Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/9908751f-7e7c-396a-be02-c55eeab353f1.roa
File:                     9908751f-7e7c-396a-be02-c55eeab353f1.roa (raw, json)
Hash identifier:          pS/xVavNGxl4KnTWXbXxh6tuhpfQjxQS4Locf0wi9p4=
Subject key identifier:   E4:81:B9:F5:50:FF:D9:57:CB:FF:09:5D:27:93:6E:D6:BB:52:A2:BD
Certificate issuer:       /CN=adbe894e-fc78-4889-85f3-6253e78715e5
Certificate serial:       010D0C9F43285848E2D114991F8884026BFDE940
Authority key identifier: B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/9908751f-7e7c-396a-be02-c55eeab353f1.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     62744
IP address blocks:        2620:7:6000::/48 maxlen: 48
                          2620:7:6001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:14:99:1f:88:84:02:6b:fd:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbe894e-fc78-4889-85f3-6253e78715e5
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=fc941faf-a126-4308-9921-e8b6d78a8747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:93:9f:81:27:cd:9e:d8:4e:d0:f6:ca:2d:
                    a5:b0:28:06:68:e6:c1:4c:87:18:4a:14:83:a4:6a:
                    ed:47:15:5b:14:ff:70:ef:20:3e:03:13:61:7d:63:
                    5e:80:84:55:12:0c:d4:87:56:da:9c:6e:11:12:33:
                    ad:27:fa:9f:8d:ff:22:26:30:23:e1:01:a9:83:c2:
                    c0:5c:e2:d5:29:01:8d:70:4e:5d:f1:33:2c:a2:57:
                    b0:30:da:97:59:29:a9:9b:14:10:86:ea:95:69:80:
                    6e:a5:b2:c4:fc:a3:1b:97:69:de:87:7a:4d:73:61:
                    0f:ae:0c:e0:1d:be:fe:0f:e3:50:12:bf:14:c7:6d:
                    98:50:d1:11:4b:26:c7:b1:3b:8d:56:12:36:df:c4:
                    4a:4e:0f:fb:94:97:13:ff:a2:bb:cd:da:58:5f:96:
                    76:71:56:6a:0b:db:25:6b:96:4d:4e:22:93:6e:84:
                    d2:09:9c:ff:1e:c1:5b:7c:b7:42:74:e6:ee:00:ef:
                    e8:91:ff:6c:f8:45:6b:15:56:5b:04:82:6f:63:1e:
                    2c:6f:03:a1:d2:85:8a:70:81:8e:13:cf:b6:62:8a:
                    01:ba:18:06:a8:e5:6c:d6:fa:dc:ef:1a:e3:bb:72:
                    ed:7d:7f:ea:c1:e5:cb:0c:e3:52:3d:23:b0:0a:a6:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:81:B9:F5:50:FF:D9:57:CB:FF:09:5D:27:93:6E:D6:BB:52:A2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/9908751f-7e7c-396a-be02-c55eeab353f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7:6000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:55:0c:cd:11:e5:f1:dd:cc:45:92:48:62:ee:08:c7:b9:
         7d:90:ad:f7:86:74:38:63:0c:c0:90:04:af:fb:34:22:51:bb:
         1e:53:4f:95:2e:be:76:04:94:3d:4e:8f:05:4e:40:67:2b:13:
         97:71:f8:09:85:9f:c0:32:45:1e:e1:d4:a4:bd:00:70:e1:db:
         dd:95:90:7c:5c:24:26:d6:2d:a5:44:28:50:08:e1:1a:40:d5:
         f7:43:b5:7e:a2:52:c0:dd:6e:09:f1:8b:0b:98:7e:ec:b0:ed:
         49:6e:20:49:1c:7a:89:e4:0c:32:34:5f:18:14:c5:27:d3:b9:
         fd:2a:dc:f8:7b:06:dd:56:76:1a:de:24:21:17:40:63:0f:bb:
         9e:85:68:8d:be:4a:96:64:97:cf:a0:e0:a3:4b:61:57:10:3b:
         e1:32:b0:53:dc:2a:0a:32:48:c9:98:6c:90:a8:b7:2c:29:7a:
         51:65:e7:0a:c0:fc:d4:b7:f6:18:9a:e9:d4:05:3f:51:12:7e:
         06:8c:56:27:d3:13:2f:43:15:08:5f:17:a5:13:4b:3a:a6:da:
         48:c6:f5:64:f4:d2:87:6c:de:fb:bc:12:0c:5f:97:bb:b7:36:
         fe:44:59:df:f8:33:a9:cc:25:8d:54:53:95:73:60:63:00:88:
         c4:b6:b1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:24 2025 by rpki-client