Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa
File:                     0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa (raw, json)
Hash identifier:          0vCqOaCEDmX4fWwhvygsvee18ur3774LzQ9URQla0xA=
Subject key identifier:   BA:36:D5:24:19:A5:A9:A2:C4:AE:C6:39:E5:27:70:36:9A:28:0D:A3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5592368BC3B9E664FF46808
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa
Signing time:             Tue 04 Feb 2025 12:40:44 +0000
ROA not before:           Tue 04 Feb 2025 12:40:44 +0000
ROA not after:            Mon 05 May 2025 11:40:44 +0000
asID:                     30036
IP address blocks:        2604:2d80:2100::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:59:23:68:bc:3b:9e:66:4f:f4:68:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:40:44 2025 GMT
            Not After : May  5 11:40:44 2025 GMT
        Subject: CN=53904096-e197-49f0-8aaa-7919fe43d6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:32:a8:3c:0e:47:8f:e2:f0:d7:29:ab:7c:
                    52:23:5b:8a:4a:ae:98:30:c9:d5:9b:5e:f3:64:05:
                    3b:69:57:db:2d:93:29:02:8f:0a:b8:47:85:2b:fd:
                    8e:2d:cc:81:c5:f4:b8:3f:00:5b:19:fb:00:f8:49:
                    63:01:e3:ec:02:a6:f4:bb:12:24:ec:c9:db:72:a7:
                    80:d9:e6:96:18:b5:b6:ef:5c:4d:21:5d:e3:8e:4b:
                    07:b0:75:2c:39:8f:c8:c6:83:a7:c3:81:a6:01:7a:
                    4e:9f:e1:17:40:b5:c9:0f:79:4c:f1:27:ce:38:ac:
                    f5:fd:e6:76:ff:09:c2:fe:58:94:b5:07:81:95:1c:
                    a6:77:6b:ee:14:1a:19:fa:b1:20:78:4f:28:22:62:
                    9f:b7:c7:08:79:4e:9a:0f:3f:5c:7e:f3:b3:17:33:
                    3a:4a:76:b5:2f:62:4f:99:80:cf:7e:80:e6:98:e1:
                    93:58:fe:74:5b:3d:0a:1a:f6:7f:3e:55:bb:84:b7:
                    96:fe:0e:d6:09:39:0f:b6:d9:08:85:a2:ea:ca:62:
                    f9:d5:be:2b:c1:1b:1e:8b:33:bc:39:08:5a:51:f8:
                    d5:8e:4d:6e:26:3c:60:3c:8a:0d:34:b3:27:8f:2e:
                    7e:37:a6:02:08:79:f4:7e:c5:53:ee:81:c9:e8:d5:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:36:D5:24:19:A5:A9:A2:C4:AE:C6:39:E5:27:70:36:9A:28:0D:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4e:19:34:83:25:f6:55:d0:46:95:af:1b:8d:61:fa:6d:b5:
         fd:80:53:df:62:ed:e5:47:2b:2c:b3:67:f6:38:03:f4:cc:e0:
         ad:cb:d2:a9:53:89:48:11:83:c2:d6:55:ce:33:44:9c:1d:60:
         e5:9e:96:67:02:24:d6:e6:5d:55:b8:37:93:cf:ab:71:55:df:
         34:9f:d3:e7:2b:8d:86:1f:a7:e2:88:1d:93:e8:ed:1c:31:26:
         53:de:a4:76:c8:56:68:a2:4d:49:83:7a:9b:02:5b:8d:90:ae:
         ec:ab:67:9f:c0:3f:57:b9:0f:4e:71:5b:83:5b:0f:24:85:a3:
         dd:cc:84:2d:e3:5e:17:54:bf:63:4a:83:37:c8:ac:4d:2a:60:
         c8:39:a9:4b:42:b7:ad:71:af:e7:67:f3:bd:00:7f:cb:79:d6:
         ab:52:c9:62:9c:c5:22:bb:c6:ed:c1:8f:cb:8a:f9:34:16:e8:
         cb:1f:fb:e0:f8:66:d1:44:2d:26:de:65:a7:35:34:07:fb:f6:
         80:2b:04:ee:e7:03:ca:b4:c2:fb:c5:cd:30:58:e0:e9:e5:7d:
         15:47:19:23:9a:f2:84:01:02:99:5e:cd:7d:83:5a:8e:69:66:
         9b:45:1c:8f:f4:af:68:a7:09:fa:8e:0e:1a:46:8c:93:2d:49:
         27:50:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:44 2025 by rpki-client