Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3404f2a3-3c02-3254-98ed-ee78a25d4f34.roa
File:                     3404f2a3-3c02-3254-98ed-ee78a25d4f34.roa (raw, json)
Hash identifier:          GxbjNJlpSYt6eqPfvdOaedS6S+e0KUTSeUS9AkWNJa0=
Subject key identifier:   0E:85:CF:81:6A:55:E6:23:5A:88:BB:CB:AD:4B:20:18:04:23:23:82
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F43285848E372E39588442FB894457180
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3404f2a3-3c02-3254-98ed-ee78a25d4f34.roa
Signing time:             Sat 15 Feb 2025 07:26:52 +0000
ROA not before:           Sat 15 Feb 2025 07:26:52 +0000
ROA not after:            Fri 16 May 2025 06:26:52 +0000
asID:                     63150
IP address blocks:        2602:f988:92::/48 maxlen: 48
                          2602:f988:93::/48 maxlen: 48
                          2602:f988:94::/48 maxlen: 48
                          2602:f988:95::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e3:72:e3:95:88:44:2f:b8:94:45:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Feb 15 07:26:52 2025 GMT
            Not After : May 16 06:26:52 2025 GMT
        Subject: CN=937bd75c-6138-4abf-9bbf-c7ec8283680f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:ac:f8:95:de:47:8d:6d:20:df:ae:25:27:
                    d6:9c:23:e7:02:7f:09:a5:02:22:80:b2:47:d8:5d:
                    01:bf:c0:73:24:7d:d4:6d:f2:d2:75:72:dc:91:58:
                    0f:d4:0b:29:04:cb:2b:8e:17:10:21:a0:17:2c:59:
                    4a:e2:01:75:c9:6b:ee:ce:6e:ca:55:4b:f0:c3:f7:
                    f8:4b:db:32:87:bd:a1:ab:23:53:e1:9c:ce:2f:0b:
                    27:20:76:3e:69:a3:b3:44:36:55:b4:f4:d0:a3:81:
                    9b:13:60:83:04:f5:bc:4c:79:ce:88:8c:7d:cf:d4:
                    b2:48:ae:35:f6:8e:44:9d:4c:b8:8f:b3:c0:b7:18:
                    2b:59:50:63:f7:0d:37:56:fe:dd:3b:e9:24:76:16:
                    88:d6:f4:c5:46:52:bf:25:c0:c7:81:36:cc:ca:39:
                    aa:41:6d:ae:ee:32:e5:d5:1c:ad:44:dd:46:23:54:
                    17:b9:50:f9:4a:fe:24:15:62:29:53:4c:08:a1:7c:
                    a3:d5:fe:fc:51:f2:cc:f7:77:2f:80:44:67:c7:82:
                    f9:dc:d6:34:ba:c4:be:80:a8:07:b1:87:31:72:9f:
                    5f:0b:5e:f5:3d:c4:96:98:71:16:14:b1:bb:b3:83:
                    8f:96:a7:e8:f4:39:e8:ec:39:bf:0c:cc:33:52:a4:
                    51:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:85:CF:81:6A:55:E6:23:5A:88:BB:CB:AD:4B:20:18:04:23:23:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3404f2a3-3c02-3254-98ed-ee78a25d4f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:92::-2602:f988:95:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:28:e9:e9:80:0e:0a:d7:3e:35:d5:22:f9:52:81:be:14:46:
         6c:22:99:47:d3:d9:bc:45:e0:c2:1f:d1:7a:f1:b8:83:1c:df:
         d0:28:b0:94:78:69:d5:8f:84:da:34:a5:0e:87:00:34:6f:96:
         5c:4d:26:e6:62:3d:16:19:f5:ba:8a:fc:f5:81:d2:24:73:a5:
         7f:a6:bb:01:d6:78:fb:82:23:9a:1e:61:fc:d5:b8:88:fc:97:
         e7:ea:05:c8:e9:c3:24:55:ca:aa:d1:8b:ef:f3:ff:15:63:d9:
         e3:04:21:45:58:c1:ad:14:df:cd:12:7f:f7:41:17:a2:78:6b:
         63:f7:f0:7e:6d:c5:77:fc:2b:9b:a1:5f:89:cf:10:b8:69:63:
         d9:ea:92:41:4e:85:77:a3:ec:5b:da:c1:55:58:91:dd:b8:41:
         b5:7c:75:fe:e6:ba:cf:71:87:0d:fb:51:f4:35:12:f6:0f:05:
         a7:9c:98:c5:70:33:db:a2:a7:15:e3:77:00:ec:a9:e0:f1:09:
         0e:87:bb:f9:4a:95:0f:43:81:a9:67:02:85:31:26:1e:37:c0:
         25:8a:52:26:e0:72:4a:cc:a8:a3:03:f2:0d:b6:b8:bb:e6:0f:
         29:37:27:41:fd:98:0b:9b:97:9a:2c:7f:f3:47:a8:5c:6a:49:
         bb:ef:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:37 2025 by rpki-client