Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/3f1adc89-9874-311d-8d20-68314f40441b.roa
File:                     3f1adc89-9874-311d-8d20-68314f40441b.roa (raw, json)
Hash identifier:          3tmJRgtsePklEoUg7caxRLCNwHtC3LOvbNOLkHAcJPA=
Subject key identifier:   42:C2:8C:20:7D:2E:EC:57:7C:76:41:78:1B:72:30:12:42:D9:F5:A6
Certificate issuer:       /CN=9e36dcff-6526-450f-a9d4-367f2c2d4a7f
Certificate serial:       010D0C9F43285847B6B62A9B5C623D9CB7794A20
Authority key identifier: 84:F9:60:4D:69:2E:F4:73:8B:1B:24:A6:73:C0:85:78:58:DE:1B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/3f1adc89-9874-311d-8d20-68314f40441b.roa
Signing time:             Wed 30 Oct 2024 14:04:07 +0000
ROA not before:           Wed 30 Oct 2024 14:04:07 +0000
ROA not after:            Tue 28 Jan 2025 15:04:07 +0000
asID:                     34770000
IP address blocks:        2602:fc3b:8000::/35 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:b6:2a:9b:5c:62:3d:9c:b7:79:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e36dcff-6526-450f-a9d4-367f2c2d4a7f
        Validity
            Not Before: Oct 30 14:04:07 2024 GMT
            Not After : Jan 28 15:04:07 2025 GMT
        Subject: CN=dc17712c-9e2c-4186-b3e1-d96fa63029e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:5a:a5:2d:3b:b2:43:e7:f5:63:7b:f6:f7:
                    3c:87:f9:34:26:7c:f6:76:d0:43:31:35:da:59:99:
                    a0:d8:19:37:8a:ec:8c:86:57:54:42:97:b4:59:64:
                    00:55:51:1f:0a:b5:7a:e1:60:44:19:ea:1b:b2:4e:
                    d2:4e:35:f2:3a:c8:00:02:01:1c:09:dd:ba:95:ab:
                    27:9b:97:98:bb:73:7b:c8:0d:3c:56:b2:d0:c5:b8:
                    9c:b7:5f:31:3b:15:ce:9a:ce:7c:09:28:43:69:90:
                    42:f9:02:23:c6:bd:43:5c:e1:ca:11:b2:51:f9:1d:
                    e1:50:34:92:4d:37:ca:5b:1f:22:9c:ed:20:ee:a9:
                    09:d5:8c:b3:41:28:57:aa:4c:45:d7:9a:cc:42:08:
                    95:1a:19:52:d4:ea:0b:0c:e6:b4:2e:ae:46:bd:55:
                    78:d9:95:e9:33:15:16:cb:86:82:59:28:7a:a4:87:
                    e9:cd:c3:e3:8a:0a:e2:00:91:bf:9b:83:8c:54:b5:
                    75:7d:db:92:1d:da:30:f5:f5:5e:40:be:05:5e:f7:
                    62:19:bd:d8:71:cd:0e:b5:41:25:e0:55:29:84:4f:
                    66:a0:da:d8:8c:53:98:91:d7:c1:f8:1b:95:27:9c:
                    ce:33:ad:1a:2a:dd:8c:9d:23:5d:f0:06:e8:19:5c:
                    6e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C2:8C:20:7D:2E:EC:57:7C:76:41:78:1B:72:30:12:42:D9:F5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/3f1adc89-9874-311d-8d20-68314f40441b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.crl

            X509v3 Authority Key Identifier:
                keyid:84:F9:60:4D:69:2E:F4:73:8B:1B:24:A6:73:C0:85:78:58:DE:1B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:af:00:8c:4b:a8:1b:12:ae:8d:dd:cc:4e:7e:4f:3a:bc:27:
         07:36:10:8e:50:78:71:5e:ed:44:f0:e7:be:81:f5:f8:c4:5d:
         21:94:ad:1e:b1:a3:40:de:50:d2:0b:b1:0a:41:a3:da:e6:a4:
         15:42:71:93:5e:95:6b:90:fc:0c:16:dd:28:d2:9e:8d:6c:88:
         4a:e2:68:70:ad:8e:7c:8c:a2:70:68:9d:25:b7:76:7c:d0:7e:
         c6:91:7f:af:45:e6:63:c1:6e:9b:07:a1:a9:89:c9:47:1c:99:
         7c:9e:d1:e3:2c:92:68:ed:02:14:53:a1:69:bd:ae:5b:de:c9:
         4f:46:7c:97:62:99:95:b2:ea:17:6d:ba:cf:ea:83:b0:2b:8f:
         18:0a:0e:07:a1:cb:99:e2:2b:e3:21:1c:e4:b4:60:f6:0b:ad:
         d3:03:69:46:00:93:d9:4f:b7:a5:5c:eb:36:60:bb:ec:0a:3f:
         80:a4:b7:71:80:60:a7:97:22:4f:00:e1:69:56:73:9c:04:a1:
         e7:cc:5f:3c:b3:fe:5c:56:a7:24:57:e0:34:24:5b:d5:d4:7c:
         b8:26:6b:40:eb:51:43:10:32:6c:52:01:31:9e:1e:9e:06:b1:
         04:45:e3:31:ab:29:7e:51:52:e7:82:35:0d:cd:8d:1b:81:00:
         95:16:4d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:45:57 2025 by rpki-client