Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f119d8b1-eb62-39c1-aad3-ae21698b1295.roa
File:                     f119d8b1-eb62-39c1-aad3-ae21698b1295.roa (raw, json)
Hash identifier:          MwXHlVAGOAMXGvuWGjVlzMGpK3Q7XL4D9YyFPYAxJ2I=
Subject key identifier:   CB:FC:D7:44:97:2D:88:6E:E7:3E:C8:95:4B:95:12:11:C3:81:1A:89
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C55959B0F4D8804BADBB04A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f119d8b1-eb62-39c1-aad3-ae21698b1295.roa
Signing time:             Tue 04 Feb 2025 12:41:10 +0000
ROA not before:           Tue 04 Feb 2025 12:41:10 +0000
ROA not after:            Mon 05 May 2025 11:41:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:f500::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:59:59:b0:f4:d8:80:4b:ad:bb:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:41:10 2025 GMT
            Not After : May  5 11:41:10 2025 GMT
        Subject: CN=4113e18a-dc03-4cab-b7be-cda0a2622fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:df:e3:01:b1:55:91:75:81:c4:bc:8f:51:
                    ef:31:5b:af:c7:4c:6d:f3:bd:69:89:9f:f2:2c:04:
                    c1:46:e5:db:b7:ef:57:05:50:c4:35:73:e0:95:1a:
                    d0:ed:76:16:ad:4c:64:a2:ed:d0:13:dd:ab:40:91:
                    14:6d:d9:f2:70:0c:bc:b9:80:2b:b9:b9:04:fa:f8:
                    9f:95:dc:44:ea:34:65:1c:c2:f8:8d:d6:02:2c:2f:
                    fc:5a:2a:44:bb:1d:a7:27:ab:00:ca:7b:1e:1d:3b:
                    a2:38:b0:fa:ca:37:52:2b:a1:7d:80:17:72:e2:e1:
                    d3:7d:1c:f0:18:4f:e3:a1:58:5d:a7:8e:7f:eb:4b:
                    20:5c:18:d5:ee:69:06:44:cb:4c:27:f9:4d:ca:b5:
                    39:28:d9:b4:36:ee:2e:1b:9a:a5:01:1a:f0:bd:53:
                    68:86:fc:be:85:d4:07:22:be:a8:4b:51:96:da:e5:
                    16:25:fc:3e:a9:11:56:32:29:3a:b3:a2:a2:00:a2:
                    11:9e:fa:2d:7f:1c:e2:80:52:f0:09:bd:d0:3c:a1:
                    93:47:56:16:70:40:67:07:76:12:a4:63:b9:fd:ab:
                    70:de:ba:20:90:4e:ee:02:02:a9:71:78:8c:c8:ec:
                    68:f3:39:4f:ad:1b:97:34:88:7b:39:93:8d:fd:bb:
                    38:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FC:D7:44:97:2D:88:6E:E7:3E:C8:95:4B:95:12:11:C3:81:1A:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f119d8b1-eb62-39c1-aad3-ae21698b1295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:de:50:44:74:c9:bf:d2:18:c9:1f:28:f3:cc:c5:19:f4:d3:
         2a:d5:b0:a6:d3:4f:45:5b:d6:f9:a3:a9:17:ae:79:68:fe:9d:
         84:89:43:bc:b0:e3:ba:60:5d:68:25:77:2b:24:fb:a6:11:86:
         17:7f:2a:9c:87:fa:17:d2:9b:21:cc:d9:d0:71:0b:d5:db:c0:
         b2:0e:09:e6:ac:35:f0:14:0d:80:a9:fa:d7:83:fc:18:9e:06:
         3b:9c:76:11:fe:ea:ef:8c:0a:5f:c9:78:82:46:1f:e7:72:a5:
         32:5a:ca:f1:45:2d:ba:27:01:f0:71:13:f4:6b:5c:8f:3d:de:
         61:88:b9:9b:58:c2:2b:2c:21:d8:4d:33:11:79:48:60:c6:1c:
         cf:9d:20:56:87:a8:9d:50:f0:4f:5e:b3:1c:c2:97:b8:30:23:
         8a:48:86:85:6e:18:9b:70:46:34:ef:7a:ff:fb:2d:9a:39:c1:
         89:2d:ed:89:a7:36:80:52:9d:6f:17:4b:95:4e:aa:0d:c7:36:
         7e:ba:52:b5:0d:61:11:69:9a:fc:65:f1:92:f5:e0:60:71:b6:
         fc:26:63:3f:90:5f:36:6e:0b:69:67:c9:19:c2:a6:d2:25:9e:
         79:11:82:91:8a:d1:9e:49:d2:de:71:17:dc:50:a6:dc:15:be:
         fa:80:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:28 2025 by rpki-client