Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cb2488e8-3a71-39cf-a957-c90cfee1b82e.roa
File:                     cb2488e8-3a71-39cf-a957-c90cfee1b82e.roa (raw, json)
Hash identifier:          SxgPFIp5L91N4yaSFWYTsigDYEAQGDWv4eAQbknOZe0=
Subject key identifier:   C1:89:5A:03:A0:06:07:93:C0:B5:C0:4C:23:F8:52:99:A7:F8:14:88
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBF055580771426BD89A00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cb2488e8-3a71-39cf-a957-c90cfee1b82e.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:5750::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:f0:55:58:07:71:42:6b:d8:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=cee02e7d-3e8d-4b63-b126-fa3771c3e297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:e7:d1:22:cb:0f:31:2f:7a:5a:92:c3:35:
                    d3:31:bb:f4:f1:f9:14:fe:f2:f3:28:b5:fc:5e:95:
                    04:dc:87:ed:84:92:3f:47:bd:80:07:26:33:b5:d2:
                    90:bc:db:49:ed:27:6a:e8:b4:dc:f9:3e:87:75:9c:
                    4a:f9:f8:3e:93:22:9f:37:8c:c1:06:a9:8d:37:32:
                    77:0a:25:3e:a3:db:38:ef:6a:5f:94:2b:b9:84:10:
                    cb:86:2c:99:87:4d:01:b6:3f:41:2e:ce:84:04:90:
                    b4:3f:7f:29:c2:12:8d:cc:ea:d7:28:1f:ab:1d:15:
                    de:f4:bb:54:8f:e3:b7:4e:f9:9c:54:d3:80:1f:e1:
                    2b:fb:e3:b6:94:c2:d8:83:b8:83:fa:a5:08:f4:88:
                    98:f3:b2:49:42:fe:c8:d4:72:c1:89:d2:18:d8:86:
                    05:1e:a5:ac:0c:64:45:4d:93:f5:f0:9e:14:3f:16:
                    e4:8d:96:ea:fc:4f:96:50:c5:1b:c4:0e:07:3e:04:
                    73:cd:5e:b6:06:90:c8:5f:02:ed:3a:7e:9b:d3:4b:
                    44:30:32:68:b7:3e:d1:27:55:e1:7a:75:7b:2b:34:
                    af:23:f3:d5:76:3f:a1:6c:e1:2e:25:8d:30:63:e0:
                    64:99:1b:b3:fa:4b:79:0b:f8:a3:b3:f6:db:78:8e:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:89:5A:03:A0:06:07:93:C0:B5:C0:4C:23:F8:52:99:A7:F8:14:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cb2488e8-3a71-39cf-a957-c90cfee1b82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5750::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:0b:57:68:3a:0c:3e:42:84:74:4a:54:94:fe:a1:a7:30:b3:
         fa:a6:7d:27:ce:63:3c:82:ef:e2:08:0f:9a:b2:2e:9c:d1:4e:
         3a:ba:13:d3:e4:05:73:e2:14:55:64:a9:13:44:8d:8f:91:ec:
         71:8e:81:6e:8b:a3:9e:0e:29:05:56:14:cc:c7:d2:1f:7b:0f:
         e2:bc:e1:6f:5f:cd:0d:0b:47:f7:a5:8a:0b:3c:94:42:d7:95:
         74:89:e3:f6:71:6c:a5:72:95:85:02:1a:04:fc:52:41:9b:27:
         42:35:cb:42:ed:e4:9c:20:32:2d:f3:b4:7d:3f:3b:68:f3:06:
         d4:2f:2d:ad:99:b2:ea:6f:f2:32:ea:39:ea:94:fb:2b:8f:aa:
         65:42:f4:ed:61:cb:93:f9:6e:9f:e0:cd:1f:8c:6b:64:18:8a:
         99:d4:53:d8:d1:91:94:07:e8:07:49:56:cd:24:af:85:6c:a1:
         41:58:8f:86:7c:2c:3c:5d:a9:fe:16:7c:c8:e9:de:3e:61:aa:
         7c:af:0d:79:b7:f8:46:a0:5a:1f:1a:dc:72:27:34:1e:13:f0:
         4f:52:2a:53:8b:e7:2e:77:e4:25:b5:89:7b:8b:62:6f:7b:c7:
         79:c3:01:66:50:5b:af:7b:ce:38:6b:d1:d7:22:e5:38:b9:09:
         08:a5:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----