Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa
File:                     1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa (raw, json)
Hash identifier:          hVaOcC8ZSl51Z99WSehYXNpOAX0pf1lcGsAA4SiWpHc=
Subject key identifier:   AF:B2:1B:DC:05:B3:4F:DF:D4:35:27:C2:DA:80:50:6E:EF:FC:4F:9E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C534CCB1AE8E3DF9454E28C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa
Signing time:             Tue 04 Feb 2025 11:27:31 +0000
ROA not before:           Tue 04 Feb 2025 11:27:31 +0000
ROA not after:            Mon 05 May 2025 10:27:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:8f00::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:34:cc:b1:ae:8e:3d:f9:45:4e:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:27:31 2025 GMT
            Not After : May  5 10:27:31 2025 GMT
        Subject: CN=e06c6406-9bf9-490b-b855-c5b6ec48b1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:06:51:fe:8e:c3:3e:17:5a:3d:17:87:b6:
                    d8:94:9a:4e:40:98:78:59:34:90:98:2a:35:cf:d4:
                    d1:e8:a7:9f:15:f1:79:0e:26:01:05:4f:46:3f:22:
                    1e:71:ab:de:28:d8:9e:72:d3:d7:62:75:88:a1:bc:
                    0a:e4:c2:9a:93:fa:64:97:a0:e8:2f:56:07:a4:55:
                    f8:34:e1:03:95:f6:4f:73:7a:0b:94:a6:47:15:2d:
                    24:f6:ac:da:be:c6:ac:6f:8e:85:2e:85:dc:96:61:
                    3c:01:61:41:8d:ce:98:d9:59:9c:85:94:cd:9a:a8:
                    5d:21:5b:2f:78:0b:db:44:b1:e4:6c:01:93:84:3f:
                    30:fa:af:ee:f1:37:34:01:ce:1d:1f:57:bb:97:90:
                    4b:f6:6f:c7:e9:cc:e6:42:ca:8b:c1:62:83:30:47:
                    67:ed:28:5c:11:39:49:49:ce:18:33:d9:9d:1f:df:
                    ef:21:75:4a:38:6d:2d:26:33:b2:5b:ac:62:8c:70:
                    50:46:80:80:79:5d:0f:bc:29:b5:95:5f:c2:7c:fa:
                    8c:e9:38:6b:0a:34:ff:0c:fb:26:3f:10:bf:bd:30:
                    cf:33:54:f7:86:b6:73:e1:61:68:5d:74:b9:16:37:
                    2e:27:06:26:a4:cd:da:ae:0c:35:f3:cc:77:8a:fb:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B2:1B:DC:05:B3:4F:DF:D4:35:27:C2:DA:80:50:6E:EF:FC:4F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8b:09:ff:36:67:e3:09:b4:08:fa:db:01:54:cb:55:52:61:
         a4:fe:e3:3f:c6:27:28:16:9d:64:ff:35:07:9f:29:14:dd:4e:
         ae:f3:14:07:7f:95:de:2c:d5:4a:23:87:a9:83:fa:22:b0:79:
         c8:7d:90:32:ea:59:20:4d:fe:58:6f:55:e3:1e:4b:2a:1b:a7:
         45:45:23:45:27:62:49:43:73:c6:74:cf:0d:ea:32:e2:26:fe:
         c8:79:8d:05:f8:f3:ff:70:fa:c7:ca:7d:6a:89:ec:56:97:44:
         c8:4a:42:0e:01:d3:ff:15:3a:ec:ac:fd:37:31:06:d3:28:f1:
         21:92:0b:ac:df:b3:8e:a2:74:c6:d7:6b:ca:70:90:90:2a:c6:
         f1:56:e2:4e:21:d8:16:78:7c:a8:f1:a2:77:c7:3d:bf:94:a8:
         9d:64:f6:e1:95:9e:b8:da:30:01:95:a4:42:db:41:75:e3:4e:
         cb:8f:5a:35:79:4b:00:75:4e:48:4a:4e:01:77:e0:09:9e:fe:
         17:dd:d9:1d:a1:56:be:b8:41:67:6c:7a:99:3a:5f:d9:c7:e2:
         4a:a8:a9:46:b0:b9:a7:10:07:c7:73:9f:2d:75:73:e0:0a:92:
         a1:73:62:70:8b:51:fe:04:ac:fb:99:1c:ed:ba:fc:01:77:fa:
         6e:e9:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:45 2025 by rpki-client