Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/148f0adf-3aea-3765-897f-51f56ab9232b.roa
File:                     148f0adf-3aea-3765-897f-51f56ab9232b.roa (raw, json)
Hash identifier:          dnOdEI480ZQvV7RreFiVutFmsBOUqjr/km3PyeKYX+0=
Subject key identifier:   23:70:52:92:5E:6E:DA:41:A1:23:0D:42:20:69:68:70:81:CB:E3:FA
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F43285848E0065A1E5D5AFE14B62798C0
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/148f0adf-3aea-3765-897f-51f56ab9232b.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     46846
IP address blocks:        2607:f368:a004::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:5a:1e:5d:5a:fe:14:b6:27:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=a4698417-03d3-43ac-966f-ba0d89c7c1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4b:31:a4:8f:2e:5c:9e:d3:41:ba:fc:72:78:
                    eb:fe:ea:22:85:0c:2b:5d:b4:20:4c:2c:18:8e:42:
                    59:5c:32:66:de:b9:39:2c:c7:b1:59:f2:f0:50:96:
                    44:cf:b0:03:48:50:b6:57:3f:ad:83:7c:89:26:4b:
                    e5:c3:ce:d5:d1:4b:99:27:32:34:c1:0d:48:99:1f:
                    cb:12:d8:11:f8:e9:7e:3c:a0:a0:79:10:6d:49:e5:
                    14:9f:58:9c:40:f0:db:d9:80:cd:5b:23:8c:89:bf:
                    ec:53:c3:2b:e9:d2:49:48:4c:ca:d3:f0:56:27:6a:
                    28:36:1c:d2:38:84:3b:81:e8:66:42:b9:d1:a1:e9:
                    97:54:c5:67:7c:6a:78:c4:c4:1b:06:7b:af:35:eb:
                    c8:62:59:fd:55:cd:62:b9:e3:58:e5:38:6a:c7:3f:
                    b3:9f:19:7f:51:47:ee:e3:41:ca:25:4f:55:2e:8f:
                    f7:79:23:c9:1d:d8:82:8e:8d:9d:d6:b7:38:16:22:
                    0f:a0:ef:16:74:d3:50:0e:2f:6c:45:f7:ac:e5:e4:
                    9c:46:b4:39:34:56:55:bd:61:f5:05:c9:51:9f:9f:
                    86:b4:81:0c:48:8b:66:f6:e5:2e:9f:40:38:b5:29:
                    5f:61:06:5c:7e:a5:f5:57:76:e5:b4:97:a0:5b:7d:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:70:52:92:5E:6E:DA:41:A1:23:0D:42:20:69:68:70:81:CB:E3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/148f0adf-3aea-3765-897f-51f56ab9232b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:57:ec:cc:c1:a7:8f:68:54:02:e0:1f:6b:0e:dc:8c:fd:17:
         c5:72:db:27:03:9c:62:51:fc:e8:1b:16:2b:b9:82:ab:fe:f1:
         23:ce:91:32:24:83:af:95:7c:1d:f7:10:7c:cb:b2:a4:97:f6:
         a8:d4:6d:bc:1e:cf:08:18:cd:0e:8c:d2:5a:6d:ea:e2:b0:bd:
         c2:a8:b2:6b:52:30:56:23:46:ce:85:e3:45:b5:9d:a5:6e:29:
         e5:7c:2b:c2:c0:60:0d:ad:ab:52:45:9f:77:7b:37:1f:43:11:
         f0:b3:39:f5:8c:3f:4c:3c:13:bd:93:f2:ff:a0:48:66:63:f6:
         33:3d:d1:fe:65:66:a5:c5:b4:eb:bc:a7:d7:ab:34:4a:28:dc:
         16:f9:25:b4:6c:1d:02:5e:19:6a:23:ce:1e:d1:0a:a2:c9:aa:
         bd:da:6e:40:29:8e:47:25:94:a8:a8:70:94:a3:8b:4f:a9:0c:
         d5:86:92:14:d3:b7:ce:a6:be:46:c9:bd:80:0b:38:47:9b:a4:
         81:23:5a:14:6d:0b:60:01:84:0c:af:6e:aa:77:3d:1e:a0:77:
         ff:c8:4e:16:a0:ca:c6:61:d7:94:fa:d7:6c:4b:51:46:07:5a:
         ea:fb:06:c4:da:de:c1:cf:93:1a:12:33:0e:36:e0:48:f4:7c:
         72:4e:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:03:36 2025 by rpki-client