Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cacc1eac-4540-3dc2-911e-a6dd779cac73.roa
File:                     cacc1eac-4540-3dc2-911e-a6dd779cac73.roa (raw, json)
Hash identifier:          xHvPfULrbJgYP4H2uDRk11RR7Psq2GLzJFD+O/uy1QY=
Subject key identifier:   61:10:BC:80:A5:A1:E1:E2:01:D5:F3:99:7B:44:86:FB:7A:91:1C:38
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F432858494899497A288F244D3CC36440
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cacc1eac-4540-3dc2-911e-a6dd779cac73.roa
Signing time:             Sun 23 Mar 2025 13:00:52 +0000
ROA not before:           Sun 23 Mar 2025 13:00:52 +0000
ROA not after:            Sat 21 Jun 2025 13:00:52 +0000
asID:                     400097
IP address blocks:        2606:3d40:3b06::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:48:99:49:7a:28:8f:24:4d:3c:c3:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Mar 23 13:00:52 2025 GMT
            Not After : Jun 21 13:00:52 2025 GMT
        Subject: CN=019817e0-3815-4c90-b478-0fd3bd5e06c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:3f:f2:a9:7f:06:ed:e0:36:d7:c5:7d:de:
                    aa:0a:7f:47:87:c9:3d:35:ea:39:ba:a5:3c:1c:40:
                    99:26:86:2e:01:1a:3f:d4:c9:76:fa:ce:4a:6d:31:
                    fc:a4:54:60:c2:43:c2:f3:a7:da:31:a0:dc:cc:fa:
                    e0:ed:04:f7:dc:20:25:16:61:5c:47:4c:9b:0f:e3:
                    32:b0:90:eb:03:8f:e0:8d:61:2f:65:c6:1a:eb:3f:
                    6b:a0:71:67:32:0e:e8:2d:ea:ca:23:64:1a:2b:cd:
                    e2:bd:24:fd:9d:a6:c9:3d:4a:69:cd:4e:c3:4f:d1:
                    78:69:1a:2e:fe:69:47:0c:b8:7a:eb:c5:36:15:4e:
                    c6:34:15:fe:fa:78:59:cc:d2:ca:a1:a6:c0:0d:a6:
                    58:77:77:a5:47:39:8b:18:4e:c7:08:13:39:0f:b7:
                    fc:58:22:9c:ad:b6:d6:06:4c:aa:ff:66:33:4c:d3:
                    1d:52:3b:89:c9:ad:4b:c7:cf:2e:c6:05:1a:a0:e9:
                    74:50:db:5c:fc:8c:0c:e3:09:f2:3e:54:e7:9d:5d:
                    ba:8a:01:66:b5:d6:30:ef:d1:2c:d1:0e:d7:ab:ad:
                    62:13:26:a7:62:67:51:92:34:2e:37:81:8e:91:4b:
                    d0:c6:9c:20:72:4a:36:9a:8c:21:06:8f:05:e2:da:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:10:BC:80:A5:A1:E1:E2:01:D5:F3:99:7B:44:86:FB:7A:91:1C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cacc1eac-4540-3dc2-911e-a6dd779cac73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:3b06::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b8:b1:6e:66:43:ae:17:50:12:0d:bc:24:70:ca:b1:dc:c4:
         dd:b5:c1:c1:52:1f:25:d2:5e:34:4f:8c:6e:2f:41:22:19:60:
         24:e4:2a:c8:ca:31:bf:8b:3f:45:b4:60:e1:3f:ac:5f:3f:88:
         dd:56:0d:fb:43:67:a3:c3:65:1a:84:5c:22:e2:42:b2:ae:66:
         3d:12:dd:7e:a1:14:f0:b6:c7:c4:9a:d2:dc:f9:0c:a4:ba:53:
         2a:21:8a:47:37:de:fb:53:e6:8f:60:47:16:a8:9c:6c:de:19:
         0a:f4:e1:eb:1c:50:59:d6:ca:ec:13:5e:6a:09:6f:7a:92:01:
         6e:0a:2c:b2:a2:71:61:c3:ff:7e:10:48:52:f0:51:10:69:3a:
         67:93:53:90:6a:85:c5:b2:c4:75:06:c8:b2:31:2d:b1:fa:36:
         c0:8f:93:f7:fb:b7:95:21:fc:e5:22:9c:03:1d:fd:98:25:ea:
         19:c1:78:0a:88:9f:d3:fa:64:e1:d0:50:65:3f:c4:fc:83:d7:
         af:de:15:20:84:98:d1:b5:ef:f6:0f:f3:a3:a2:ac:59:e3:04:
         74:6a:d3:fc:81:b1:4c:80:52:9f:bb:72:c9:73:e7:cc:bb:04:
         d0:7c:4e:7d:61:ac:73:08:22:aa:fc:e2:41:6d:4b:6c:d0:1f:
         59:51:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:37 2025 by rpki-client