Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8159633a-1cda-4dd1-a3d9-272be8b6e90a/5e4dd0e2-caf4-3c1c-b7f0-eb33a72cc794.roa
File:                     5e4dd0e2-caf4-3c1c-b7f0-eb33a72cc794.roa (raw, json)
Hash identifier:          4NBuhmA2++396RqLo73yKllkQxDNS1cjDa6yJuU2ylg=
Subject key identifier:   F8:A9:25:DB:3F:ED:DD:42:91:CD:EC:39:0C:C7:05:34:82:E3:23:88
Certificate issuer:       /CN=8159633a-1cda-4dd1-a3d9-272be8b6e90a
Certificate serial:       010D0C9F4328584883E5C76CDC2EEFAF93229C80
Authority key identifier: F0:32:02:45:50:51:7A:49:B8:07:02:E6:F0:7F:04:D5:C8:0A:7F:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8159633a-1cda-4dd1-a3d9-272be8b6e90a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8159633a-1cda-4dd1-a3d9-272be8b6e90a/5e4dd0e2-caf4-3c1c-b7f0-eb33a72cc794.roa
Signing time:             Sun 12 Jan 2025 02:00:38 +0000
ROA not before:           Sun 12 Jan 2025 02:00:38 +0000
ROA not after:            Sat 12 Apr 2025 01:00:38 +0000
asID:                     53416
IP address blocks:        2602:f968::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:e5:c7:6c:dc:2e:ef:af:93:22:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8159633a-1cda-4dd1-a3d9-272be8b6e90a
        Validity
            Not Before: Jan 12 02:00:38 2025 GMT
            Not After : Apr 12 01:00:38 2025 GMT
        Subject: CN=f52901ec-c98a-4d11-ab6f-367c11f8c5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:25:fc:85:f2:77:f0:13:65:b1:7b:22:08:
                    8b:8e:b5:27:0d:df:f5:23:e1:1f:bc:e9:cd:a9:5f:
                    c2:e0:25:3e:8b:b7:6e:c6:9d:e8:32:a7:01:01:97:
                    a5:19:0a:7a:75:55:bd:5b:a8:ea:48:d9:7d:88:af:
                    2f:76:1e:a8:dd:ff:ad:2b:ec:b7:7e:e5:be:c7:30:
                    cd:07:db:1e:2a:2d:d6:41:4c:8b:58:df:b1:20:c9:
                    63:0a:43:b8:dc:6d:92:36:5f:c9:3e:a0:29:89:4d:
                    11:a1:0d:3f:d3:6f:73:e8:1f:69:e5:46:6f:ef:cf:
                    14:5f:b5:6e:a4:9b:ec:07:a1:b4:75:5e:2c:37:50:
                    c1:91:59:a3:f3:83:0c:05:43:e2:f3:76:7e:89:64:
                    cc:d2:14:2e:4d:7f:3e:74:a3:7e:63:7d:fc:60:4a:
                    c1:9e:26:f3:14:c3:85:f4:10:7b:92:55:42:ea:ce:
                    31:6a:be:a3:64:33:5e:40:88:a9:85:b1:3c:a3:37:
                    63:89:b2:d8:a7:f3:7b:05:dc:77:3b:24:f8:97:d3:
                    b2:9c:4a:d8:1f:6e:37:f8:c1:ae:81:6d:98:69:c0:
                    a1:8b:80:c7:7f:d8:32:0b:0d:99:b8:89:a0:fc:f6:
                    20:81:64:d2:f4:9d:b6:31:26:ae:4e:7f:a5:28:f1:
                    bb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A9:25:DB:3F:ED:DD:42:91:CD:EC:39:0C:C7:05:34:82:E3:23:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8159633a-1cda-4dd1-a3d9-272be8b6e90a/5e4dd0e2-caf4-3c1c-b7f0-eb33a72cc794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8159633a-1cda-4dd1-a3d9-272be8b6e90a/8159633a-1cda-4dd1-a3d9-272be8b6e90a.crl

            X509v3 Authority Key Identifier:
                keyid:F0:32:02:45:50:51:7A:49:B8:07:02:E6:F0:7F:04:D5:C8:0A:7F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8159633a-1cda-4dd1-a3d9-272be8b6e90a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f968::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d6:75:5a:54:18:96:d9:73:ac:c1:43:2b:7c:5a:0b:d4:38:
         ee:65:fb:4d:72:2c:c4:32:0b:6b:cf:d0:b0:7b:49:f5:f4:9f:
         27:4d:12:11:c2:86:ff:90:5a:a7:78:66:6f:07:42:c5:f9:58:
         d6:3e:20:20:78:d7:16:79:e9:41:22:49:2b:f3:5f:c5:04:fc:
         70:b0:7a:98:66:2b:49:7b:53:6d:a3:f0:8e:2a:77:9c:12:88:
         c2:75:af:17:ab:17:79:bb:a7:f7:ce:8d:0e:d0:2b:6f:33:4c:
         a9:7c:e5:42:67:3d:51:c0:c5:4e:8e:55:92:6c:88:77:d4:35:
         fa:1d:69:7f:d2:4a:28:e9:62:26:61:a8:94:d1:b6:28:8c:fa:
         89:90:b0:8d:ae:f6:b5:07:05:40:b0:79:51:64:80:1e:f2:90:
         22:22:88:0a:57:5f:12:b1:98:02:be:c5:c3:a0:ae:3a:b9:c4:
         44:c1:75:de:17:6b:ab:2a:60:f4:53:a7:91:24:fb:a8:47:c2:
         63:19:f2:ae:b7:33:62:04:0f:56:10:20:4d:fd:2c:80:77:63:
         f6:ed:06:d6:2a:f1:b2:9d:61:03:92:58:36:5e:46:78:41:96:
         47:ea:8b:48:9f:d1:cf:3f:3e:27:e9:10:01:1f:e0:c8:c2:40:
         6d:94:9a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:57:09 2025 by rpki-client