Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e10e97df-fe20-3543-9695-bd11f14c9baf.roa
File:                     e10e97df-fe20-3543-9695-bd11f14c9baf.roa (raw, json)
Hash identifier:          GEYV/iHGdxes5WcFSO//nWR4hoaZ404/X365aQiKo7k=
Subject key identifier:   F9:34:F5:2D:FE:EE:DE:4D:A1:7D:B3:5C:E3:CF:33:5B:C4:0A:21:66
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D0A2F596F40E7F964D8D2BEC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e10e97df-fe20-3543-9695-bd11f14c9baf.roa
Signing time:             Thu 24 Feb 2022 05:00:00 +0000
ROA not before:           Thu 24 Feb 2022 05:00:00 +0000
ROA not after:            Thu 17 Feb 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        2001:1908::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0a:2f:59:6f:40:e7:f9:64:d8:d2:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 24 05:00:00 2022 GMT
            Not After : Feb 17 05:00:00 2028 GMT
        Subject: CN=df534fe4-ec1d-403b-8548-223634124196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ff:43:12:4b:55:f9:54:cc:72:2b:de:8d:1f:
                    db:4b:97:90:a3:c9:35:df:5c:f8:36:7d:ad:21:60:
                    07:f3:03:83:49:4d:a5:ce:ec:e9:49:35:0f:b8:33:
                    97:b3:d6:d5:b0:f5:47:bc:07:d9:25:6b:b1:30:99:
                    da:2f:59:c0:4d:1a:6a:b1:5d:b8:04:f3:ac:92:60:
                    6d:80:08:e1:f3:f2:1c:73:d2:02:8f:c1:9f:be:39:
                    44:cc:72:14:57:ef:6d:11:2d:90:68:61:20:38:24:
                    63:f5:3f:5f:c3:90:94:52:bd:f1:96:98:15:86:14:
                    91:bd:d6:c2:50:b9:73:1b:db:92:b5:b7:1b:15:ac:
                    61:42:b5:16:03:a9:cc:dc:e4:05:38:5f:d7:b2:b6:
                    66:fc:05:ad:bd:c8:44:2c:67:b2:2c:58:bd:1e:c7:
                    33:2c:e2:27:e2:33:d3:57:7b:24:52:1c:b2:22:c2:
                    a0:b1:72:8d:bd:57:2f:f5:e4:a9:1e:b1:8b:bc:65:
                    88:09:a7:5f:c1:b6:fe:0d:88:5b:5a:3a:c4:04:30:
                    d3:c6:63:11:10:e8:5a:12:ba:19:61:a5:b5:18:70:
                    2f:3e:e2:a0:06:3f:9d:7b:39:c3:01:03:ec:a0:b1:
                    f8:6e:f0:29:45:1c:2b:29:93:61:d6:cb:e5:2c:b8:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:34:F5:2D:FE:EE:DE:4D:A1:7D:B3:5C:E3:CF:33:5B:C4:0A:21:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e10e97df-fe20-3543-9695-bd11f14c9baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1908::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:8c:38:08:b4:50:7f:ce:89:db:66:40:21:df:7f:fa:7f:
         86:2b:e5:ba:4c:c5:5a:44:52:e8:77:75:1a:ca:f2:11:9c:ab:
         b6:08:e3:85:ef:ae:00:d5:03:56:ab:23:de:1c:76:d9:6e:f7:
         c6:f8:1d:1e:d2:7c:60:df:21:65:38:83:9d:58:12:33:34:82:
         30:7e:13:1f:8c:80:43:13:c4:bf:f8:a6:bc:81:bc:a1:08:e8:
         72:c6:cf:0d:87:77:74:5d:46:19:db:dd:1b:1b:d7:8d:88:ae:
         37:8c:4e:e8:b2:aa:94:63:14:2a:a6:ce:63:c1:a5:2e:da:fa:
         d7:3d:8e:1e:f5:31:69:ab:25:11:89:28:ea:e3:f7:ec:d7:2e:
         9f:26:c3:93:a9:16:fb:74:f8:f9:33:e1:38:13:c6:13:48:e1:
         c6:c8:10:20:0a:7a:b7:5e:38:75:b8:52:ab:80:ce:22:85:f8:
         80:16:1e:97:2f:c1:e1:9e:44:e4:71:d6:bb:46:40:5a:8f:48:
         c4:87:16:7b:c9:94:db:d7:7d:8c:c4:82:78:30:94:d5:73:c4:
         86:72:fa:d7:b5:5e:bd:d8:9d:d9:67:19:7d:00:dd:0a:22:bd:
         ca:52:38:a0:3c:ef:a3:0f:23:13:9e:3a:a6:bf:60:1d:1d:46:
         bd:25:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:03 2025 by rpki-client