Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/1bc212ef-c15c-392d-b4e5-648f5755c240.roa
File:                     1bc212ef-c15c-392d-b4e5-648f5755c240.roa (raw, json)
Hash identifier:          44aI1PyJEpu/QieIrECz/3QN3cZWGznT9ldtw6evwZQ=
Subject key identifier:   95:8C:69:3A:95:78:24:2F:DE:01:FB:11:97:DC:B9:9E:CD:0D:55:FD
Certificate issuer:       /CN=77728ad0-067a-4ac0-884f-39d45b479fda
Certificate serial:       010D0C9F4328584953C419125DB686B95BA19380
Authority key identifier: D7:9F:73:41:48:B7:DC:6C:32:16:B0:5C:84:6F:63:BC:52:E2:EA:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/1bc212ef-c15c-392d-b4e5-648f5755c240.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     14482
IP address blocks:        2602:fa3b::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:19:12:5d:b6:86:b9:5b:a1:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77728ad0-067a-4ac0-884f-39d45b479fda
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=6495fe95-d3fc-428a-9004-130cfe3f913d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:f0:45:fd:0d:b6:47:8f:4d:9c:55:e3:00:
                    22:91:cf:0f:9c:31:bb:53:40:f0:8e:55:c3:55:f2:
                    38:a3:33:58:2f:05:fc:dd:5e:8f:c1:49:7d:bc:23:
                    f0:87:0c:ed:ef:3e:64:66:f7:43:a4:fa:65:57:da:
                    b0:61:fa:d8:d1:bc:8f:ec:79:b9:54:08:e9:26:07:
                    d3:a5:e8:f5:e0:5a:98:b5:ad:50:21:1c:e3:ac:1a:
                    af:28:41:9b:8c:5a:0a:bd:83:cc:47:c4:f0:48:82:
                    db:94:19:b1:d9:7c:f3:5c:b1:dc:7e:79:95:79:6e:
                    0b:02:3a:fc:84:dc:a0:ef:5e:af:72:76:ad:d7:40:
                    cd:25:02:d1:c2:1e:9e:78:1f:6b:a4:38:18:1d:76:
                    5b:ee:05:e4:4b:7d:47:e1:5a:2d:cb:a0:7c:7a:50:
                    ac:e0:73:75:55:e2:c5:80:2c:86:28:ec:7d:58:85:
                    f1:07:1e:e6:1c:32:ef:02:04:1c:56:fe:4d:14:4f:
                    1d:70:b7:78:5c:d4:f4:53:be:b9:16:42:71:40:60:
                    d4:60:db:05:7b:db:df:50:36:ab:06:9d:63:97:99:
                    2c:e1:80:cc:f3:b6:fd:64:c0:8e:72:68:ef:db:a7:
                    d8:bd:a1:29:98:fd:06:3b:c5:2c:1a:f6:50:b4:6b:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:69:3A:95:78:24:2F:DE:01:FB:11:97:DC:B9:9E:CD:0D:55:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/1bc212ef-c15c-392d-b4e5-648f5755c240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/77728ad0-067a-4ac0-884f-39d45b479fda.crl

            X509v3 Authority Key Identifier:
                keyid:D7:9F:73:41:48:B7:DC:6C:32:16:B0:5C:84:6F:63:BC:52:E2:EA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:bd:a8:a9:f9:f1:55:02:60:ad:1b:4e:d6:b4:4a:46:72:
         c0:86:07:19:6e:cb:6b:c7:9d:67:ad:e4:9a:30:95:cc:79:cc:
         75:1d:eb:7d:42:1d:4b:66:80:fc:75:c4:84:c5:33:cc:ed:ab:
         7a:d0:19:70:04:b2:17:11:07:b7:79:19:14:52:cd:3e:22:2d:
         fe:40:3e:0b:99:de:4b:55:a6:68:a0:76:56:d3:3b:90:93:47:
         4a:60:1d:e8:e9:53:18:16:60:de:30:2b:33:d3:d3:f3:1a:d3:
         70:f4:46:31:de:21:2b:de:85:f4:68:3e:f8:22:4c:f6:5b:9e:
         8e:72:7f:d6:96:5a:43:b4:df:e3:62:f2:b3:c1:21:43:ec:d4:
         d1:3f:97:29:cf:71:dd:36:e4:bc:17:44:51:81:1c:a5:e1:f3:
         19:4f:ad:33:b4:eb:ff:74:dc:0c:a6:69:ee:16:b7:38:16:e1:
         38:6e:17:2e:30:96:51:6a:e6:cd:0f:2e:6d:d5:1a:de:23:f3:
         c9:05:e6:d5:2d:84:99:c6:17:8c:de:40:b3:a0:e3:aa:a1:fb:
         41:1c:e6:e4:84:46:0b:61:95:d4:37:74:fe:c0:3a:32:b2:fe:
         77:b5:c4:77:99:6b:bc:fb:d2:62:0f:cb:29:5a:fb:84:48:9b:
         db:49:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:37:18 2025 by rpki-client