Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
File:                     35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa (raw, json)
Hash identifier:          1EBodShwcNmT3hleaKuFDtFBSccyEUUgLiKMxhqwCY0=
Subject key identifier:   70:21:23:98:F2:07:C7:F7:51:3A:CE:DF:8F:DD:58:05:D5:57:EB:84
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584957F3FC5736E84B62A7412000
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     12212
IP address blocks:        2605:8900:f000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:fc:57:36:e8:4b:62:a7:41:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=79b3bc8c-6946-4375-811b-6b224d4e4175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0f:d6:1a:12:e1:2e:7b:53:74:f3:50:aa:e9:
                    1c:41:62:13:37:37:5f:b6:4a:e0:b9:a0:27:18:db:
                    93:9a:d8:1b:ba:a5:ca:c8:06:09:ad:dd:ae:47:38:
                    26:27:46:56:58:9b:78:8b:71:7c:41:91:f0:5e:20:
                    87:21:5a:bd:37:9d:c2:5e:ba:db:2d:01:63:d0:92:
                    af:bd:3f:16:16:24:17:69:29:fd:f7:e1:2d:80:11:
                    f2:49:62:55:f8:b8:3b:96:38:9a:a5:b6:34:8c:9c:
                    2c:c3:4b:ad:5c:10:5f:f7:38:84:21:52:94:ad:e9:
                    47:eb:88:c0:01:ed:91:6d:b4:85:bc:09:8d:58:9d:
                    7d:8c:b1:7a:7f:10:e2:a6:ab:ee:4a:e3:c0:e6:7d:
                    f9:fd:f0:42:b4:57:13:98:ad:10:53:e8:14:5f:81:
                    9d:4b:00:01:ab:a0:46:4c:52:a2:0d:2f:7a:f4:1b:
                    19:9b:a7:ff:ef:db:6c:4f:1d:56:ec:1f:49:c5:62:
                    5b:7d:7a:59:03:c5:3f:b7:28:47:91:b3:f9:05:33:
                    90:a0:d7:f3:e4:f1:df:7c:d5:6f:6c:ec:c8:8a:fa:
                    bc:04:f9:fa:04:01:ad:cc:77:d5:ac:f4:f8:d7:ee:
                    21:77:8e:0b:3f:15:e9:79:5f:69:6d:ee:dd:77:41:
                    04:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:21:23:98:F2:07:C7:F7:51:3A:CE:DF:8F:DD:58:05:D5:57:EB:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/35ec0f49-ee9a-38aa-ae3c-0ec0c7f99c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e4:e2:9a:2c:18:55:49:22:46:d0:9f:a8:b5:ab:92:4c:36:
         dc:06:a2:14:38:81:4a:29:61:90:5e:3b:b2:cb:82:1c:3b:f2:
         ef:f9:2d:b1:eb:95:cf:9e:a2:90:8d:2b:57:17:95:79:cd:7d:
         47:c7:87:51:42:bb:a3:65:1d:e0:72:7f:51:ae:4d:39:bc:38:
         f9:f7:c2:6e:1b:3c:b3:ec:80:ba:b2:d2:a6:3d:b6:af:63:2d:
         f1:33:ba:ee:ec:5c:d9:f3:78:96:6b:55:05:37:e7:ea:bc:7a:
         5f:06:e6:46:2f:68:b2:8f:f1:2f:78:a5:da:3a:03:b9:5b:a7:
         c8:60:2b:87:d0:4f:bf:b5:3f:e3:71:01:84:00:78:77:96:4c:
         a9:8c:a8:40:b5:61:84:e1:24:80:8c:66:af:62:ff:13:49:05:
         5c:26:e5:c4:58:65:d4:79:d1:de:0c:ca:96:c3:6d:d1:9e:f4:
         d7:45:1f:06:11:be:11:0a:03:a9:aa:67:5b:f2:e0:d3:5b:71:
         3b:52:ed:5e:c6:86:bf:00:c5:b7:a9:97:21:6e:35:3c:2c:a9:
         14:4e:28:7d:5e:c4:48:68:17:8b:8c:14:04:ee:21:e9:22:7c:
         99:de:b2:ce:65:fc:f6:dd:cb:a7:c1:a5:6c:44:57:ed:78:c3:
         24:90:62:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:21 2025 by rpki-client