Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f63db4f-afa6-3376-9221-9f0b30cf94ce.roa
File:                     5f63db4f-afa6-3376-9221-9f0b30cf94ce.roa (raw, json)
Hash identifier:          F+bWn8V9fnPJgFXo6inwo9ck/rmTaOdTxThPeZUk7Rk=
Subject key identifier:   5B:68:F3:8F:51:88:41:54:2E:2E:EC:C6:AE:63:FB:37:CE:FD:20:6F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DA14A282F1462BF921F2043C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f63db4f-afa6-3376-9221-9f0b30cf94ce.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        2604:cb00:9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:4a:28:2f:14:62:bf:92:1f:20:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=24e523f7-6311-414d-984f-cd962b649717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:18:d6:cf:7a:2c:ba:26:59:7d:9b:a7:a8:
                    34:dc:71:96:f8:63:b0:c8:90:89:7f:9a:d7:86:27:
                    fe:6b:63:d6:84:9b:8b:45:46:0e:bf:2d:70:46:12:
                    ac:7d:51:2d:42:c3:a5:cc:77:81:68:48:c1:62:ec:
                    72:c0:9e:29:3f:4a:ff:a0:55:9f:19:54:4a:be:55:
                    b8:1e:c2:d3:e3:28:81:97:f2:63:7c:15:51:47:e5:
                    80:51:a7:64:fb:78:47:2b:22:9e:36:e1:68:18:52:
                    29:26:30:dd:be:41:32:e8:43:c5:fe:51:08:dc:3e:
                    93:6a:9e:c2:0a:4e:58:a5:22:d0:9e:86:3e:af:d8:
                    72:a1:df:7a:6f:b1:94:34:08:46:63:d2:1e:b3:bf:
                    3f:6c:b0:62:df:4a:d2:29:ff:34:80:c1:5e:f5:d7:
                    ab:8e:a4:3e:d7:96:15:42:e5:36:39:ad:72:0b:cc:
                    ad:a8:1e:0e:78:07:4b:bb:3e:26:64:ca:7f:a2:55:
                    ac:18:88:65:b7:d0:56:9a:1c:66:da:81:29:23:35:
                    65:89:b4:7e:c0:80:e2:95:a2:59:8f:ad:06:ec:3f:
                    27:a7:c9:0b:61:ce:b4:93:c5:af:a7:04:c8:38:2b:
                    e8:71:22:32:32:04:af:a3:e3:94:59:cb:68:f9:92:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:68:F3:8F:51:88:41:54:2E:2E:EC:C6:AE:63:FB:37:CE:FD:20:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f63db4f-afa6-3376-9221-9f0b30cf94ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1b:3d:24:bd:ec:3a:48:ea:a1:fc:2d:14:87:1e:ab:7b:03:
         05:33:a4:11:ce:e3:c9:6c:cf:cf:f8:5d:85:e8:4a:75:ee:fc:
         af:e7:2c:b0:99:13:2a:31:b7:4e:70:28:3b:01:54:8c:27:56:
         e9:75:cc:31:a3:87:d8:3b:5d:c5:fd:04:92:cf:de:dc:77:4d:
         53:0e:c4:2e:fd:e8:62:d7:38:28:5f:0e:0b:cd:92:bb:d1:0d:
         f9:35:05:c6:ca:22:1d:59:17:b7:d1:8a:84:16:bd:38:7c:fd:
         e5:31:38:13:e1:74:57:03:4d:d1:a4:e7:09:8a:92:07:fd:1d:
         a4:07:4e:b2:f8:a4:b4:dd:b1:f6:8f:81:52:0a:28:72:6c:e6:
         d1:37:c0:af:61:8c:e5:62:84:a8:da:b7:61:14:21:b8:42:fd:
         dc:58:05:b9:e8:ec:46:de:23:e2:96:7c:d6:d6:87:ca:4d:cd:
         83:e7:39:ed:7c:3c:d1:e7:75:1e:b4:19:df:6a:9a:7d:d6:4c:
         9d:47:8c:ee:a3:31:20:5c:86:c1:b0:cb:55:99:d0:73:bb:bf:
         15:64:2e:65:29:d0:c9:df:06:ff:26:08:c2:89:c5:8a:59:dd:
         4b:2b:64:02:51:dc:bf:6f:71:f6:fe:0c:fe:c9:f8:cc:ea:a1:
         80:ff:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:35 2025 by rpki-client