Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e17e3fbb-7ec2-38eb-8ddb-7693b1c00222.roa
File:                     e17e3fbb-7ec2-38eb-8ddb-7693b1c00222.roa (raw, json)
Hash identifier:          DnsHPSY7FMC8gb4tpeUpkI1uAf6I42IsJYa9W/Z0MRE=
Subject key identifier:   1C:EE:E0:2B:B9:64:AA:47:16:08:BA:28:F2:99:38:74:C9:AE:73:AE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D19BAA7FF01258CD450CC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e17e3fbb-7ec2-38eb-8ddb-7693b1c00222.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2602:107:5900::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:9b:aa:7f:f0:12:58:cd:45:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a8f9db29-e0a7-4c53-80b6-0e5c4b8dcb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2b:17:35:81:4b:12:d8:03:3a:b4:64:ae:db:
                    68:f3:45:c8:a7:5c:aa:8f:a7:99:81:41:63:fe:26:
                    cb:30:80:ef:7c:1f:77:77:f1:f9:49:aa:ff:c4:4b:
                    e2:60:ea:9d:06:45:57:b0:0e:55:87:fb:72:52:04:
                    dc:d2:31:33:91:5a:46:db:9c:d2:c7:db:ba:df:5c:
                    f3:ad:82:37:bf:e4:e1:3d:1e:c2:b7:86:9c:73:3c:
                    cc:ae:4f:c1:19:43:50:a8:a2:14:80:41:f4:89:f6:
                    f1:30:d6:95:5a:de:15:ff:fc:63:75:ef:43:7d:87:
                    cc:12:bf:32:d1:44:87:3a:d0:8e:af:22:d8:50:63:
                    5c:f2:08:7f:cb:f3:4c:cb:5c:ac:7b:dc:20:2c:c1:
                    5b:17:53:79:2d:8e:8b:ef:56:e7:36:2c:0b:92:74:
                    5f:2d:a3:41:1d:ce:6e:00:73:25:59:9d:28:d2:16:
                    75:0e:3c:05:a4:0d:68:20:de:34:92:65:db:84:54:
                    ff:8f:77:cc:64:8b:32:6b:3e:cc:ae:28:ac:92:c5:
                    04:2c:6f:da:7d:c1:b5:34:43:df:59:72:13:17:e1:
                    da:5a:04:6d:42:ce:f9:b8:cd:61:d0:f5:59:6b:d6:
                    91:23:cd:28:c3:66:51:27:f3:17:f9:4e:7c:43:98:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EE:E0:2B:B9:64:AA:47:16:08:BA:28:F2:99:38:74:C9:AE:73:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e17e3fbb-7ec2-38eb-8ddb-7693b1c00222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:5900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:33:76:61:ca:6b:d8:40:db:e4:1f:57:2e:7e:d9:af:88:74:
         b5:d3:37:41:69:af:a0:fa:73:80:bd:76:8a:97:8c:5c:4a:be:
         6f:0f:88:8d:ef:9f:15:82:a1:e3:e6:71:aa:9b:92:1a:22:87:
         df:ee:0b:40:14:2d:98:40:be:73:94:dd:20:20:93:b0:c3:36:
         e5:93:c7:29:63:77:ec:ae:3b:86:2c:b0:57:ac:42:99:fc:89:
         bb:09:79:a0:8a:b5:16:7b:d0:81:c6:fb:0e:50:e4:92:2a:33:
         6d:b1:43:f1:72:4e:88:6e:46:25:f0:a6:97:ae:51:51:ae:7c:
         4d:56:a9:90:9e:d7:bc:af:3f:ff:3a:ec:cf:42:38:28:de:60:
         6f:db:ed:54:98:eb:d4:7c:af:31:e8:d9:a2:d8:f8:e8:d9:26:
         96:74:e8:63:48:df:ad:7b:f7:12:0f:2f:c7:64:bf:25:58:28:
         dc:ed:5d:c1:5c:29:f3:32:f1:b3:81:c2:8c:48:b6:39:2a:91:
         8d:28:f0:70:51:2d:13:e0:b6:c1:bd:db:3e:b4:8d:00:5c:ca:
         b8:48:40:06:1c:03:d3:f7:e4:f8:32:b5:a3:88:78:c5:b9:63:
         bf:f1:18:e7:7d:d4:04:97:82:9d:83:a8:8d:8d:a7:e3:16:bc:
         ee:2d:6f:72
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEji0Zuqf/ASWM1FDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YThmOWRiMjktZTBhNy00YzUzLTgwYjYtMGU1YzRiOGRjYjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCsXNYFLEtgDOrRkrtto80XIp1yqj6eZgUFj
/ibLMIDvfB93d/H5Sar/xEviYOqdBkVXsA5Vh/tyUgTc0jEzkVpG25zSx9u631zz
rYI3v+ThPR7Ct4acczzMrk/BGUNQqKIUgEH0ifbxMNaVWt4V//xjde9DfYfMEr8y
0USHOtCOryLYUGNc8gh/y/NMy1yse9wgLMFbF1N5LY6L71bnNiwLknRfLaNBHc5u
AHMlWZ0o0hZ1DjwFpA1oIN40kmXbhFT/j3fMZIsyaz7MriisksUELG/afcG1NEPf
WXITF+HaWgRtQs75uM1h0PVZa9aRI80ow2ZRJ/MX+U58Q5ilsQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBzu4Cu5ZKpHFgi6KPKZOHTJrnOuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTE3ZTNmYmItN2VjMi0z
OGViLThkZGItNzY5M2IxYzAwMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIBB1kw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFDN2Ycpr2EDb5B9XLn7Zr4h0tdM3QWmvoPpzgL12ipeMXEq+bw+I
je+fFYKh4+ZxqpuSGiKH3+4LQBQtmEC+c5TdICCTsMM25ZPHKWN37K47hiywV6xC
mfyJuwl5oIq1FnvQgcb7DlDkkiozbbFD8XJOiG5GJfCml65RUa58TVapkJ7XvK8/
/zrsz0I4KN5gb9vtVJjr1HyvMejZotj46NkmlnToY0jfrXv3Eg8vx2S/JVgo3O1d
wVwp8zLxs4HCjEi2OSqRjSjwcFEtE+C2wb3bPrSNAFzKuEhABhwD0/fk+DK1o4h4
xbljv/EY533UBJeCnYOojY2n4xa87i1vcg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:18:21 2025 by rpki-client