Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf01a003-fbbb-3504-b777-06506ff47819.roa
File:                     bf01a003-fbbb-3504-b777-06506ff47819.roa (raw, json)
Hash identifier:          Kypj0Pq3FS0mY0ixZmVrAKI8ZeMNF9T9dZuWdSh1gb0=
Subject key identifier:   6A:95:E4:10:79:02:42:7C:22:EE:5E:0E:E1:3C:29:1A:D7:16:2B:05
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849134F94F9BBFEF16F0EEA8508
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf01a003-fbbb-3504-b777-06506ff47819.roa
Signing time:             Tue 04 Mar 2025 10:54:32 +0000
ROA not before:           Tue 04 Mar 2025 10:54:32 +0000
ROA not after:            Mon 02 Jun 2025 09:54:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:8c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:4f:94:f9:bb:fe:f1:6f:0e:ea:85:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  4 10:54:32 2025 GMT
            Not After : Jun  2 09:54:32 2025 GMT
        Subject: CN=e73fbc80-54cc-4bc2-bece-a76488e77018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:a8:9e:16:2c:d2:08:f9:67:70:b3:5f:6a:
                    13:35:ca:83:4c:b9:9b:62:54:0f:af:3e:5b:a1:78:
                    ac:a2:37:0e:a3:b8:42:83:fa:88:3c:5a:aa:5b:0e:
                    45:42:90:3e:a4:05:06:e1:07:14:52:72:25:7a:e9:
                    f3:93:f2:13:ae:ef:c8:65:5a:7d:60:19:a2:98:2c:
                    7d:60:bb:1a:24:68:fa:a4:34:3b:be:b0:f3:2e:17:
                    b7:8b:b0:e1:72:43:1c:80:75:76:08:15:2e:93:79:
                    92:86:52:99:bf:de:b5:11:86:f4:c1:87:1d:7f:77:
                    86:98:3f:6c:da:64:6f:de:4d:10:3e:95:b4:75:2a:
                    03:74:58:04:9e:84:59:26:df:36:d2:49:78:b9:d0:
                    c5:0c:32:6f:75:0f:39:08:10:e4:b5:48:78:4b:f5:
                    e7:53:0d:7c:b1:53:27:bf:21:45:90:f5:bc:92:84:
                    b2:07:ab:ca:51:7b:57:d1:da:bc:00:50:dd:9c:63:
                    e8:e0:be:79:69:45:5a:a3:77:58:de:42:8a:19:64:
                    ef:70:4c:6c:28:93:89:86:99:2e:ec:94:5f:7f:81:
                    76:a7:8c:31:d8:36:2f:e4:0a:89:c6:31:fb:0a:ee:
                    38:53:33:ed:90:7c:cc:11:3b:01:29:53:3e:00:13:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:95:E4:10:79:02:42:7C:22:EE:5E:0E:E1:3C:29:1A:D7:16:2B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf01a003-fbbb-3504-b777-06506ff47819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:64:7e:07:f4:64:66:00:87:70:aa:0b:fa:6a:80:c7:19:
         7b:2b:cd:07:82:e2:5c:22:17:8f:e7:7b:de:7d:b1:4e:99:d2:
         d5:8e:c7:f6:0d:80:36:f5:eb:ce:e2:52:a3:e8:b2:f6:ce:4b:
         f3:1e:af:dc:4b:a1:03:2d:04:8f:1b:8b:32:d8:34:23:de:f9:
         8d:f1:ff:2a:64:bd:06:c2:00:1e:46:5a:78:64:c7:b3:fe:ca:
         22:c7:c7:11:59:47:5e:f5:b8:60:91:f0:c4:82:40:0e:c8:a0:
         a3:ec:02:56:58:90:c4:1f:1e:20:e4:e1:41:b7:e1:92:a5:c1:
         6b:81:3c:45:60:b4:8b:4c:fd:9c:52:5f:43:2d:6e:c5:54:31:
         c8:14:8f:7b:12:98:2e:cf:a4:02:db:ac:fc:37:53:82:45:10:
         e1:93:c9:cf:d2:94:00:7e:2c:4c:3e:05:b3:76:5d:8b:ad:09:
         e8:06:33:cb:b9:c3:38:21:e8:34:4a:e7:9d:a3:59:e6:5f:b6:
         77:f6:2e:be:df:e2:76:63:58:53:f2:48:03:cf:8e:0e:38:78:
         1e:b9:11:82:4d:2c:be:be:b5:8b:5b:3d:ab:ff:05:e8:4f:84:
         19:49:ab:a0:b6:99:c4:44:5b:75:03:78:2e:f5:de:69:85:e1:
         83:ba:6a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:29 2025 by rpki-client