Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da700dc1-e2d5-3843-927b-d34522ace29e.roa
File:                     da700dc1-e2d5-3843-927b-d34522ace29e.roa (raw, json)
Hash identifier:          T/7HZCmAE4F4V+ERKOwM3rJyIu0vqprUu5IYrfWwLcs=
Subject key identifier:   47:D6:96:D3:53:33:8D:23:AC:E7:45:99:ED:D3:A5:D1:63:B0:76:ED
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848EC96A377DFCEA430683726C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da700dc1-e2d5-3843-927b-d34522ace29e.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     0
IP address blocks:        2602:107:2600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:a3:77:df:ce:a4:30:68:37:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=8f53d88e-f160-4319-8daa-4ea987653c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:9f:d8:66:79:f2:c1:36:40:f5:30:9e:b8:
                    b6:41:7f:fc:85:0a:c2:83:b8:9c:7a:0c:aa:b7:e2:
                    c9:80:af:c7:f5:49:0c:e8:e5:ea:68:9d:eb:24:3c:
                    b9:71:69:aa:ef:10:6f:01:b4:4c:bd:af:4d:27:38:
                    b9:6d:57:b6:ff:7c:83:08:d0:3f:9e:9f:6d:e5:1e:
                    eb:98:f4:de:38:40:82:d1:56:fa:8d:bd:f3:6f:cb:
                    8b:b6:e7:79:70:fd:e1:b8:e4:eb:16:19:37:ff:28:
                    ce:89:b2:f9:ea:1b:f0:5c:b7:12:fe:53:7a:63:63:
                    1f:85:ef:7d:24:0d:7c:0a:e2:76:d2:92:d8:15:53:
                    3f:74:d8:e3:54:96:65:1f:b5:bf:5c:68:e3:9a:69:
                    87:87:65:7f:eb:5f:07:88:05:14:12:fc:26:b6:87:
                    95:fe:11:1a:81:1f:b4:12:4b:fc:3f:21:70:bd:2b:
                    ed:9c:6c:65:06:ee:1d:23:1a:47:01:00:ff:8f:49:
                    c8:16:57:fe:01:bb:17:de:ec:2b:8a:f6:38:7b:b7:
                    bc:a5:c3:91:f4:16:45:f9:20:2e:d4:a9:1d:e0:c6:
                    b3:ab:1b:0b:61:01:84:fa:62:cc:9f:91:75:9c:8b:
                    59:50:dd:c7:97:b3:03:84:d3:c5:94:63:3a:f5:d9:
                    12:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D6:96:D3:53:33:8D:23:AC:E7:45:99:ED:D3:A5:D1:63:B0:76:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da700dc1-e2d5-3843-927b-d34522ace29e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:2600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:85:e4:79:18:5c:70:bd:c5:95:54:3b:a8:9c:f6:f3:99:b4:
         a9:4f:61:ed:10:ea:2f:da:10:c4:32:30:7c:ba:e1:c1:c9:18:
         6d:66:2b:97:4b:d4:3a:51:1e:40:0a:2a:42:db:b3:f4:24:44:
         90:1f:67:61:48:7f:81:a1:26:65:44:e0:12:4b:7f:30:4b:c3:
         6d:2a:c5:b7:cb:71:df:7b:45:de:a7:9f:64:d5:98:e9:ef:a1:
         00:f0:14:a5:4b:c1:70:06:53:bb:0c:8f:02:24:28:cf:52:a9:
         11:cf:b3:7c:0d:2e:05:49:6a:83:e3:46:89:2e:91:69:7c:db:
         a2:87:68:45:8f:a0:ad:1e:3f:a6:1e:9a:cd:94:44:b9:e3:cf:
         23:64:3b:92:ea:60:8a:f3:99:e7:e6:b7:d7:82:62:77:86:c2:
         6e:90:d3:db:8b:b3:ea:7d:77:21:4e:d8:8e:aa:b7:f7:5b:8c:
         f1:5e:17:ba:37:fa:e5:7c:3f:38:c4:0d:96:b7:4b:12:85:08:
         90:67:33:32:91:27:34:08:33:a5:9e:67:a4:ee:17:9f:06:bc:
         7b:27:ec:93:13:49:e8:ea:3e:18:ec:33:f9:1b:95:f6:73:17:
         4c:4d:dd:90:5f:d2:d1:68:84:e6:10:8d:c2:36:02:2f:ed:5b:
         94:2d:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:27:52 2025 by rpki-client