Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe31aecd-d2c7-3f5c-84a8-930c3f19f2e6.roa
File:                     fe31aecd-d2c7-3f5c-84a8-930c3f19f2e6.roa (raw, json)
Hash identifier:          EZjaqnULm4UqlcHOYckb+O6+KTGqkj8FZyveFlfmlBQ=
Subject key identifier:   62:C2:B5:3E:A7:67:34:80:B6:60:C1:E7:85:BD:01:D6:1A:C4:0E:A5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584917DC1D466CD2F0126AC62C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe31aecd-d2c7-3f5c-84a8-930c3f19f2e6.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        2606:4700:3012::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:1d:46:6c:d2:f0:12:6a:c6:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=ff1dcc2f-754e-4a1f-8123-892f3a4b6775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:7e:b5:18:95:ac:22:ee:2f:59:ab:48:13:
                    dd:73:48:88:31:cc:46:37:eb:3c:41:e4:f6:24:34:
                    a3:59:b1:20:d5:b6:5c:e8:ce:01:ae:cb:ab:45:a3:
                    90:64:ae:6e:74:47:eb:39:1e:a9:fa:cc:f4:1e:60:
                    2b:c2:be:9f:9d:a4:3c:7b:38:0c:75:90:a7:a5:05:
                    56:21:4e:63:f8:8a:11:e8:dc:ac:fb:32:59:4a:8b:
                    9d:c9:3d:ae:37:d3:db:64:bc:62:43:10:c5:84:a2:
                    f7:70:93:3d:cb:f8:67:3b:76:92:fd:e6:1e:0d:3b:
                    32:9a:13:04:66:d9:2b:a8:ef:90:80:2c:54:1f:6a:
                    be:f0:e5:29:ff:d0:01:a8:98:8a:69:45:77:48:2a:
                    a3:ef:c6:b5:5f:68:f3:18:59:cd:5b:c8:a4:8b:84:
                    da:96:14:51:64:94:e8:c4:30:cb:50:82:0a:b1:08:
                    52:8a:65:ce:22:c6:ab:ab:e3:5a:bd:4a:ea:ec:14:
                    1c:6f:68:2d:31:2a:77:e2:2b:d5:ae:5d:81:1d:0a:
                    e1:69:0f:72:ce:e1:12:39:f8:64:75:75:81:13:8a:
                    af:3c:88:d9:64:bf:08:ff:68:03:bc:8d:02:c8:59:
                    5b:b7:d0:b2:b8:f1:59:75:59:e9:38:12:1b:c2:d4:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C2:B5:3E:A7:67:34:80:B6:60:C1:E7:85:BD:01:D6:1A:C4:0E:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe31aecd-d2c7-3f5c-84a8-930c3f19f2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a2:cf:e1:b4:cf:4a:f0:83:14:3f:c4:8d:50:df:a7:29:67:
         a1:cf:7f:bf:98:bc:8c:41:73:49:96:5a:23:af:15:3d:83:03:
         f1:94:60:73:3f:66:d5:6b:ce:53:cb:b8:f2:b2:bc:89:9c:d7:
         dd:d4:99:3c:bc:8b:df:8a:4d:88:69:1c:d4:33:ef:07:86:2c:
         f9:e4:2f:95:6a:10:82:c1:47:22:cf:12:a0:d0:dd:b2:d1:05:
         de:35:77:0b:bd:4f:8f:b9:e7:6a:87:5d:64:4a:9e:73:31:35:
         6a:03:65:0a:ff:14:cc:ac:86:0d:f2:8b:ef:16:2b:03:cf:57:
         11:24:9c:40:32:bd:e3:c8:39:9c:0b:7b:33:a2:a9:24:70:f2:
         cd:1a:64:b4:5c:9a:b0:62:0e:64:1a:ae:0c:9f:4c:38:47:77:
         f5:66:c5:a6:9f:a3:6a:8b:c2:61:31:6b:53:7f:3b:7f:b6:02:
         cb:9e:cc:fb:fa:62:f5:ae:55:c2:d6:ee:22:23:6e:47:0c:bb:
         8c:71:69:38:46:78:2e:89:99:d9:a1:01:cc:6f:6b:60:8f:93:
         f5:5a:6c:a1:fa:23:eb:3a:c6:d0:18:af:9c:a8:28:4d:23:9b:
         4b:87:c9:84:3c:58:0e:d5:44:4c:7c:23:09:4a:2f:d1:bb:c4:
         1e:c4:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:35 2025 by rpki-client