Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/6cbcec62-5efe-3930-b625-9f9f3ae37e90.roa
File:                     6cbcec62-5efe-3930-b625-9f9f3ae37e90.roa (raw, json)
Hash identifier:          2SYktQjjiaS4Q87gELwV8dkxeXSHniz8H/BLz/kj0/4=
Subject key identifier:   5E:31:9E:AF:19:55:51:D2:98:D0:F2:B1:2C:6B:0C:27:F4:42:7C:F2
Certificate issuer:       /CN=23b53d83-5e68-43e6-b5fe-78a2c4546546
Certificate serial:       010D0C9F43285848ADC607D596DDC9A1E7CCE280
Authority key identifier: FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/6cbcec62-5efe-3930-b625-9f9f3ae37e90.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     13737
IP address blocks:        2602:f7a6::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:07:d5:96:dd:c9:a1:e7:cc:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b53d83-5e68-43e6-b5fe-78a2c4546546
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=cf6cfb92-5f2f-4e41-9d75-181e78e3786c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b0:88:b5:29:28:f7:58:cd:c9:17:f3:cb:26:
                    26:63:02:37:31:0b:45:d8:81:e9:58:55:c3:6f:53:
                    84:fa:c9:7e:18:25:4f:c8:53:63:fb:0f:b7:a0:dd:
                    7a:da:ad:ca:6d:c4:57:e8:08:78:21:76:1d:75:41:
                    3d:82:87:1a:c4:2e:32:52:f2:25:d7:b1:84:d2:79:
                    6d:0c:88:9f:dd:19:37:0d:53:da:8f:06:06:0b:52:
                    28:fa:53:d2:0d:67:16:ab:de:27:aa:79:49:99:88:
                    8c:84:22:48:9c:41:ac:a6:75:96:a3:c9:d8:7e:eb:
                    9c:66:30:e4:18:5d:b8:cd:cc:a6:49:01:62:53:c8:
                    af:67:6c:1f:d9:0d:36:aa:9f:6e:75:e5:4c:10:72:
                    c1:77:59:56:74:30:e6:91:58:b0:01:91:00:8e:bb:
                    27:0b:79:ee:dc:49:4b:27:34:ac:b6:a9:97:c1:8f:
                    81:95:d1:5c:85:a9:db:c1:44:d8:05:af:ae:1c:7e:
                    db:e0:41:67:ec:80:31:12:8a:66:48:f8:4e:57:7e:
                    e5:f5:15:d9:b2:86:78:eb:c6:13:a9:47:0e:d0:41:
                    a5:ad:9f:27:29:ec:a4:8c:7d:d4:01:bf:7d:9c:7d:
                    a0:74:ea:ed:18:e1:45:12:e0:74:7a:f1:e4:c9:ea:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:31:9E:AF:19:55:51:D2:98:D0:F2:B1:2C:6B:0C:27:F4:42:7C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/6cbcec62-5efe-3930-b625-9f9f3ae37e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl

            X509v3 Authority Key Identifier:
                keyid:FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ab:ed:88:4b:b2:82:37:19:6d:88:97:94:9e:23:2a:bb:6e:
         ba:42:b4:b1:42:70:89:fc:e1:75:0d:82:4f:e2:49:c9:ac:57:
         28:d7:a6:35:e4:cd:52:c3:a9:d6:73:9d:4f:ed:3a:76:c2:57:
         a1:0f:97:93:85:cd:67:89:5f:ec:d5:74:18:27:8d:53:a0:65:
         74:e3:98:70:15:90:f3:b5:29:ef:22:27:61:6b:52:8a:19:19:
         11:3b:20:16:09:98:5b:ef:39:89:94:d8:35:d3:37:0c:df:a7:
         5a:45:f4:8a:26:2e:8b:1c:ca:dd:b1:13:1c:99:58:02:63:18:
         05:bb:e4:86:fd:31:05:ef:d1:da:e2:3d:9e:de:85:1d:74:50:
         1b:3b:d7:c2:2a:40:88:76:fc:af:9a:45:14:de:4e:f4:ba:2d:
         68:29:db:05:9d:e5:65:7a:5b:91:ab:1a:be:a9:69:bb:ba:a0:
         fb:8d:b8:e6:02:50:59:35:4e:8f:65:13:86:88:2d:ba:01:74:
         01:e2:22:cc:4a:ea:60:f4:75:82:b3:56:08:c3:7b:33:87:c8:
         de:1c:6d:31:21:9c:6a:7d:b1:65:92:c7:de:9a:c6:ea:1f:93:
         25:df:0b:d1:2b:8d:19:d3:4a:0e:6d:e7:ff:71:cb:16:26:94:
         79:cc:c7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:33 2025 by rpki-client