Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b66b3500-9c6b-307f-89ee-ca5eb9ef69ec.roa
File:                     b66b3500-9c6b-307f-89ee-ca5eb9ef69ec.roa (raw, json)
Hash identifier:          N3qvRdK9CvP9XnJkLpOKoa7+JdQP2iZR6/1w0iEB6Co=
Subject key identifier:   97:DA:99:99:BA:9E:AF:E0:82:60:D9:21:8E:B7:9A:E8:CB:4E:8D:7D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940397096171B9A032DA0B180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b66b3500-9c6b-307f-89ee-ca5eb9ef69ec.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4730::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:70:96:17:1b:9a:03:2d:a0:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=7cf34349-9225-4eae-acc7-b1e256a16cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f2:d1:a4:3e:83:bc:c5:02:0e:ac:0b:c2:4c:
                    6f:46:d7:8d:86:5b:da:76:17:15:0d:78:8b:b4:11:
                    5e:f2:64:0b:ef:50:ef:7b:fc:62:59:b8:f1:e2:67:
                    ef:b8:76:b2:13:ba:9c:04:c6:a0:d5:d6:c8:6b:c3:
                    09:25:8d:5a:f7:96:20:6d:9d:eb:4e:7f:7f:d6:a3:
                    57:70:02:07:ea:93:01:36:78:8e:cb:fa:5f:18:59:
                    9e:50:f8:87:45:cf:aa:ec:a5:ee:b7:2b:3c:69:40:
                    7b:fb:23:6e:58:d5:4c:20:59:6e:2d:60:81:9b:b0:
                    b2:f9:1e:c3:eb:94:3e:db:25:ae:ba:cb:c7:3b:83:
                    32:4c:54:f1:a7:a4:fd:85:5b:cc:69:fd:9c:cc:ef:
                    8a:07:9b:61:c6:96:32:85:cd:c6:72:ce:ad:9c:e8:
                    fe:4f:8b:80:6b:8c:7f:b3:4b:19:68:93:b4:92:09:
                    81:d2:72:08:40:10:8e:7a:a6:86:8c:6c:bd:94:49:
                    cf:54:5a:b4:61:63:ad:46:27:76:9e:7c:5f:00:8b:
                    89:3e:90:66:db:cc:46:6a:8d:ee:c7:2d:c9:ec:3a:
                    47:84:e1:b1:43:9d:0e:b2:09:6c:e8:71:85:49:97:
                    4e:1a:8f:3b:7a:26:89:23:62:8f:39:ff:ab:b6:0e:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DA:99:99:BA:9E:AF:E0:82:60:D9:21:8E:B7:9A:E8:CB:4E:8D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b66b3500-9c6b-307f-89ee-ca5eb9ef69ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4730::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:75:ef:3d:61:d9:f1:95:ea:85:09:1a:82:36:5f:93:dd:
         74:17:b7:23:44:9e:c1:04:09:ab:9d:8e:00:93:0e:1f:65:db:
         a4:d3:07:e1:eb:ea:d2:a5:38:37:1b:d6:ba:d7:26:8e:46:e2:
         ad:51:38:f9:72:85:1a:9d:7b:73:b9:16:b5:ce:26:46:e5:96:
         05:e9:2e:e6:a0:56:41:57:ea:61:21:c4:9c:32:97:cc:60:30:
         c0:ba:1a:c8:1f:6a:55:07:b9:cc:f6:0a:ef:25:41:e5:99:87:
         57:48:51:8d:a2:c5:89:61:47:b9:c5:62:49:43:1c:87:5e:6e:
         b9:d1:5b:4c:01:68:c0:03:92:1d:66:d3:15:96:14:ba:61:26:
         a3:b2:5f:b6:1e:90:04:72:7a:40:35:35:c9:ce:8e:6c:d3:23:
         02:ca:fc:8f:7e:db:7d:7e:33:6e:5b:c8:3f:4d:a3:37:dd:29:
         a9:6d:ac:1f:89:47:d4:68:dc:82:d2:ae:db:cc:0e:20:04:c8:
         ca:bd:d9:21:80:99:8f:f0:9e:82:20:62:ca:44:b1:e0:7c:f2:
         ea:16:e4:a9:34:69:55:30:7e:ba:ef:ba:ce:be:00:57:28:a9:
         33:f7:df:42:4c:fb:54:65:59:49:de:2f:3b:4e:f0:89:18:b4:
         7e:13:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:42:45 2025 by rpki-client