Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89596037-f735-3dd8-b31e-ecd39a44060f.roa
File:                     89596037-f735-3dd8-b31e-ecd39a44060f.roa (raw, json)
Hash identifier:          7oqZjeGAVVl9YRcVPv4jcLrqxlXowCSweezU6e1sBpE=
Subject key identifier:   6D:EB:58:BD:62:44:1A:07:54:54:84:75:B5:F1:E1:76:9B:09:ED:E4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57853A7F2A8528B837A8AB0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89596037-f735-3dd8-b31e-ecd39a44060f.roa
Signing time:             Tue 04 Feb 2025 13:43:35 +0000
ROA not before:           Tue 04 Feb 2025 13:43:35 +0000
ROA not after:            Mon 05 May 2025 12:43:35 +0000
asID:                     30036
IP address blocks:        2604:2d80:af00::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:78:53:a7:f2:a8:52:8b:83:7a:8a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:43:35 2025 GMT
            Not After : May  5 12:43:35 2025 GMT
        Subject: CN=5aa9599f-2106-48a2-9256-ae6c2a1b2afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:3f:35:f1:f8:ef:07:21:6e:cf:86:4f:de:
                    84:2c:a9:fb:61:9a:d3:19:e3:44:6b:49:76:6e:84:
                    5b:6d:c8:60:80:ab:88:2a:f4:67:4d:2d:f6:87:47:
                    c5:50:c3:04:53:10:fb:41:b3:3c:da:95:c7:0f:02:
                    34:62:bd:a9:83:5d:50:f4:05:ee:71:fa:be:25:24:
                    ed:fe:1a:32:87:3d:2b:04:3f:66:20:2a:61:62:f8:
                    38:03:6d:9c:10:b3:6b:9b:9e:b6:ae:ec:71:4f:f4:
                    28:5a:28:b7:54:e7:1b:03:40:93:d8:b9:83:93:7e:
                    88:38:9c:41:87:4a:55:12:ee:d7:5e:88:cf:5c:7a:
                    5e:64:38:53:6f:ef:20:93:e0:e9:36:b6:46:5c:22:
                    36:9e:5f:b4:8f:48:63:3b:8c:4f:5a:8d:9c:08:34:
                    c0:6d:b7:0e:b3:7c:38:66:95:ae:d5:a6:26:5c:5b:
                    17:00:1a:2c:fe:0b:93:66:9e:46:ca:ac:d3:c6:24:
                    e3:50:82:b5:ac:d4:41:0e:d3:fd:90:a0:f8:ef:2d:
                    c4:3b:44:84:de:5a:35:73:f9:61:ef:d3:36:4e:64:
                    af:dc:3c:c6:b3:4f:2d:9c:b4:16:3e:e5:02:f2:06:
                    f5:65:f6:c2:74:7d:b6:c4:37:d3:34:ba:38:70:cc:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EB:58:BD:62:44:1A:07:54:54:84:75:B5:F1:E1:76:9B:09:ED:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89596037-f735-3dd8-b31e-ecd39a44060f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:af00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:93:10:5c:bf:d6:a1:6a:42:70:8e:12:ad:9c:bf:ba:a7:0e:
         75:33:e5:cc:79:d4:48:bd:4c:9b:59:19:52:7c:48:b5:17:be:
         a9:f1:5b:ff:d6:3b:90:72:b2:c5:ee:de:79:f2:81:f8:02:ae:
         6c:91:da:ec:88:26:92:96:ed:28:90:80:b0:b9:1d:58:41:29:
         72:1d:e2:7e:ee:09:27:9e:8a:28:2b:20:a1:f0:b4:2c:5e:e9:
         33:20:ce:7c:c0:8c:2a:59:6c:f4:85:3e:70:e8:cd:d8:43:93:
         8c:4a:6c:a0:c8:59:29:51:ab:46:d6:fc:bf:de:16:76:eb:0e:
         2f:12:db:03:ee:99:38:54:a6:28:63:ef:ec:60:5f:6c:0f:48:
         2b:09:47:d6:57:5a:15:67:aa:d7:b1:89:6e:63:04:58:71:40:
         13:cd:64:c8:94:5c:07:15:87:b1:42:10:56:29:98:d7:ad:b0:
         e6:d8:e2:44:b8:19:40:a9:f4:ad:59:35:f6:14:b6:45:fc:bd:
         85:c0:5a:bb:6f:44:aa:d0:3a:ac:af:b1:d0:24:19:a3:ff:06:
         87:3c:1d:d4:3e:a1:d6:88:0f:b7:38:2b:a5:77:75:4e:c3:82:
         12:5a:de:7e:b4:7b:38:76:7d:23:6a:61:fa:b9:a9:7d:9c:dc:
         8c:0d:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:37 2025 by rpki-client