Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ba36d8a-e645-315c-8e75-2183f142b7f7.roa
File:                     1ba36d8a-e645-315c-8e75-2183f142b7f7.roa (raw, json)
Hash identifier:          5AHRYFKjMvrTDvB4SovbEMVKIi1Cu1A3HYT3PzZwHts=
Subject key identifier:   18:73:7E:1B:11:D8:81:61:55:3F:FF:71:B1:8E:EA:35:A5:56:AA:14
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584925B3B60889F78AEF10AC7022
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ba36d8a-e645-315c-8e75-2183f142b7f7.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     399170
IP address blocks:        2610:a1:3200::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:b6:08:89:f7:8a:ef:10:ac:70:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=ea00b840-eee9-4839-9aa9-e8bb052b59ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:7e:2e:ab:b1:ac:3e:a4:92:67:03:8b:4e:
                    ed:95:3b:39:39:19:4b:76:02:d4:d3:bb:34:66:94:
                    a8:00:97:ba:ba:89:ad:a5:b8:c7:f0:b3:c9:04:61:
                    a5:45:ca:54:de:64:0c:0a:36:04:6c:23:d2:24:26:
                    e6:59:13:9e:45:70:4c:85:80:f1:b8:55:40:34:7c:
                    8f:65:da:94:9a:8f:8a:42:e0:62:d0:52:ad:6a:00:
                    fd:0e:f6:13:5a:8b:04:3e:95:ff:6d:f3:71:cd:a5:
                    33:56:c7:f4:9a:0f:c6:cc:8a:f4:99:d0:cd:88:d2:
                    d2:05:06:93:8d:da:1b:c5:ce:aa:ff:7f:5e:58:12:
                    05:7b:eb:ce:3d:16:3a:79:73:82:97:64:e5:8e:03:
                    04:2e:52:14:36:af:99:19:59:65:ba:2d:72:a9:af:
                    2b:a0:64:a0:bb:00:5b:6b:d2:79:4e:4d:30:fc:64:
                    a1:4d:dc:48:68:98:b8:fe:aa:85:89:32:10:22:1a:
                    c7:ec:84:4f:25:72:86:58:28:4a:4d:42:18:7c:33:
                    7b:47:74:ad:71:fb:d0:4a:92:5e:dc:15:61:e0:dd:
                    9b:6e:58:e8:32:68:f9:df:1d:3d:9f:1d:e8:51:5b:
                    9d:d5:18:6d:b9:ad:1f:3e:a4:fe:80:8d:78:1a:31:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:73:7E:1B:11:D8:81:61:55:3F:FF:71:B1:8E:EA:35:A5:56:AA:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ba36d8a-e645-315c-8e75-2183f142b7f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f6:6a:14:94:7c:18:60:bb:8d:cc:57:d9:09:68:9f:9a:d0:
         d6:a1:3a:37:88:b6:1a:df:6f:10:3d:cd:ab:a9:eb:ae:97:81:
         20:aa:d9:5b:1d:c1:f8:0e:ce:79:47:71:02:bf:a5:dc:90:64:
         bb:53:a9:c1:aa:ee:87:e2:65:72:a6:6c:3a:bf:0b:97:b0:75:
         77:bb:b6:16:f5:04:4d:17:ad:ef:38:aa:2b:1b:82:bb:c0:0b:
         79:b4:c5:80:8c:8a:24:f9:80:ac:4c:2a:e9:ab:7b:d0:f6:60:
         8d:73:2a:61:15:96:fe:a9:50:59:a0:27:73:ec:b0:57:c6:b7:
         64:eb:75:72:98:a0:c0:94:9e:25:9c:5f:e8:2a:ad:6a:0c:dc:
         f7:78:7a:39:8a:4d:73:07:67:80:5f:ee:2e:da:d0:0d:e8:46:
         3d:85:b1:42:db:67:a7:bf:b4:bd:67:5b:a4:c9:18:ea:3a:33:
         3a:8d:b5:5c:ad:4d:7b:e6:af:a7:94:80:a3:52:03:3e:be:a4:
         32:f7:bd:e3:5a:eb:9d:c1:01:8c:28:fc:7b:c3:3e:83:68:93:
         c0:b8:d6:41:bb:07:5d:59:43:b0:b9:d9:53:f6:c3:24:bd:40:
         c9:af:ec:bd:bc:9b:5b:e9:38:2e:5d:b0:b3:fe:ed:71:77:cc:
         1a:53:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:46 2025 by rpki-client