Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/c773b116-2cb2-35c9-aff7-f7d221d19bd2.roa
File:                     c773b116-2cb2-35c9-aff7-f7d221d19bd2.roa (raw, json)
Hash identifier:          4nDkShUHPTUeAn9PpyppQkCRrzjwD7725o179hxFbdo=
Subject key identifier:   12:98:A5:95:DC:DC:AE:93:1A:8C:42:16:ED:9E:0B:DA:65:21:1D:00
Certificate issuer:       /CN=e45b2423-bd81-480e-93e3-8cc66e601340
Certificate serial:       010D0C9F43285847B73E3BAFDECCA51DD20238E0
Authority key identifier: A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/c773b116-2cb2-35c9-aff7-f7d221d19bd2.roa
Signing time:             Wed 30 Oct 2024 18:38:16 +0000
ROA not before:           Wed 30 Oct 2024 18:38:16 +0000
ROA not after:            Tue 28 Jan 2025 19:38:16 +0000
asID:                     399970
IP address blocks:        2602:fc3b:2020::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:3e:3b:af:de:cc:a5:1d:d2:02:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45b2423-bd81-480e-93e3-8cc66e601340
        Validity
            Not Before: Oct 30 18:38:16 2024 GMT
            Not After : Jan 28 19:38:16 2025 GMT
        Subject: CN=fd789f38-e3a6-4fc8-b340-d41309ee47cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:16:54:63:a4:ad:09:9a:d4:ba:48:93:09:
                    47:98:85:59:b2:1a:5a:99:24:7a:14:18:db:5c:b4:
                    3e:da:66:39:55:7d:88:e9:32:ef:5f:89:ab:e3:9d:
                    1c:60:f1:ae:f0:48:01:45:f3:30:38:b1:27:59:c3:
                    39:19:61:50:67:03:b6:08:ba:67:15:7e:dd:99:25:
                    36:0a:1b:44:8d:d7:78:5a:4c:30:c2:1f:51:34:fd:
                    bd:57:e5:01:6d:53:ee:03:6f:18:a8:b7:3f:e5:d3:
                    f8:7a:3b:29:e5:33:1b:ed:7a:25:60:27:55:a4:98:
                    ea:b8:0d:d7:bc:5b:86:25:ed:f9:2d:c4:86:ff:b3:
                    b3:da:a6:59:54:b4:91:37:83:e7:13:6c:13:fd:e2:
                    ee:a5:a3:d9:1b:4c:d1:70:83:36:25:fe:bf:9f:4b:
                    18:90:b5:1f:13:bd:a3:fd:d1:c9:8a:91:3e:54:b8:
                    e4:4a:cb:77:f6:09:00:11:d4:5d:1a:f4:aa:02:4c:
                    65:85:35:57:36:40:96:70:b3:66:d8:5b:f2:f0:36:
                    9d:02:9c:3d:81:51:b1:26:42:f3:d8:99:70:94:b0:
                    6b:89:42:b6:f1:56:cf:bb:1a:93:7b:31:f3:39:e4:
                    8d:80:ea:58:ce:be:50:32:0b:8c:4c:d1:4a:45:30:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:98:A5:95:DC:DC:AE:93:1A:8C:42:16:ED:9E:0B:DA:65:21:1D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/c773b116-2cb2-35c9-aff7-f7d221d19bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/e45b2423-bd81-480e-93e3-8cc66e601340.crl

            X509v3 Authority Key Identifier:
                keyid:A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:2020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:7a:f7:a4:2d:d8:a7:6a:db:67:4e:de:ec:04:c7:fb:84:
         90:a7:54:e8:c9:8c:e4:78:7d:b0:0e:f8:99:6a:90:3c:4e:18:
         3e:e7:9d:3b:c8:8b:d1:4f:95:6a:5b:9a:05:a0:37:15:1f:16:
         ba:15:e1:67:0b:f9:5d:0f:24:7a:34:48:4c:91:05:f5:79:d1:
         b8:24:57:09:f1:f5:d8:08:3c:5b:33:67:f9:e3:11:6f:43:e3:
         2c:cf:54:4a:8a:ed:c1:7e:8e:06:64:d1:20:0c:7a:c8:0c:ce:
         f8:60:e6:dd:e3:8b:32:e7:07:8f:21:9d:d6:81:64:f3:f3:2a:
         13:16:98:20:2e:27:37:3e:07:1e:fb:e3:f1:b0:ed:34:11:0d:
         75:80:f0:ee:39:bb:7c:48:42:35:2a:7c:05:b4:59:ed:33:59:
         f6:46:eb:2d:e0:ad:e7:3c:59:f3:83:1e:71:6b:1e:bf:96:10:
         10:82:26:6c:1b:4b:d7:01:0c:7e:51:97:c7:71:b0:0a:e1:5e:
         80:9a:8c:97:45:05:53:2a:df:12:58:c5:b4:33:85:85:72:98:
         b8:00:a6:0f:14:4b:12:51:23:af:ae:1a:68:c2:91:55:3c:bb:
         c6:4a:fb:f1:90:27:21:8b:51:f8:82:f1:ad:c5:1c:f0:cd:59:
         86:dc:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:37 2025 by rpki-client