Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9793dfa-7b46-358f-9882-a120c274c828.roa
File:                     d9793dfa-7b46-358f-9882-a120c274c828.roa (raw, json)
Hash identifier:          kG9FplVMaIs4O38cLX7Zli+6B6up/P0qYLLjqkqrajg=
Subject key identifier:   2B:79:E5:4B:B8:03:3D:D7:C1:95:CC:03:2C:EE:61:D7:33:2C:C7:26
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849403951A00615F03AFD475640
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9793dfa-7b46-358f-9882-a120c274c828.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:5e50::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:51:a0:06:15:f0:3a:fd:47:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=3cbd225c-1b4a-46c1-b8d7-7d7eb2742e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:e1:6f:c7:3e:bc:88:46:b1:5e:81:e6:51:
                    7d:e6:87:b5:e2:b9:a3:93:7a:61:e4:a8:03:9e:f9:
                    f8:c1:9d:8b:1d:95:e1:58:16:9d:87:34:8c:fc:08:
                    b2:43:29:48:12:d4:bc:64:40:15:b0:1f:1c:b5:15:
                    76:75:78:27:3b:f7:b7:ad:e7:10:47:3f:f8:4a:41:
                    a9:82:1f:a4:66:5d:06:c8:fa:d0:24:37:30:56:de:
                    66:1d:e6:e3:fb:32:8a:10:6a:71:35:96:7e:38:fd:
                    66:b3:4d:fa:3e:87:fc:39:11:f0:94:e6:03:22:51:
                    96:90:3b:6e:83:60:d9:f8:96:5e:e0:92:9a:67:92:
                    5d:d7:0d:ce:41:8f:d8:54:7c:2b:2d:f2:2f:a8:26:
                    7f:9a:99:e1:50:04:a3:b2:86:b9:e9:8e:93:04:99:
                    3a:d0:2d:82:ea:8f:24:32:b5:6e:a2:d4:9e:86:0b:
                    99:75:9e:72:9c:49:08:0c:cc:de:fb:c0:a0:19:3d:
                    14:b6:70:f8:01:48:ad:a9:2d:15:e6:0c:da:07:06:
                    a5:fc:5e:34:03:76:08:85:19:c2:14:2f:e2:59:2b:
                    99:8c:68:c8:61:bf:a2:6c:3e:37:a2:93:7f:06:2b:
                    87:24:ac:e4:1d:85:c0:17:86:c0:84:f1:35:4f:fc:
                    69:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:79:E5:4B:B8:03:3D:D7:C1:95:CC:03:2C:EE:61:D7:33:2C:C7:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9793dfa-7b46-358f-9882-a120c274c828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5e50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:3d:83:ce:05:b7:72:94:37:81:2d:fd:5f:81:55:dc:f3:
         91:7d:e2:b1:7b:ae:4d:5c:1a:15:78:ba:cb:f3:61:f8:d1:12:
         e6:90:fb:66:cf:bc:fd:0f:36:68:63:9f:21:e0:41:5f:b9:67:
         4e:ec:b5:79:8d:73:67:99:31:cd:7c:9c:4e:78:dc:b9:e2:a8:
         fd:d6:d1:c8:32:53:96:91:e6:b5:35:04:60:94:9b:0a:73:e1:
         38:da:a1:65:ea:8c:96:c7:10:9d:77:1c:17:dc:6e:e0:3c:81:
         35:fa:78:d4:14:7d:ac:5b:7a:a0:31:7b:44:13:2f:b0:82:a9:
         df:7f:8d:0f:c6:b6:14:ab:ae:03:33:7a:6f:20:3a:b0:82:35:
         f1:12:99:dd:5b:8d:19:87:47:7c:3a:4e:84:90:0b:6d:27:03:
         98:2b:94:0d:a6:2b:71:2f:7e:7c:b4:08:2c:4a:8c:0e:38:de:
         65:1d:68:6d:2d:45:cf:7e:49:e5:eb:ba:9e:42:b7:e5:ad:aa:
         1f:31:fe:31:dc:b8:47:20:07:c6:26:61:e1:7f:6f:9e:ac:c5:
         d7:3a:62:9a:d2:99:d6:82:21:37:91:18:d5:7c:cb:19:b0:f2:
         91:68:e5:cb:e7:7b:df:17:73:32:ef:f4:1b:d1:75:d0:76:3c:
         c1:09:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:47:20 2025 by rpki-client