Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/3054e161-067e-3d75-9c80-741ae64f0f71.roa
File:                     3054e161-067e-3d75-9c80-741ae64f0f71.roa (raw, json)
Hash identifier:          nuIcHx15x8EbhbucpDFXJBHhErbBQ46YQQfEpzhKWgU=
Subject key identifier:   74:F1:6E:B5:C3:BE:49:BA:DE:42:8B:93:90:39:9D:CF:9A:D7:3A:28
Certificate issuer:       /CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec
Certificate serial:       010D0C9F43285848E9CBECBFDE3A71F683139A42
Authority key identifier: 12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/3054e161-067e-3d75-9c80-741ae64f0f71.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     46641
IP address blocks:        2620:13:6000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:ec:bf:de:3a:71:f6:83:13:9a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=ff723c7a-4d7d-48a8-99a0-20b6a3551cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:14:91:76:a4:c7:a6:c7:3d:8c:df:a5:53:
                    12:7b:b5:9f:c0:36:12:63:99:e8:a6:85:f2:5b:bd:
                    19:10:38:f4:6c:fc:8e:0f:5a:ef:03:69:dc:04:92:
                    96:15:a5:39:70:75:fd:7a:75:b9:2c:8b:fe:01:7d:
                    8a:47:5a:51:b1:5e:de:1a:f4:4a:a5:58:46:47:ab:
                    f9:d3:49:ff:3b:67:0c:59:e0:7d:b5:0d:04:5a:db:
                    22:d9:93:57:ab:e6:fd:09:4e:c6:f5:5e:f5:b3:26:
                    d8:55:a4:7d:4b:0a:14:73:26:88:fd:e6:16:35:fc:
                    77:4b:45:38:c6:7e:ad:a6:76:fc:e9:39:e4:78:f8:
                    44:d2:87:61:e7:3f:3d:0d:40:09:16:d1:00:59:03:
                    8d:f2:d5:6d:88:1f:39:55:91:60:93:20:a7:a9:ab:
                    f2:17:e4:89:0b:7b:e5:2a:ae:40:2d:ed:ad:c4:2c:
                    b6:f7:d1:8c:57:72:cb:41:fd:3c:3e:7b:ca:36:41:
                    70:94:bf:92:fa:13:fb:68:fa:f7:4f:9f:ad:fe:ff:
                    17:a0:e9:f2:14:7f:24:f9:88:ae:65:35:74:11:53:
                    27:fa:ba:91:d1:ce:0a:13:75:21:03:b0:29:0a:68:
                    32:5d:0b:ba:a3:5b:94:56:c7:83:19:ee:98:8c:9f:
                    7c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F1:6E:B5:C3:BE:49:BA:DE:42:8B:93:90:39:9D:CF:9A:D7:3A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/3054e161-067e-3d75-9c80-741ae64f0f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl

            X509v3 Authority Key Identifier:
                keyid:12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b8:e9:95:d4:a1:22:6e:cc:5c:57:ef:bb:fa:43:0a:86:bd:
         38:16:f5:a1:f9:ca:3c:35:3e:7f:61:23:df:bb:dc:0a:26:38:
         72:7f:40:fc:a4:b4:ed:ba:dc:8f:42:0e:b6:23:1a:63:cc:50:
         54:94:86:85:b5:2f:a8:10:12:60:02:fd:05:9e:64:60:b4:c9:
         1c:c3:14:1e:a2:84:29:07:17:1f:cd:0d:8c:cf:32:15:fa:fb:
         66:27:72:c4:79:a4:bd:7b:23:4a:a7:88:7f:5b:cf:46:65:80:
         25:95:4a:fe:1a:eb:42:d7:d7:25:ff:33:8d:47:58:38:30:1e:
         61:ea:93:03:26:ef:1c:da:f4:7b:a3:88:e4:40:2f:7b:10:6f:
         51:d3:43:49:7d:ad:e4:68:25:a3:9c:c2:da:5c:d4:d6:29:96:
         83:2b:38:c4:f5:63:6a:d1:95:fd:67:cd:58:9e:58:dc:39:b5:
         6e:f8:b3:97:33:78:db:0a:c8:ac:27:9c:7d:95:72:3b:77:86:
         29:ea:42:a5:2a:20:d3:28:23:f7:7e:88:03:b9:4c:ef:4d:fa:
         bd:54:51:b7:ef:fe:63:60:b2:8e:bd:08:1a:f7:bd:e2:5c:8e:
         00:dd:2a:93:a1:d0:ea:22:7f:5f:09:4c:19:32:e5:60:8c:94:
         2b:f8:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:58 2025 by rpki-client