Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/705d3baa-f916-301d-80ae-0d6c3c30fe61.roa
File:                     705d3baa-f916-301d-80ae-0d6c3c30fe61.roa (raw, json)
Hash identifier:          K/+irh7tfR73r6/oqxuWz45MchP/L2f8woPkR3tm5Fg=
Subject key identifier:   A8:73:0E:3D:6D:D7:54:B2:9B:8F:1D:40:B4:CE:10:D6:84:47:D0:7C
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584957F4045491C47FC63DDCA600
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/705d3baa-f916-301d-80ae-0d6c3c30fe61.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     14490
IP address blocks:        2602:fa70:ca0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:04:54:91:c4:7f:c6:3d:dc:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=7f565ff9-5bcb-4275-9a34-5111af3e70b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:88:28:7a:14:72:ac:45:51:51:63:39:1a:
                    67:68:2a:d8:30:db:e1:1e:21:00:f9:da:a7:3c:a8:
                    94:dc:27:73:cc:a7:d4:41:a7:a4:31:1e:ec:7e:b8:
                    71:85:56:66:55:7f:c5:0d:df:c5:a6:81:a1:4d:64:
                    9e:19:78:b7:ab:4c:7c:19:9c:6e:3d:3b:23:fe:17:
                    ca:b2:c2:f3:e6:fb:63:64:95:f1:aa:2f:5c:4b:c7:
                    62:b6:86:ed:f9:18:aa:af:97:25:5d:90:48:ec:7c:
                    99:9f:32:77:47:9d:68:02:aa:2d:96:05:01:77:bc:
                    39:54:0b:99:aa:98:48:a7:ba:99:78:1b:f9:ed:31:
                    98:f1:e3:c9:06:1f:b9:3c:20:ad:7c:ec:a4:77:06:
                    83:b5:f3:c7:b4:9a:b3:14:04:c3:00:8e:b9:60:eb:
                    ec:38:1a:16:15:c4:d2:81:02:5e:64:05:e4:dc:5e:
                    cb:79:e6:a8:31:8d:0a:3d:67:86:92:81:1f:7e:1f:
                    1e:be:59:8c:d0:f4:18:30:5d:57:79:d9:b4:1c:df:
                    e6:3b:c0:88:60:80:fc:48:12:ed:30:54:a0:ed:73:
                    85:9e:73:e3:57:9a:fc:20:da:6f:15:86:4f:75:18:
                    bd:2b:17:ac:47:18:82:97:e8:e0:fc:b7:75:62:d1:
                    70:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:73:0E:3D:6D:D7:54:B2:9B:8F:1D:40:B4:CE:10:D6:84:47:D0:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/705d3baa-f916-301d-80ae-0d6c3c30fe61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70:ca0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:61:66:00:89:93:74:8b:20:d7:de:e6:66:e4:07:b0:b1:3a:
         61:b6:cc:2a:df:cc:9b:2a:72:82:5d:7e:10:af:4d:fb:90:a0:
         0a:52:90:4f:f2:0a:4f:46:a1:d6:f5:90:bb:c5:52:89:36:1f:
         f7:21:53:45:96:e2:48:21:5a:90:df:7b:9c:8c:0d:f3:e1:97:
         94:c5:dc:aa:f6:6f:d4:b9:eb:58:91:8c:2b:6a:8b:25:00:04:
         dd:f8:5f:1a:c4:56:10:50:48:c5:76:5e:68:97:d2:24:11:f8:
         67:63:8a:7e:35:ff:2e:29:0e:b5:13:86:41:fd:6b:49:3a:b8:
         71:0a:48:6a:55:03:24:1b:11:5f:68:d4:4e:b6:aa:c0:f6:25:
         00:c9:dc:78:1b:b7:84:23:fd:82:ed:d3:d2:fc:4c:12:83:35:
         58:14:6f:a3:ae:94:e8:42:5e:0c:4d:0d:25:19:d5:0c:c1:f0:
         08:ef:6a:cc:db:c0:f3:32:69:11:78:ff:02:11:20:10:31:22:
         57:4e:d4:62:16:d2:28:e4:26:60:5d:55:c2:aa:3c:82:db:a3:
         72:0b:b2:7e:71:ca:88:27:80:5c:34:a1:8c:2c:53:2a:5b:9c:
         1c:a2:a9:68:24:27:8f:a9:e6:4f:24:af:43:f5:06:ec:40:fd:
         2b:0d:1a:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElX9ARUkcR/xj3cpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm
ZGJkMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
N2Y1NjVmZjktNWJjYi00Mjc1LTlhMzQtNTExMWFmM2U3MGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRGIKHoUcqxFUVFjORpnaCrYMNvhHiEA+dqn
PKiU3CdzzKfUQaekMR7sfrhxhVZmVX/FDd/FpoGhTWSeGXi3q0x8GZxuPTsj/hfK
ssLz5vtjZJXxqi9cS8ditobt+Riqr5clXZBI7HyZnzJ3R51oAqotlgUBd7w5VAuZ
qphIp7qZeBv57TGY8ePJBh+5PCCtfOykdwaDtfPHtJqzFATDAI65YOvsOBoWFcTS
gQJeZAXk3F7LeeaoMY0KPWeGkoEffh8evlmM0PQYMF1Xedm0HN/mO8CIYID8SBLt
MFSg7XOFnnPjV5r8INpvFYZPdRi9KxesRxiCl+jg/Ld1YtFwCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKhzDj1t11Sym48dQLTOENaER9B8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi
OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvNzA1ZDNiYWEtZjkxNi0z
MDFkLTgwYWUtMGQ2YzNjMzBmZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi
MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5
ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk
ODg4OWZkYmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6cAyg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAZhZgCJk3SLINfe5mbkB7CxOmG2zCrfzJsqcoJdfhCvTfuQoApS
kE/yCk9Godb1kLvFUok2H/chU0WW4kghWpDfe5yMDfPhl5TF3Kr2b9S561iRjCtq
iyUABN34XxrEVhBQSMV2XmiX0iQR+Gdjin41/y4pDrUThkH9a0k6uHEKSGpVAyQb
EV9o1E62qsD2JQDJ3Hgbt4Qj/YLt09L8TBKDNVgUb6OulOhCXgxNDSUZ1QzB8Ajv
aszbwPMyaRF4/wIRIBAxIldO1GIW0ijkJmBdVcKqPILbo3ILsn5xyogngFw0oYws
UypbnByiqWgkJ4+p5k8kr0P1BuxA/SsNGq0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:26 2025 by rpki-client