Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f78287e0-251f-320f-862f-02e673745727.roa
File:                     f78287e0-251f-320f-862f-02e673745727.roa (raw, json)
Hash identifier:          BCwRKWzmGY/m9f0vqeaC+KgMy+eF4ZTp4+BOYyYj/nI=
Subject key identifier:   76:4A:B1:54:45:34:52:CE:F3:28:17:BD:69:1E:78:BD:81:78:6B:AF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D1B127B80207544E1C947AA38
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f78287e0-251f-320f-862f-02e673745727.roa
Signing time:             Wed 02 Mar 2022 05:00:00 +0000
ROA not before:           Wed 02 Mar 2022 05:00:00 +0000
ROA not after:            Wed 23 Feb 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        2604:cb00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:1b:12:7b:80:20:75:44:e1:c9:47:aa:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar  2 05:00:00 2022 GMT
            Not After : Feb 23 05:00:00 2028 GMT
        Subject: CN=24ac36bd-32ac-4847-9862-759a366ed311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:c5:b5:3e:0b:c2:ee:b8:40:23:15:8d:85:
                    48:b9:ea:b2:be:50:0c:c8:cf:67:b7:56:0b:41:4f:
                    5e:03:f5:11:50:66:2b:5c:58:ec:10:ab:04:b5:f3:
                    22:1f:66:2b:ca:47:0e:49:c7:a7:0f:09:00:a4:f6:
                    c7:47:fc:d9:1c:08:7c:a3:b2:ae:94:cc:7a:71:a8:
                    e8:4b:60:8d:ad:d4:8b:50:3f:5b:8b:d7:5e:e4:0a:
                    67:5e:97:a8:d5:9f:53:f6:b3:59:96:8b:94:26:1b:
                    82:cd:6a:32:82:ce:64:14:1d:4a:ed:d4:b1:7f:3c:
                    1b:73:1d:99:24:fe:bf:3f:d1:71:52:96:fa:18:3a:
                    17:5f:bf:7e:95:4e:ec:c7:38:1c:0a:b0:07:9f:75:
                    d8:86:37:80:50:8c:99:23:0a:7d:a7:58:db:47:7b:
                    f5:5d:6a:f7:aa:6d:52:14:86:89:ba:a9:92:22:9c:
                    92:ca:56:fd:6b:19:89:66:d6:df:3a:d5:b2:23:3c:
                    c9:b7:b4:af:b1:bb:9b:2f:b8:7f:8d:85:ed:5a:30:
                    e8:a7:56:68:58:87:90:da:b9:d1:77:49:3c:99:56:
                    98:03:27:7d:f7:ea:27:7d:0e:18:ea:c8:fd:a8:e1:
                    6b:4f:1f:7e:58:e8:08:37:65:3c:ba:0e:dc:ef:49:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4A:B1:54:45:34:52:CE:F3:28:17:BD:69:1E:78:BD:81:78:6B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f78287e0-251f-320f-862f-02e673745727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:3d:5f:8e:ca:12:a8:cb:e7:99:d9:00:ce:59:bf:52:38:
         c2:01:ab:7f:a3:56:18:da:cf:34:4b:90:f8:28:9c:54:bc:7c:
         1b:5c:cc:21:26:59:11:11:51:05:c6:6e:13:2b:93:11:a5:cc:
         d7:bc:d8:ae:6a:dc:a7:c2:a9:d6:db:6a:17:a6:7d:ef:29:27:
         b4:ea:5e:9f:b9:c7:dd:35:d5:0a:d6:3e:3e:b6:3e:a9:ea:06:
         e9:b0:9f:18:ad:13:51:be:1b:02:b0:bc:c5:11:54:71:43:9b:
         23:01:2a:71:b2:ef:74:f4:5e:e8:74:08:8e:bc:08:5b:25:2b:
         d8:1d:d6:4f:f1:12:96:d5:bb:bf:47:2a:ca:d3:f5:d8:53:84:
         ec:4f:86:7e:58:68:ac:80:20:d9:0e:96:39:8b:4b:d5:17:ed:
         60:05:3a:b5:a1:4f:8b:18:46:e7:04:34:cc:d6:c7:48:99:fc:
         3f:a4:fb:4d:49:49:86:5e:ac:42:df:89:2b:e7:e9:cb:6a:96:
         ad:41:6e:78:cb:fd:46:14:dd:7b:94:e5:e6:47:ba:8c:0c:00:
         cb:a4:29:9f:3d:e0:5d:67:a3:ec:3a:9a:bd:e3:ab:1c:89:a3:
         8b:59:55:90:a7:76:7b:93:cc:86:10:66:d6:13:12:56:89:4e:
         2e:8c:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:47 2025 by rpki-client