Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa
File:                     d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa (raw, json)
Hash identifier:          0bxOCs9IqwSj8K7Cg40IgG4/ZTUXYebPpz8sKTC5Qsg=
Subject key identifier:   08:92:B7:10:EB:80:F6:0C:2D:50:20:76:5F:C9:F2:15:A8:69:D9:4A
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858491941880A3534958184B0F580
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2001:418:1401:300::/56 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:88:0a:35:34:95:81:84:b0:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=200cd1b4-7442-44cc-a32f-1962776d6f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:0b:04:b6:83:37:bb:02:f4:16:4c:0f:62:
                    96:37:ba:86:b9:ce:9e:5e:86:93:fa:df:a8:ab:04:
                    b4:90:de:58:b7:bf:f8:ab:eb:32:ee:d8:97:fb:36:
                    40:40:6c:17:d4:a3:03:44:35:3f:2d:7f:c1:83:8e:
                    81:c6:81:bc:7c:08:6b:39:fb:4f:37:61:a2:42:30:
                    a9:66:df:48:96:21:a3:53:47:d8:b2:82:2a:4b:84:
                    ed:e5:ce:ec:d8:58:91:bb:ed:19:aa:ca:84:f8:55:
                    3f:f1:16:a3:ad:3c:4b:69:5e:b3:37:1a:54:f9:50:
                    3a:9f:93:b7:a9:07:08:ac:7a:c4:ca:6e:66:4d:99:
                    a3:9e:e2:f2:d3:de:f0:87:65:3e:59:f5:66:7a:04:
                    dd:60:9a:02:b7:e8:5a:f9:1e:7b:7a:c6:5f:9a:68:
                    33:a6:a2:22:0c:7a:9e:84:29:83:95:c0:74:d1:a4:
                    89:4a:31:30:74:0c:07:32:90:29:d0:46:3e:b5:c0:
                    19:ce:7b:da:96:b2:8c:e5:e1:c0:89:8f:33:46:fe:
                    d7:ec:89:e0:59:8d:0a:2d:fb:60:e6:c8:1e:12:45:
                    fa:02:78:3c:b6:d6:94:cb:cd:db:4e:24:8d:19:7c:
                    92:b5:5b:a2:dc:58:6c:8b:dc:1a:5e:43:a9:3f:9a:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:92:B7:10:EB:80:F6:0C:2D:50:20:76:5F:C9:F2:15:A8:69:D9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:300::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:6b:06:d7:09:00:ce:51:cd:af:43:e0:25:66:11:57:4a:52:
         de:47:d4:09:83:29:1c:7d:a3:49:18:fe:fc:1c:7b:2d:ab:59:
         25:ec:be:8c:bc:ca:6d:95:55:08:93:b3:0d:09:91:1d:7f:bc:
         a9:eb:db:b7:e0:d2:15:e2:fb:90:86:f6:12:8f:e7:3a:9f:2b:
         fe:88:ef:c6:d7:a6:24:19:22:85:57:78:30:eb:2b:b5:f7:df:
         2e:1b:63:43:a2:b9:35:4a:22:6b:03:99:32:cc:1a:9c:59:17:
         ae:56:51:84:8e:9a:87:9a:df:41:5c:f7:dd:4d:6d:f8:f6:69:
         13:16:b7:83:ea:f7:85:5b:68:89:90:09:2b:87:fb:7b:b7:65:
         76:d9:e2:6c:cb:7d:79:ff:61:d6:7d:7b:94:2e:2a:37:31:9e:
         0f:a4:23:77:20:36:3a:57:48:81:e0:27:d1:78:1f:39:04:0e:
         c8:e3:63:78:9d:c2:0c:54:43:8e:ac:35:65:ca:98:d8:4d:40:
         9b:2c:3d:42:44:00:fa:0f:e1:91:fd:9b:72:60:3c:f0:7b:19:
         c9:4f:07:59:e5:91:43:4b:a1:db:32:b7:e9:b8:0e:b9:bc:bb:
         d7:ec:a1:f3:25:d0:20:72:90:79:be:46:f1:c3:dd:87:61:c7:
         42:c0:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:21:31 2025 by rpki-client