Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa
File:                     3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa (raw, json)
Hash identifier:          14p+brS15DFrLS9Hev1ziJYEYkaLjDQk1fCzBs4C0XM=
Subject key identifier:   11:3D:0A:37:F6:3A:43:77:CA:F3:A1:8B:B3:6A:5D:D5:00:37:57:1B
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F432858488DAB3A99FCD23372EDA47C00
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     63150
IP address blocks:        2602:f988:88::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:3a:99:fc:d2:33:72:ed:a4:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=2466bf67-8a89-4ec2-ab28-b8172086f651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e7:20:f4:81:e5:84:79:26:63:41:ab:18:7f:
                    12:c5:00:6d:a6:2a:f5:63:7f:f5:77:fd:9a:70:2f:
                    ce:1f:6b:70:67:56:af:16:dc:b7:b6:92:72:a3:95:
                    0c:0f:2c:d1:29:e1:8f:6e:8a:cf:b7:f2:f1:78:83:
                    be:72:ed:9f:8d:41:cb:12:1e:8e:5b:ad:f9:90:0c:
                    11:00:2d:c7:6d:3a:f8:4c:23:55:43:42:84:d0:a2:
                    8b:4c:01:a9:b7:6f:60:7f:8b:b1:2f:1b:2a:d4:b9:
                    15:b8:9a:12:0d:82:4c:48:59:fe:5a:0e:45:ee:e4:
                    e5:5a:8d:26:fe:4e:ac:97:c8:d3:06:d2:7a:d4:a4:
                    35:c6:cd:a9:e6:a2:bc:1f:4c:df:ab:27:00:9e:5c:
                    96:5f:62:ed:21:f2:4b:08:95:85:37:37:4c:23:ab:
                    40:f9:23:1c:25:54:16:2d:98:20:ad:97:46:ae:b1:
                    07:79:ce:fb:17:60:fc:f5:66:e5:19:f0:5c:6a:c6:
                    c7:da:bf:f9:2c:ea:ff:ef:55:72:26:03:67:b5:6a:
                    76:a5:b0:a6:f7:9e:1d:46:02:d7:c9:47:cb:31:4a:
                    5d:50:8e:20:b9:b6:af:d6:80:7e:4e:21:c5:40:35:
                    4a:e8:d1:b0:4f:35:7d:1c:0d:b5:4f:97:e9:f9:51:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3D:0A:37:F6:3A:43:77:CA:F3:A1:8B:B3:6A:5D:D5:00:37:57:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:88::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:83:b3:81:5b:f9:3f:21:d3:6f:e2:4d:51:73:27:83:57:13:
         89:b0:a7:8b:c4:5e:cd:c6:14:68:52:5d:c7:5e:51:12:03:4a:
         ee:a0:ff:c6:76:25:f2:f3:41:ad:d0:97:9d:fa:4d:f8:35:26:
         46:5c:ce:96:69:e4:ed:5a:ee:a0:7d:d2:97:41:bc:9d:91:e9:
         89:3b:ac:f2:05:fb:62:eb:a1:ac:4b:e5:6a:70:da:50:62:1d:
         ae:93:55:43:d4:bf:d8:44:e7:3b:a4:71:c7:37:57:44:0a:9d:
         48:23:71:a1:30:87:de:27:5c:8e:bb:5b:37:a2:f4:31:74:27:
         af:04:8f:ab:da:56:82:0b:ca:52:5e:ed:38:8f:f9:f6:fc:4c:
         9c:e2:fe:0b:d2:4f:fb:78:76:b1:70:3e:1a:eb:19:ab:7c:4c:
         79:e5:ac:28:bc:c1:fa:4e:5f:d8:8d:51:dd:f2:92:b3:cc:c7:
         d1:54:5f:d2:84:07:b9:f4:00:55:de:cc:75:55:6f:c8:64:e1:
         c3:4b:50:44:ff:9f:2a:6d:77:8a:89:6c:2e:33:dc:f5:e9:36:
         64:b1:a5:3b:d6:10:41:58:cd:6d:e6:14:57:fa:46:14:0f:ab:
         8d:b9:c8:07:e3:93:b4:97:b6:ae:8b:77:5f:2b:f2:92:69:10:
         0e:dd:a2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:31 2025 by rpki-client