Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40c6f006-e75f-3f23-8a0b-3922793f8e79.roa
File:                     40c6f006-e75f-3f23-8a0b-3922793f8e79.roa (raw, json)
Hash identifier:          48PQ+QY3tuDqyF8WSi765uFX5KMC99Z8VubrkBorxRc=
Subject key identifier:   1A:82:DC:13:F7:65:AA:38:72:B5:77:78:ED:F9:F4:FB:25:AF:20:CF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2BBA2ED317173F5BA70FD8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40c6f006-e75f-3f23-8a0b-3922793f8e79.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:6000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:ba:2e:d3:17:17:3f:5b:a7:0f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=053f0df6-5712-435c-a3ac-cabe282e67d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:83:f1:2b:a1:48:7a:99:57:60:35:fc:78:3e:
                    87:43:27:03:9b:54:b8:2a:7f:1f:dd:70:df:ea:e9:
                    de:25:6c:bf:b9:a9:04:91:d5:6f:97:a2:12:8b:b9:
                    e0:72:da:55:a9:26:42:86:48:4f:cc:89:e6:d4:a6:
                    db:81:be:db:20:33:84:5a:1e:f4:3c:35:57:1d:55:
                    0c:7a:31:26:cf:21:00:37:ba:53:b7:a8:b2:52:35:
                    ee:f7:8c:07:d9:10:30:9a:91:21:c0:56:a8:e7:7e:
                    5b:b0:06:23:35:28:9e:be:09:5b:ba:d9:d9:4d:d1:
                    50:96:e5:cd:c5:4f:ec:0b:c9:89:07:99:00:a2:52:
                    0d:1a:ba:ed:79:d6:ec:a0:d5:79:08:e8:ce:71:31:
                    a9:f4:da:1f:9a:8a:bf:cf:58:a0:35:6a:6e:8c:78:
                    fa:e5:09:d5:16:2b:c5:49:99:7c:94:de:7d:0f:ce:
                    43:36:44:90:30:7b:42:95:44:a5:73:8c:3e:a1:d1:
                    44:7f:86:6e:7c:46:07:54:5f:71:e3:64:d8:96:b7:
                    bb:3c:cf:5e:c5:4b:5e:f0:dd:dc:2b:40:d3:04:4f:
                    09:6d:96:1f:be:25:7f:b6:17:20:73:ff:95:a9:94:
                    b9:df:d5:83:cf:5d:63:53:ae:7f:60:58:7f:7d:43:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:82:DC:13:F7:65:AA:38:72:B5:77:78:ED:F9:F4:FB:25:AF:20:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40c6f006-e75f-3f23-8a0b-3922793f8e79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:88:d4:ff:2f:af:b4:60:3a:20:91:5e:a7:e1:cd:8a:cc:01:
         4a:85:6f:3d:6a:a1:9e:55:21:e4:6e:c0:35:c2:a4:a8:69:72:
         6b:7a:ae:77:4f:3f:9a:50:6e:af:3b:98:aa:5c:10:69:71:2c:
         47:f4:43:6e:65:a3:76:6a:4d:22:67:e3:50:d9:16:dc:59:c1:
         2a:3b:ef:b7:00:79:fe:28:cc:e2:83:91:9a:ba:2c:78:22:e8:
         cb:a9:cb:71:6a:52:b3:c0:1e:c1:97:04:ac:91:cc:aa:e7:38:
         a5:c9:8f:2b:b7:1e:9e:6c:22:3b:aa:a7:98:1f:00:13:ed:b1:
         3d:34:af:51:7c:c3:65:33:2d:be:08:04:64:a6:c8:ce:c6:90:
         d0:d7:cc:8a:48:b5:11:18:d9:fa:7b:4e:ba:48:c1:b6:dd:8e:
         68:d4:dc:7d:47:3d:80:20:e4:94:76:01:9f:e9:87:94:c1:ae:
         64:d1:64:ad:ec:eb:5a:f9:e0:25:7a:32:3f:15:ab:79:9e:ae:
         18:b5:f9:ee:42:31:08:50:66:a7:5a:39:03:f5:6c:6b:37:73:
         36:a6:fc:c6:e9:33:7a:cf:59:a5:f9:af:14:70:37:37:d2:d8:
         de:ae:e8:2f:a8:22:f0:a1:da:a5:e6:b3:ba:99:ad:bc:ef:89:
         df:45:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:37 2025 by rpki-client