:7f:a1:1a:60:b4:b6:55:5e:74:
                    9e:4e:10:18:c3:97:c5:d2:9d:2d:83:57:1f:a6:ec:
                    f5:9a:ac:15:a5:b6:6d:40:97:09:11:cb:be:60:94:
                    54:cb:f2:7a:b1:63:c6:3b:85:19:0a:9e:ff:e1:80:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5E:EE:BC:71:7F:FF:46:33:EA:91:6B:92:BD:79:A2:09:5D:75:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/833224cb-bd10-31f7-b89a-5dd938893e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:01:17:ed:c2:a0:7b:cf:01:2c:a1:d9:d4:ab:8b:88:d0:39:
         17:3e:17:4e:13:7b:1d:dc:37:70:6c:8c:3d:c0:a3:cd:dd:22:
         3a:a2:d9:73:40:a0:b0:7f:e5:c7:d2:ef:14:a9:cd:6f:0a:69:
         13:a8:3a:4e:6e:76:6d:62:03:97:9d:b8:f9:f8:9d:5b:a8:c2:
         ff:c6:9d:57:20:7c:15:5a:3c:f7:3e:18:be:9a:2a:4c:87:b5:
         78:b3:79:8b:23:90:ec:45:21:b8:45:67:38:96:65:a6:fa:9e:
         19:94:5d:fc:f3:6a:8d:7e:34:ac:6e:60:8b:4c:e7:73:26:9f:
         2a:51:62:2f:8b:13:f2:a6:1d:41:54:06:1b:61:38:9f:74:c8:
         c8:b9:1d:5d:e8:06:94:ef:a3:e5:25:b7:b8:7d:69:cc:af:76:
         4e:90:ba:74:6a:a7:55:9e:b2:15:c0:18:11:d9:8c:33:59:93:
         f0:5c:1a:f4:b0:b3:3b:e7:26:76:42:71:95:29:51:09:c7:45:
         61:2b:0a:66:89:c9:68:29:ec:d7:3c:76:25:c3:29:9a:d0:75:
         c0:07:63:18:88:0c:44:22:ae:4d:fa:8b:0a:2b:2f:e2:d4:4e:
         a9:6e:5b:23:f3:1f:8a:db:66:0c:65:cd:e1:ab:56:50:95:75:
         ba:6a:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:49:11 2025 by rpki-client