Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4403be1a-064b-3ed1-bc0c-6f31f5ac2fe4.roa
File:                     4403be1a-064b-3ed1-bc0c-6f31f5ac2fe4.roa (raw, json)
Hash identifier:          FY0eZ0I02ycHzrm0AM2kYJr9qJE/ZvDqMEwMq2BsfJw=
Subject key identifier:   7E:32:D4:33:38:B8:8F:BC:8F:6D:0C:D1:D5:F7:55:17:19:BA:E6:30
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2BB67C56050BD1C8DB4FC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4403be1a-064b-3ed1-bc0c-6f31f5ac2fe4.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:b6:7c:56:05:0b:d1:c8:db:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=ed86d336-bc23-455c-8bd0-07c25caccab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:9e:3d:05:4f:48:9e:4e:81:2b:cb:9b:b1:
                    c7:b6:50:cb:12:57:6b:20:16:86:1f:a0:85:14:73:
                    78:22:df:5e:fe:f3:3f:4c:71:83:77:7a:4c:e8:81:
                    5f:35:76:1a:99:4a:02:81:56:2e:f6:21:42:bc:f3:
                    b3:20:0c:9d:1b:dc:9f:37:44:6d:de:42:38:e2:c7:
                    a0:54:e5:2f:3f:dc:e3:c4:78:ac:ae:27:1f:52:01:
                    11:dc:d7:f4:fe:3e:89:f9:30:9e:80:62:42:a0:68:
                    e5:c9:70:ba:78:ae:69:6f:cc:2c:8f:57:77:9f:b5:
                    7c:c5:89:dd:23:93:85:a1:ec:43:a9:41:c3:03:f0:
                    54:5e:b3:ce:56:9a:8b:66:12:7d:e7:1e:c1:cf:09:
                    64:20:12:50:36:8e:55:c1:11:28:cb:59:db:25:ca:
                    ae:eb:df:ee:e5:81:dd:12:89:80:bd:89:8d:79:9f:
                    8e:cd:ac:0f:13:5f:82:13:62:4f:ce:83:c8:1b:2b:
                    a8:2e:41:8c:3b:05:9d:d1:94:1a:84:fe:44:92:e6:
                    e6:41:42:ba:37:3a:4b:8e:b8:af:d7:e7:2c:dc:02:
                    e6:1a:b8:90:8b:cf:17:9a:0d:68:80:ef:55:f8:3c:
                    27:bb:92:77:f6:bf:74:f6:7d:b0:9a:3b:44:df:d1:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:32:D4:33:38:B8:8F:BC:8F:6D:0C:D1:D5:F7:55:17:19:BA:E6:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4403be1a-064b-3ed1-bc0c-6f31f5ac2fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:79:73:e8:45:e1:67:ec:40:f3:f2:31:06:a8:35:7f:d3:9e:
         fe:51:b8:76:18:8e:93:e6:31:f9:0a:9a:3c:1e:b2:53:84:f9:
         d2:26:b1:11:f1:ce:c5:bc:24:0f:74:c5:52:da:9f:67:a8:dc:
         c7:d6:3b:17:49:34:02:74:97:c7:d6:3e:ed:c2:7e:ef:41:1c:
         8e:7f:15:2b:4f:92:05:4f:10:2a:0b:d8:e8:5c:aa:fc:ac:7f:
         ed:89:f3:97:fd:08:63:09:9f:8d:a1:37:90:bc:e4:2d:17:11:
         5f:78:29:30:45:14:23:9a:8d:07:c3:f1:6b:a8:98:b1:ac:f5:
         ce:ff:6f:62:0b:e6:92:8b:c8:9e:5e:02:2c:92:0a:b2:5b:8e:
         6b:68:dd:08:d5:95:83:ea:98:c7:75:a4:b1:74:53:bb:07:06:
         76:3e:c5:37:e8:cb:91:52:5f:19:4d:cc:87:8d:77:d1:42:4e:
         64:80:0e:6f:08:46:7a:5b:bd:80:b0:cd:1b:d2:ad:97:d8:a7:
         65:cf:bf:4f:88:a4:31:a3:aa:8f:61:44:45:c1:5a:69:19:51:
         ec:9a:a4:c4:b8:6b:86:93:71:84:b2:ef:59:81:42:0a:e5:ba:
         e4:37:0c:d8:36:b5:a2:6a:06:81:5f:32:2d:fa:e1:87:06:ab:
         24:50:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:49:31 2025 by rpki-client