Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/b8134718-5688-387c-a697-5002eba38eab.roa
File:                     b8134718-5688-387c-a697-5002eba38eab.roa (raw, json)
Hash identifier:          vijN0WQ7tTbPXyAlPPFxVxdNEEeuM8k2FgsY9VuwVx8=
Subject key identifier:   67:4A:BE:8B:49:C3:87:1E:B7:53:65:E2:87:17:1B:8E:DB:16:6A:31
Certificate issuer:       /CN=d30c475d-8944-47ed-ba1d-63ff537595ba
Certificate serial:       010D0C9F432858487CEB36E3EB652B79840D8138
Authority key identifier: 4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/b8134718-5688-387c-a697-5002eba38eab.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     32872
IP address blocks:        2602:fa69::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:36:e3:eb:65:2b:79:84:0d:81:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d30c475d-8944-47ed-ba1d-63ff537595ba
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=a8bef82c-a288-4327-85dd-e75ebf8ef3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9a:73:9e:b4:a8:43:47:47:b3:df:78:7b:ba:
                    a9:40:a6:5b:89:6c:78:41:4a:8d:7a:7a:0f:33:d5:
                    08:5d:8f:38:8a:10:0f:8e:da:2a:4d:fc:51:42:67:
                    c6:51:f9:c9:c2:2a:9e:f1:70:2a:92:5a:a9:9b:f9:
                    c9:21:2d:2b:ed:b8:a8:9e:d0:ca:44:6a:3a:86:60:
                    99:53:27:48:2b:d1:84:7d:15:0e:55:ec:3f:2c:8f:
                    35:52:52:de:12:15:91:4f:f9:02:00:e2:a5:5a:c0:
                    e1:6f:e1:01:9b:67:b4:cd:8a:76:e4:09:64:1b:5f:
                    84:f1:35:7a:d8:c2:72:bd:fd:1b:12:39:93:a0:4d:
                    ed:18:69:95:eb:c3:7b:df:5b:c1:a0:84:28:5a:3e:
                    ae:9d:90:fb:77:af:d2:7a:f8:bf:aa:0d:14:9f:57:
                    a4:c4:55:76:f3:66:bc:99:bf:57:49:a9:3d:11:fc:
                    01:75:da:4c:98:ba:3d:3b:07:c5:d4:23:9f:51:74:
                    56:db:41:5f:6a:c8:e0:bb:68:3c:5c:0d:04:23:d3:
                    42:32:0c:1f:31:90:05:c1:70:b6:a5:a6:61:9d:c4:
                    27:f3:e4:c3:71:8c:10:13:61:a0:5c:33:4e:ef:04:
                    23:20:54:35:2e:13:d9:17:a6:37:84:e3:dc:c3:20:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4A:BE:8B:49:C3:87:1E:B7:53:65:E2:87:17:1B:8E:DB:16:6A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/b8134718-5688-387c-a697-5002eba38eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.crl

            X509v3 Authority Key Identifier:
                keyid:4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa69::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2f:82:a1:fd:a3:68:41:ff:7d:55:a7:54:66:c8:4d:f6:bd:
         3e:e1:aa:63:e5:14:7d:21:2e:7f:d5:d8:c1:d2:d9:ba:fd:b2:
         77:71:a1:92:dd:f1:fb:98:4b:1e:8c:d0:87:6d:12:73:26:f8:
         01:47:44:c0:33:8c:50:c3:d1:a3:fc:bc:13:e7:54:02:e1:d0:
         ff:4c:cc:e7:89:05:96:be:08:2d:1e:69:8a:81:5c:2a:62:c4:
         ba:96:f2:2e:16:ed:d5:ba:ae:69:ce:4d:79:fb:04:b7:2e:db:
         d4:11:7b:b7:47:8a:46:76:78:4f:9e:73:56:6f:9f:d0:0f:a6:
         db:0f:4a:00:f3:72:1f:0b:c4:52:63:f0:2f:cd:3a:8e:b2:a4:
         43:40:2d:d8:95:d7:3f:41:f7:7a:96:5b:2a:84:fa:19:c9:f7:
         2a:c9:58:95:f8:75:fe:d4:d1:a2:30:60:b6:d2:2f:85:71:71:
         f8:e8:50:bb:bd:79:ac:99:f5:e6:18:9d:a2:8b:ee:60:54:51:
         46:94:0c:55:57:62:8a:d0:cc:92:f4:6d:cd:59:64:dc:ab:fc:
         a0:4d:f3:7c:e2:28:48:ce:e6:40:6a:11:06:0d:71:68:5d:d7:
         2f:0d:fc:4d:3b:8b:c2:24:18:90:90:f2:83:e0:5d:78:88:38:
         19:45:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:32 2025 by rpki-client