Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa
File:                     ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa (raw, json)
Hash identifier:          OKVBYavHDojhDDtvnor9oMLE8wJlf5s+Px92kN4pF3s=
Subject key identifier:   FB:CF:0B:92:AD:E6:CF:17:0F:C8:D5:19:A1:FF:1A:53:1F:2D:85:89
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584930DE72C3C1C7CE66A0F07780
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     22192
IP address blocks:        2607:2240:1800::/37 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:72:c3:c1:c7:ce:66:a0:f0:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=9b7fae5c-90be-4c9d-97ee-a82f12feced4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:3b:f4:db:03:a9:65:87:69:b1:70:96:a9:
                    78:47:a0:c2:c3:31:10:ca:d7:f5:57:8a:8c:24:f0:
                    2a:1f:b9:dd:96:35:da:fe:9c:a4:24:3a:58:11:6c:
                    9f:e5:0a:d2:c8:07:31:80:6e:a7:33:c7:75:f3:7a:
                    b0:76:eb:7e:80:a8:5e:3b:32:1d:82:0f:7e:0d:50:
                    8e:31:6f:47:03:ef:63:6a:5c:a5:29:4a:a8:f2:9d:
                    f0:77:2d:7c:1e:df:be:e2:07:ad:e5:9b:5a:ee:6e:
                    70:39:77:45:72:eb:bd:d7:19:5b:ce:14:02:c7:2f:
                    d7:08:2f:f0:e9:5e:12:51:36:f5:f7:45:f4:42:7d:
                    be:a2:30:de:fb:29:bf:36:2c:50:be:30:27:25:6e:
                    4a:53:f8:08:17:de:c8:a8:60:2e:14:bd:15:6e:8d:
                    d2:2b:d1:94:33:87:fa:e3:30:87:44:b3:a1:e2:14:
                    24:19:e0:a4:51:34:1d:cc:ab:04:94:11:a2:d0:24:
                    22:b0:83:f6:22:ae:0f:5d:e9:48:7d:e7:75:e1:3d:
                    54:35:1c:c6:38:1f:cb:0a:69:fa:3f:f8:ac:fe:d5:
                    f5:b8:29:53:2e:7e:1c:66:f6:df:af:6d:f5:eb:e2:
                    4e:3e:94:0a:cc:f4:7c:14:bd:4b:ff:8a:1a:ce:83:
                    7b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CF:0B:92:AD:E6:CF:17:0F:C8:D5:19:A1:FF:1A:53:1F:2D:85:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:1800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:22:6e:e4:2b:03:01:93:01:75:c6:9a:46:de:19:45:39:5b:
         d1:e8:cd:35:c3:75:8b:4d:02:67:ab:89:78:98:f2:74:84:71:
         7a:5f:aa:14:e1:41:3f:e8:03:24:bc:4d:dd:e3:c4:6d:d1:39:
         cd:8e:2d:a7:20:8e:cf:99:0e:04:75:45:0c:a8:59:9c:5f:7a:
         df:8b:c2:6d:11:07:cd:ae:33:5f:27:60:7e:cb:54:34:2c:1c:
         35:33:ad:0c:64:3c:c4:d8:c7:b2:14:86:9c:e1:53:2d:32:3e:
         71:ac:bc:15:73:10:cd:71:9b:bb:1d:9a:e9:37:02:9f:87:30:
         e4:cb:b5:d1:cc:69:a3:ed:93:7a:d5:08:2c:de:89:7f:de:09:
         c5:5d:90:6d:52:55:4e:7c:07:3c:f1:c6:ed:fa:fb:01:60:6e:
         88:22:1d:03:17:c5:fd:6b:e7:05:c9:7b:12:a2:75:2e:12:2c:
         8f:a4:10:b9:3b:4c:f6:73:7d:28:da:2b:9c:c3:03:47:75:ca:
         a2:99:59:8e:3f:0b:cb:0a:42:73:3a:4d:5e:ac:8a:14:7e:9b:
         6b:cd:81:a0:61:b3:5f:f1:40:1e:60:45:fe:d6:b9:bb:42:e6:
         10:6e:e9:62:12:28:35:02:c6:c8:2b:36:ad:7b:40:3c:99:20:
         70:f0:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:05 2025 by rpki-client