Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa
File:                     6687135c-e3b9-37b1-8160-bc72c0d5954e.roa (raw, json)
Hash identifier:          sMTz2D4JobDAqjqKR1xA1GdpIedUfxiY4mvARjcW7Oc=
Subject key identifier:   43:89:F0:05:54:1F:9E:FA:0E:D7:ED:CA:BA:AF:85:01:1C:18:FA:F6
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F43285848A99621ADE172C1A0D7DEAC00
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     396417
IP address blocks:        2600:e800::/28 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:21:ad:e1:72:c1:a0:d7:de:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=ffe51cd7-7494-4482-b22c-7f931ac30903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:f7:3d:86:dc:24:7e:16:03:2c:d4:7f:c5:
                    40:1c:a5:3b:70:6e:80:4b:c3:c2:65:74:27:1e:e2:
                    01:77:51:02:ec:87:b5:69:96:ca:5b:bc:cb:ea:6b:
                    98:61:ba:b0:eb:8c:a4:e4:34:59:b5:ba:db:5a:37:
                    8d:bd:84:fb:c8:a2:72:18:b7:3e:b8:1a:de:39:73:
                    7a:fc:bf:25:be:b2:78:5b:6c:98:35:83:ab:32:9b:
                    1c:4b:c3:87:d6:18:59:22:fc:bc:81:04:b7:80:6a:
                    b9:7a:83:0f:dc:4b:f9:4c:5b:69:ad:d6:74:94:74:
                    da:7c:12:83:b7:63:39:db:31:fd:4b:02:f0:9c:ac:
                    6c:ad:b3:21:11:79:f4:f5:eb:5f:ac:bf:27:7a:b7:
                    e6:43:33:c9:bb:e3:ce:2e:89:c2:cf:aa:ba:e9:24:
                    a0:6d:53:e0:39:ef:55:f6:d5:8e:e4:ae:ee:f8:b7:
                    58:22:14:89:9f:5c:ad:b5:54:3f:04:09:df:e6:2c:
                    5a:49:cc:12:52:29:f6:a2:49:54:fa:78:70:24:25:
                    ce:68:52:e2:c5:36:98:e3:4c:6e:2c:5f:4a:fd:b9:
                    af:c4:85:e5:17:48:ee:cd:c5:96:f1:62:b9:34:21:
                    5c:8a:c2:e8:dd:91:14:b9:6b:62:c9:67:41:7c:31:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:F0:05:54:1F:9E:FA:0E:D7:ED:CA:BA:AF:85:01:1C:18:FA:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:e800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:2e:e8:b6:06:ec:15:30:fd:df:a7:df:4e:91:3c:77:b8:
         95:e7:8c:c4:ff:a1:04:7b:8d:dd:76:d6:3b:fa:fd:22:e5:65:
         a5:9e:2d:ab:26:4e:43:83:d9:de:81:8e:6a:bf:f8:58:6f:43:
         c3:fd:d3:ef:02:77:3c:0b:cb:fd:18:b8:6a:97:e8:e3:39:6a:
         d7:e1:13:ac:65:33:16:be:56:f2:4c:8a:4d:fb:62:cd:78:97:
         40:84:84:44:a0:31:72:2e:62:b9:8e:26:d7:1d:4b:d4:7a:1a:
         18:50:d6:a8:89:8c:4e:33:0b:5d:bf:86:af:7e:9a:b1:cb:91:
         2c:9d:f5:2a:50:e3:fe:ba:64:7f:72:29:f1:47:ed:f5:20:1e:
         7a:1d:89:78:d9:68:d8:3d:d6:f5:b3:55:a1:f6:e4:96:da:78:
         ba:99:bb:08:70:6a:c2:20:8b:56:bf:53:f9:e0:e0:54:f3:53:
         b9:31:fd:21:3a:dc:fd:93:33:9c:1b:d8:75:19:4d:89:56:31:
         15:cf:bd:ea:c3:86:04:d4:b2:1e:ba:fb:54:bd:f8:25:b8:f2:
         9f:a8:39:b2:0d:b6:06:da:dc:67:3a:81:8d:ef:5d:07:91:61:
         c6:2a:cf:d0:1a:8e:fd:8f:a4:ad:ee:be:bb:fa:c8:7f:a6:25:
         55:1e:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:45 2025 by rpki-client