Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b2a960ac-3167-3489-9886-c325610610da.roa
File:                     b2a960ac-3167-3489-9886-c325610610da.roa (raw, json)
Hash identifier:          7b0TWRs7DUbRgqEIuQVcClxvVHT0ZTR86JM2GRjwL2U=
Subject key identifier:   05:37:42:06:9F:E1:70:89:31:B2:7D:B6:E4:DD:9F:0D:96:0E:EA:31
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F43285849350EAD83E0346AA6C458AB80
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b2a960ac-3167-3489-9886-c325610610da.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     1024
IP address blocks:        2602:fca7::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ad:83:e0:34:6a:a6:c4:58:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=7a50756f-a0d1-454f-a9cb-e9f888bb3c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:90:ce:a3:25:e4:3a:4b:af:00:43:e8:a1:82:
                    e0:0a:84:c2:fd:34:15:73:f1:c7:fe:a0:84:a5:9d:
                    08:19:30:d2:16:d8:0f:b4:8b:50:b5:ce:06:a3:ea:
                    f6:81:19:66:80:e3:18:78:b2:14:5c:d6:e8:75:5c:
                    6b:6a:7e:fc:a1:7e:00:c5:d4:86:d4:68:3d:29:c2:
                    41:d1:94:cb:fb:47:74:c1:01:f9:64:41:00:8f:d3:
                    2e:76:62:90:5f:d0:6c:f9:b7:34:20:db:25:97:7c:
                    dc:db:17:65:42:44:08:ad:4d:ca:82:68:47:91:b3:
                    c6:8a:5e:f2:a3:f4:49:df:2d:3c:c1:be:2e:c1:92:
                    4f:02:19:29:75:9b:4a:9e:5d:5b:1d:b1:44:81:b4:
                    bc:c0:39:65:1a:53:b0:4b:90:4a:8e:a7:bb:3e:21:
                    29:7e:43:53:a8:4c:77:a6:53:5a:ee:0d:a8:c1:15:
                    e4:4f:42:02:5b:b6:32:19:29:d7:6f:45:ea:2d:f3:
                    d7:9b:37:c0:32:d2:14:41:0d:7f:55:6f:5f:61:9c:
                    ae:bd:02:ab:dc:0a:d0:a0:ac:8e:62:30:0d:85:5d:
                    06:fa:02:cc:61:e5:ff:18:14:30:e7:2d:18:f1:6d:
                    22:52:bc:de:33:5c:ef:2e:07:2a:04:e3:c3:b7:b0:
                    d4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:37:42:06:9F:E1:70:89:31:B2:7D:B6:E4:DD:9F:0D:96:0E:EA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b2a960ac-3167-3489-9886-c325610610da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:33:02:ce:cf:27:f5:d4:f2:79:a6:b3:f7:4a:33:c4:26:90:
         16:3d:f2:eb:3f:a4:0a:92:46:d7:37:85:6d:ad:56:01:59:70:
         ac:99:0b:e2:4d:b8:bd:2e:1c:29:5b:bb:58:cb:db:28:ba:25:
         08:57:90:34:24:d8:da:a2:bf:f3:2c:87:3b:36:8a:a4:1d:cf:
         bc:40:31:20:40:cf:2f:57:7d:1d:49:45:1e:4b:5a:5a:ba:db:
         18:79:e9:7c:be:15:97:ba:1c:4f:34:c3:b7:ed:21:65:49:3b:
         a1:e2:94:7a:8d:c1:08:c7:38:04:da:87:3a:73:60:6c:f8:4b:
         42:34:b5:18:98:32:c4:53:d0:e5:79:50:02:41:93:99:cf:23:
         f6:80:99:45:90:52:34:db:e6:2c:17:c3:77:0d:b5:c5:32:e7:
         dc:e5:1b:58:e2:51:f1:e7:09:b1:6c:6c:f7:7f:69:f0:7a:b9:
         19:85:d9:5d:9f:65:0d:5f:33:c1:7c:e6:00:42:ee:de:0a:75:
         df:fa:12:9d:3a:7f:00:5a:ad:5d:ae:93:19:24:90:1f:0f:b8:
         fe:2e:77:1a:5a:6d:83:62:41:91:96:1b:1d:2d:f2:31:ab:23:
         aa:43:2a:3a:81:04:6b:84:11:17:03:44:62:7f:0d:0b:12:33:
         12:7f:06:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:06:19 2025 by rpki-client