Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
File:                     4443ea3e-5515-393f-9b6c-71ed5816326b.roa (raw, json)
Hash identifier:          Dcbytbt5RsAMc9uHbc+UOoFw8/NYXaVWYwXWlgZLnKE=
Subject key identifier:   CC:98:B6:5F:48:03:66:2E:B1:AB:E6:E8:B8:46:95:70:96:69:98:90
Certificate issuer:       /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Certificate serial:       010D0C9F43285848D0ABA7E8D1B23ED479A00DC0
Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     394449
IP address blocks:        2604:3dc0:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:a7:e8:d1:b2:3e:d4:79:a0:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=24f1e0d6-60c2-4a32-af16-a40034f69e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:68:8f:71:63:ed:50:cb:3f:9b:dd:6a:b2:
                    fe:dd:28:7e:a0:75:98:75:c3:bf:a6:ad:68:68:75:
                    90:ce:d5:cc:83:ff:0c:ab:bd:fe:8c:47:8c:65:df:
                    0a:68:a9:e2:c3:fe:95:9b:ea:69:69:4e:25:51:8b:
                    3e:9a:67:02:d4:2b:4d:1f:3e:02:6d:68:b1:d1:24:
                    43:9e:cc:03:c9:49:2d:62:af:f8:7f:9b:68:f2:96:
                    da:17:f5:10:5e:80:d8:7f:70:ec:1f:0d:e7:6d:be:
                    ef:75:6c:5d:a7:f1:82:08:70:be:53:bb:92:d3:35:
                    b7:c6:62:98:e4:ff:91:3a:0b:d0:c9:dc:d2:2f:bf:
                    7e:4a:0c:83:50:d5:f5:d7:09:1a:5c:20:b0:e3:5b:
                    5b:bf:0e:bf:3f:c3:31:4c:24:e8:fc:6f:dd:d7:09:
                    e2:78:66:ca:18:e7:4c:3d:22:11:86:8a:65:d2:c2:
                    26:4d:43:e9:e9:7d:6c:5d:6c:4a:46:86:0d:50:6a:
                    38:4c:6b:1e:7a:3d:8c:81:33:6a:36:4b:c3:8e:ea:
                    ba:92:6a:5a:eb:1c:e8:91:6e:dc:e2:9c:9a:ee:da:
                    7e:7d:a7:15:4b:c0:94:b3:f1:bc:9d:fd:f8:58:ff:
                    5f:6b:11:f0:b7:fc:6c:3c:0f:3b:3a:ec:6f:24:e7:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:98:B6:5F:48:03:66:2E:B1:AB:E6:E8:B8:46:95:70:96:69:98:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl

            X509v3 Authority Key Identifier:
                keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3dc0:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:8e:c8:16:63:6a:17:50:f3:85:50:55:3d:63:7c:18:17:41:
         83:7e:0d:e1:e7:01:75:b3:ff:2d:3a:10:8f:a2:60:17:15:2a:
         1d:84:d3:a0:73:f9:af:49:77:5f:b0:93:d2:9b:a0:31:b7:65:
         1d:23:7e:01:e4:58:d5:43:3e:52:40:b9:40:32:d0:ca:25:56:
         42:5a:cf:24:5f:15:0b:7e:2e:32:0b:6a:27:ea:64:13:d5:a7:
         04:74:8d:1a:6f:b5:90:e3:ad:94:f7:53:08:5c:33:7e:6f:16:
         96:55:ec:58:3d:66:a3:ea:f9:4f:84:d2:c5:7d:f9:69:e1:13:
         86:48:a0:ff:86:c6:80:17:8e:c4:79:b4:d0:c3:34:a1:65:4a:
         49:83:e6:66:d6:cd:4c:30:c8:35:03:42:bc:a5:d9:be:00:c7:
         6e:d9:43:2d:f2:e0:6d:3f:8e:09:8a:40:e2:d5:78:27:6b:1e:
         d8:cf:41:c9:a3:f7:31:4b:f0:01:5b:54:ee:ec:5a:42:be:de:
         9c:d5:c6:96:d6:a3:a5:c5:63:0f:ff:28:fb:80:76:85:d1:2d:
         fb:80:56:91:76:0c:20:ae:1f:d1:27:49:52:75:4c:81:29:ca:
         31:dd:df:5a:cc:b3:cb:e5:2c:32:63:82:a5:b0:30:ee:cb:3f:
         7b:3e:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:05 2025 by rpki-client