Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/80ad4e79-4976-3549-912a-b86c6056835c.roa
File:                     80ad4e79-4976-3549-912a-b86c6056835c.roa (raw, json)
Hash identifier:          Bv9UOM0Gm5g71ovAUqZ/7XC6fIf9JoJTW2D8Knj7oYo=
Subject key identifier:   B5:79:C0:D5:EF:E7:3D:E7:CE:38:A0:97:67:EC:7C:E7:D3:28:92:95
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F43285848F926AB7BFB25F3A24D5ADF80
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/80ad4e79-4976-3549-912a-b86c6056835c.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     26904
IP address blocks:        2602:fc15::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ab:7b:fb:25:f3:a2:4d:5a:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=bd97206f-eb22-41e5-91fb-113657af4326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:ee:b1:10:b0:4c:37:d8:75:1e:fe:c7:00:
                    60:80:c8:f8:51:97:09:3e:25:2a:bc:57:54:35:54:
                    92:6f:5d:82:fd:76:16:8c:61:9f:8e:5a:fb:c6:6b:
                    d7:4b:07:fa:8f:dd:4a:ed:95:0c:b0:5f:00:04:6c:
                    01:e4:c1:07:93:65:e7:15:89:ee:ee:24:d0:51:f1:
                    a0:b0:8a:7c:33:4e:95:c6:43:9c:8a:a3:e1:8b:ac:
                    58:f5:a3:35:c9:82:84:dd:20:92:56:93:82:f1:99:
                    7b:13:2b:79:4a:e9:4f:c9:55:64:06:17:d7:15:90:
                    88:be:99:1f:57:9e:8d:2d:1e:c3:9f:33:02:7b:5b:
                    4f:c6:b2:85:fe:f9:78:4a:b0:af:2b:6b:5c:84:34:
                    30:ad:34:d9:cb:1c:11:65:65:71:70:3f:cb:18:10:
                    e6:9a:d6:ed:b9:51:b9:a2:4c:0a:e6:65:57:7e:f1:
                    4a:d6:ed:1a:74:b0:90:a3:42:b4:8d:24:3c:22:42:
                    ed:48:0f:69:9d:d3:15:24:fd:ce:6e:72:70:31:4f:
                    71:2a:86:55:5e:c5:5d:c6:f6:ab:4d:85:03:1d:0b:
                    bc:af:2d:4b:52:a5:68:04:89:d6:cd:bf:71:27:1e:
                    02:b2:e2:cc:85:b9:1f:2f:83:e8:a0:30:2c:ca:11:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:79:C0:D5:EF:E7:3D:E7:CE:38:A0:97:67:EC:7C:E7:D3:28:92:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/80ad4e79-4976-3549-912a-b86c6056835c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc15::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:31:94:d5:9e:3f:51:9d:fb:08:e2:b1:9a:f0:d5:9c:d4:50:
         4b:97:9b:ca:01:1f:34:9f:47:89:8b:1d:0a:d2:d3:ff:9a:df:
         78:a8:38:ba:6d:cc:c8:38:82:ed:41:0a:85:16:cd:0b:3c:88:
         d5:cd:30:a0:12:18:6d:9a:7f:63:8b:14:71:05:6b:b6:6d:b3:
         7f:11:ec:80:16:b9:60:ea:fd:17:71:21:5d:b7:ee:22:5d:76:
         6f:0d:7d:ec:b2:bb:26:b2:02:ea:4c:1d:29:b7:cb:d6:1a:98:
         d5:0e:11:a1:82:22:1e:51:88:03:bb:d2:49:6f:23:f8:82:40:
         97:a1:a9:1e:dc:28:c7:13:35:5f:e4:18:99:7f:21:2c:8d:94:
         b6:94:72:88:32:87:e1:a4:82:b5:27:4b:4b:e1:42:96:93:d3:
         38:5e:c6:b5:7f:0c:0e:e5:d0:aa:6a:fe:69:59:20:ed:05:53:
         aa:97:c0:dd:b7:fc:4b:1d:f0:5a:01:52:b3:4a:43:e4:48:75:
         91:22:16:c8:51:44:f0:c1:2b:e0:a8:1a:f3:d6:61:6e:3a:c1:
         e4:b1:e4:45:76:00:65:a4:5c:a1:be:2d:62:c0:66:a2:09:15:
         1c:1b:4d:70:83:5b:4e:b8:2a:1e:aa:57:7a:b7:97:a8:06:f3:
         48:5e:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:46:32 2025 by rpki-client