Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa
File:                     a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa (raw, json)
Hash identifier:          2EdJKSMhObNLbkYuTdVNtwlmk3SMnJwZayX3UdPpQbA=
Subject key identifier:   16:42:E4:1A:DA:2D:15:07:16:34:B7:C6:46:CB:C8:FE:D0:CA:A0:06
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A315D229A8B86DB3E1EA4100
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa
Signing time:             Thu 23 Jan 2025 06:07:37 +0000
ROA not before:           Thu 23 Jan 2025 06:07:37 +0000
ROA not after:            Wed 23 Apr 2025 05:07:37 +0000
asID:                     19165
IP address blocks:        2604:5500:3000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:15:d2:29:a8:b8:6d:b3:e1:ea:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 23 06:07:37 2025 GMT
            Not After : Apr 23 05:07:37 2025 GMT
        Subject: CN=895c1fb6-bddf-4f1f-80d4-d9a36d6c3668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:63:78:75:54:09:b5:46:a5:c4:99:81:a1:
                    5e:89:c6:49:e9:61:52:67:ea:b6:04:a7:b9:35:ba:
                    fc:34:5f:96:32:d0:e6:cf:74:5d:60:e9:14:5a:70:
                    98:f5:09:0b:f1:7a:55:e6:1e:de:5c:03:d7:67:81:
                    a0:5b:4c:25:0c:23:c8:91:3c:ad:24:cf:78:bd:80:
                    bc:23:21:a0:f6:a5:cb:6d:3d:02:ce:fa:c3:f2:9f:
                    ba:8a:8e:b3:62:de:88:fa:8a:28:8c:df:00:a0:ef:
                    4a:53:69:26:64:50:43:6a:37:3b:b0:6b:9f:2a:a5:
                    66:68:69:29:f3:07:94:cb:33:40:ca:a5:99:df:db:
                    62:86:08:64:57:6d:88:80:ca:b0:f8:6a:26:4e:8f:
                    94:27:d7:9a:0d:b8:75:8b:8c:37:e3:66:05:66:fb:
                    e8:87:a1:86:2a:0b:a1:91:e5:48:85:3b:97:3f:5a:
                    f6:6d:55:eb:6d:71:ef:12:3d:57:ef:51:57:a0:e0:
                    dc:d1:9a:4a:a0:c0:f3:c5:99:60:db:e9:a3:92:47:
                    db:b8:e9:e6:85:ed:f9:19:74:6c:16:86:c7:52:58:
                    9d:e9:2e:b4:d3:ba:b9:1a:7e:e7:ff:00:21:13:3d:
                    d4:a4:1f:6b:e6:ee:de:16:9c:8c:11:d7:ea:c8:38:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:42:E4:1A:DA:2D:15:07:16:34:B7:C6:46:CB:C8:FE:D0:CA:A0:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:4f:b3:64:bb:5f:9d:7e:70:1b:ba:99:d4:3a:98:1a:41:f1:
         e3:36:f0:09:78:44:af:28:48:bc:9d:f9:e7:96:79:a6:bb:18:
         e4:0d:65:07:13:e6:e9:78:44:46:56:e2:07:d0:4a:c6:ad:c0:
         cf:cf:79:4a:2d:30:7f:79:3a:15:89:92:f5:dd:5a:74:f2:2b:
         12:b5:ee:b5:b4:13:71:4c:a9:08:0a:1a:d6:2c:21:8a:2a:08:
         9e:30:aa:99:60:c4:83:6c:e5:5b:b2:00:de:d1:0a:6c:21:48:
         33:9a:f4:a0:42:d9:c4:74:31:b6:92:48:3d:5e:78:30:f9:2c:
         7e:43:07:e6:82:b1:8b:f0:2b:5d:3e:71:35:fd:22:37:7a:b1:
         9c:f9:7f:9f:5e:c9:6f:cd:2f:1d:57:25:8d:85:a8:3c:b6:5f:
         46:6d:0d:7f:7a:f6:da:16:c4:05:5e:02:d4:86:9c:5f:99:aa:
         fe:b3:c1:75:41:e2:de:63:98:c9:7f:2a:f7:cb:d9:4c:08:a8:
         32:92:eb:e4:18:b8:ac:4c:8d:bc:8b:74:84:e9:4a:78:ef:7b:
         a6:2d:ed:ae:b8:8e:9a:ca:16:c2:a5:6d:56:11:0e:97:8d:4d:
         7d:04:ca:4f:e2:72:b1:ce:d5:32:88:61:a5:db:f1:8f:82:d4:
         82:af:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:32:02 2025 by rpki-client