Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/22437d70-347d-3001-b343-e9adbcc12346.roa
File:                     22437d70-347d-3001-b343-e9adbcc12346.roa (raw, json)
Hash identifier:          5tzOQoW/4vrcKvvZW8YE913AruM4wcP5EtvxypZSElE=
Subject key identifier:   C5:5F:55:E8:2B:8C:29:3B:BA:51:03:E4:23:64:56:89:E9:96:DA:EE
Certificate issuer:       /CN=52719fb1-2762-4690-98c1-ed95cc4b2f56
Certificate serial:       010D0C9F432858489075FC38BEDE5D5A26216800
Authority key identifier: 0F:C5:82:FE:6F:02:D4:32:1A:08:30:24:55:C0:55:5A:23:ED:4E:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/22437d70-347d-3001-b343-e9adbcc12346.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     8173
IP address blocks:        2602:f860::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:fc:38:be:de:5d:5a:26:21:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52719fb1-2762-4690-98c1-ed95cc4b2f56
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=9c79035d-4526-4ad1-9d18-a9dd8a9eb65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:1c:9f:c3:15:c8:06:38:72:83:ff:98:dd:
                    21:3a:89:21:eb:ed:09:8e:70:09:67:cf:44:03:f4:
                    8e:f0:35:1e:50:ee:a9:9e:d2:54:c7:dd:4e:52:fc:
                    b7:de:a5:01:22:8f:0f:a5:62:81:18:81:39:c2:07:
                    6f:4e:4c:a3:e7:bd:79:d8:fe:82:1b:e4:c3:c3:14:
                    68:de:3d:d5:e3:75:3a:31:16:0f:13:77:e5:b2:51:
                    e2:5d:7d:52:d4:2a:2c:60:42:03:02:82:81:cd:2f:
                    1d:81:6d:57:14:72:98:68:aa:5a:39:76:31:34:ce:
                    f7:cf:0c:57:4e:5a:49:97:f9:84:23:3d:e5:71:a0:
                    2e:34:d7:33:f1:c7:6c:0c:02:1b:9d:3b:a8:a6:3b:
                    ea:f9:86:f1:56:7a:4d:2f:3c:74:0b:a1:97:db:dd:
                    7e:e3:89:69:90:0f:a8:b4:14:42:70:d5:24:45:4d:
                    5b:3c:a0:10:3b:e3:9a:7e:25:a6:f1:c1:f8:c3:8d:
                    6c:5b:5c:0a:06:a9:40:78:9d:5f:38:6f:04:16:63:
                    6f:1b:55:22:1e:01:eb:bb:29:6a:c6:30:f4:a3:22:
                    74:3e:82:27:03:94:8f:41:e1:62:c5:dc:6d:fd:8f:
                    13:6c:eb:89:dc:6a:ff:f0:63:49:ae:48:f2:0a:61:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5F:55:E8:2B:8C:29:3B:BA:51:03:E4:23:64:56:89:E9:96:DA:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/22437d70-347d-3001-b343-e9adbcc12346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/52719fb1-2762-4690-98c1-ed95cc4b2f56.crl

            X509v3 Authority Key Identifier:
                keyid:0F:C5:82:FE:6F:02:D4:32:1A:08:30:24:55:C0:55:5A:23:ED:4E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f860::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:34:9f:2b:55:13:2f:0d:c1:c5:45:ff:af:94:9e:f3:24:e4:
         94:16:a4:3f:83:e4:f7:09:f4:01:f0:0a:05:0c:43:c4:a3:e8:
         1d:3c:d5:bb:e1:57:ef:87:46:5f:be:f9:00:1e:e4:5b:80:d2:
         45:77:96:b0:28:1b:5b:4e:32:c3:84:b8:19:88:ca:41:29:26:
         47:02:06:df:6a:e6:17:4b:5b:70:9d:52:e2:c2:05:52:62:73:
         ef:ec:54:98:8a:a7:6c:47:77:90:14:69:80:e7:09:29:1c:ff:
         d7:75:e2:aa:ff:5c:d6:24:47:1a:e6:6a:3a:5c:33:12:8f:6d:
         e1:c7:ee:4e:10:04:15:0f:f1:6f:46:28:59:a4:29:f0:c7:e6:
         29:3c:aa:06:0c:49:b8:6b:d5:ab:5f:a1:22:7f:cd:98:49:16:
         d1:f4:81:a5:fc:a6:e6:7e:c5:a8:e1:d5:57:7e:41:1f:d9:76:
         e0:28:85:89:70:9d:00:4f:ac:0a:f9:c7:d6:23:42:2d:70:00:
         bc:e7:a0:02:77:64:92:cc:69:6f:cb:c7:74:9c:68:19:e5:b2:
         17:9e:1f:9d:7c:5c:f1:02:c0:2a:bd:6e:b5:0a:07:2c:db:9f:
         31:fe:65:ca:66:1c:44:72:d5:01:df:0f:b6:a6:89:1b:af:9f:
         03:3d:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:46 2025 by rpki-client