Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
File:                     7d91392f-83f2-35b7-b65b-48348b34691a.roa (raw, json)
Hash identifier:          KSReOD3TUxF1QO2Ee3YM8Zr4VV7K9FOK3z5si2yTWwY=
Subject key identifier:   82:00:CF:7A:9E:9E:AE:25:87:9D:DE:7A:D4:E1:49:A6:60:12:96:50
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584929E3C82170F19837438CEB80
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     3477
IP address blocks:        2601:a005::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:c8:21:70:f1:98:37:43:8c:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=61cc7490-65b4-4a4b-a770-06aecfe1501b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:79:c5:44:e8:a6:84:24:b7:a0:ed:96:73:
                    53:50:83:75:fc:ff:32:02:fb:e1:88:24:cd:67:74:
                    44:f5:ac:ec:cc:d9:f4:95:14:ea:8a:cd:e6:a3:63:
                    66:bf:ce:76:29:e9:7e:24:d7:d4:5d:51:3c:4c:62:
                    23:56:de:26:6d:70:c9:c0:af:1c:49:b8:ae:ae:1c:
                    cb:6b:98:ee:a8:bd:d2:b3:9a:d6:36:4d:4a:83:6f:
                    9c:30:43:01:28:0e:7f:5c:12:97:2b:f6:07:86:43:
                    c7:ef:2f:d2:35:49:90:a6:7c:54:e0:7d:8a:48:da:
                    38:93:74:06:7a:c8:38:76:4b:28:f6:3a:59:36:db:
                    c6:d6:60:13:56:28:a8:ff:a7:3b:9a:ce:a2:e6:25:
                    05:84:00:16:a8:78:98:86:f7:0b:2e:97:74:3f:97:
                    e1:7a:fc:47:ec:65:98:1b:98:f4:14:82:90:01:21:
                    14:83:74:ec:ed:b7:e9:37:7f:8b:6b:19:24:f6:99:
                    58:08:79:4a:5e:a8:d4:97:cc:50:82:65:40:b7:3d:
                    1c:1f:a7:e0:c1:95:99:e3:ae:63:35:8f:0f:03:32:
                    d2:b9:31:92:dd:92:85:54:98:ec:e1:da:24:e9:6e:
                    a0:4d:99:b3:f0:65:e0:46:3b:f2:2e:56:bf:3b:70:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:00:CF:7A:9E:9E:AE:25:87:9D:DE:7A:D4:E1:49:A6:60:12:96:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a005::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:77:f7:a0:d2:aa:0a:d0:1a:b3:cb:91:11:94:1f:26:4b:
         b0:06:0e:45:8f:80:7d:9b:a7:c4:dd:37:45:c6:7f:37:e7:07:
         d5:c4:11:ea:b6:c8:76:17:d9:67:36:8c:bb:82:ab:26:3a:8b:
         e1:9f:33:34:05:a7:cf:5a:02:87:77:d2:6e:7a:3b:26:ea:16:
         53:d8:03:d9:e6:d1:a3:6e:c5:2d:a2:38:74:37:1f:fc:e9:b0:
         a6:39:d0:75:fc:3f:e5:9f:27:22:00:ca:d0:ea:75:28:24:d7:
         68:88:90:9e:bb:f2:58:da:16:08:4e:46:95:ce:8a:cd:ed:48:
         82:25:2c:83:95:4d:5c:5d:4b:7e:3f:16:f1:27:f4:8a:9f:17:
         b1:d8:03:2c:20:0b:00:12:2c:42:d6:ab:7e:0c:d7:fe:9a:f0:
         35:55:88:97:7d:ab:0b:35:4b:d1:70:e4:b8:54:83:b4:2d:dc:
         1b:ff:6a:a5:ed:4f:fc:cf:bd:13:ff:33:d4:23:d1:ae:a1:97:
         d2:a5:9e:86:a4:16:fb:1d:c8:25:07:6d:15:49:b5:1f:70:14:
         ee:b5:41:9f:46:19:1f:a8:f7:b4:d0:7c:28:29:cb:f6:d7:1f:
         e1:d9:ff:2a:fa:02:1a:5e:7b:0c:9b:5e:fc:ba:78:eb:d2:48:
         d1:c0:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:23 2025 by rpki-client