Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58f939fa-c440-38c5-a7bf-1c13dec6ba19.roa
File:                     58f939fa-c440-38c5-a7bf-1c13dec6ba19.roa (raw, json)
Hash identifier:          MWLc8rQqt9Js98OqkwPUq9jQIIXuJNY4WWTes3aXzTU=
Subject key identifier:   1D:EB:B4:68:BE:41:5F:24:06:43:AB:FA:0B:2E:D6:E9:3A:E4:34:7E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848977088C116AE4324AE2B0200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58f939fa-c440-38c5-a7bf-1c13dec6ba19.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        2606:4700:2ffe::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:88:c1:16:ae:43:24:ae:2b:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=b0a8f0e5-4a3c-4268-98cb-ac4a37186e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:f9:15:55:1f:be:cf:0d:50:78:4b:4c:1d:
                    b6:d8:ae:74:af:58:fd:c7:e8:5e:00:6a:c1:80:65:
                    cb:7e:21:a2:05:a5:b7:8c:c8:1d:1e:6c:7e:68:b4:
                    b6:72:c7:81:ed:16:fd:82:76:92:27:14:b5:c8:ac:
                    73:4c:57:c1:0a:24:f0:80:db:c6:d0:a7:1a:9d:b3:
                    3f:c2:ee:6a:37:39:fe:3f:f4:8d:b2:16:9d:e5:ec:
                    62:75:e0:f8:a8:c3:c1:24:93:43:a3:02:6e:95:c9:
                    66:02:d0:0a:70:a1:d3:0d:da:f6:66:70:2a:f4:58:
                    ec:ae:2a:44:36:fb:48:10:16:e1:f0:b9:bf:4f:c8:
                    95:30:b1:f7:8f:7d:6d:87:2a:cc:60:9e:88:89:6e:
                    0d:83:76:9e:4d:df:0a:60:cd:c6:e7:95:37:1b:82:
                    e1:6c:4d:c7:cc:c1:10:31:a1:01:4f:98:14:87:07:
                    37:4f:61:7c:6d:48:36:f1:78:ee:40:79:b3:18:9e:
                    78:d9:aa:3d:e8:e7:40:30:59:20:ae:12:97:93:c2:
                    bb:55:9b:d8:eb:e5:26:2f:cf:fc:9f:8a:3e:66:d6:
                    19:01:c2:c9:20:2e:58:e3:eb:89:82:4e:23:bc:a0:
                    21:1a:54:f2:82:31:bd:b5:2d:7a:39:ad:fe:6f:bc:
                    9b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EB:B4:68:BE:41:5F:24:06:43:AB:FA:0B:2E:D6:E9:3A:E4:34:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58f939fa-c440-38c5-a7bf-1c13dec6ba19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:2ffe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f4:2b:87:a5:a3:7e:74:f4:b6:a5:4b:ee:d5:2b:2e:22:a2:
         bc:41:59:bf:c0:d4:2e:12:1a:f3:c6:9b:8f:3c:75:23:75:3e:
         5f:15:44:59:52:9a:17:93:49:ce:ba:1a:b8:c4:ca:99:7d:6e:
         c7:75:06:c1:6f:2a:b2:1b:37:bf:4b:55:fe:5a:f9:22:e2:6e:
         48:f2:eb:7e:a7:21:73:31:4e:ee:c2:55:aa:f3:94:16:be:53:
         04:fb:b2:9a:6d:79:0a:82:e2:f9:dd:7b:25:bf:8d:95:81:67:
         89:2e:76:5a:82:f0:fd:8f:db:a6:95:05:fd:cf:ed:c9:7f:e8:
         fd:84:27:16:f2:fe:5b:56:cf:8a:36:84:f6:c6:cc:9d:76:e9:
         fd:a1:6b:ee:a6:d0:bf:3f:db:64:5d:1b:d4:b4:30:37:01:84:
         42:88:48:46:60:57:1f:7b:e4:6c:98:47:82:42:30:46:9a:d3:
         a5:2a:7c:e8:c9:89:e4:99:ad:0f:1b:18:5d:31:71:98:d1:c3:
         af:a3:dc:2a:a7:a3:39:bf:39:e1:40:f1:60:c4:e0:a0:dd:2b:
         45:36:a4:f9:ff:91:98:51:69:98:ac:48:a9:f0:79:4d:e9:da:
         3c:df:8f:60:09:35:c6:04:7e:38:ea:d8:05:3c:42:fb:b2:5d:
         3e:31:63:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:43:57 2025 by rpki-client