Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/0774a90b-67ce-3448-ae5c-e58e9653887e.roa
File:                     0774a90b-67ce-3448-ae5c-e58e9653887e.roa (raw, json)
Hash identifier:          1GRS3hwHvh9l0ZPKe2Jglbskmayj6EzXsi2yze0wKPI=
Subject key identifier:   F0:D4:94:88:4E:87:4D:43:E0:AA:EF:C5:1A:BD:63:0B:38:B9:50:CE
Certificate issuer:       /CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18
Certificate serial:       010D0C9F43285848CDD0627D5EAA726650EA1E00
Authority key identifier: 8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/0774a90b-67ce-3448-ae5c-e58e9653887e.roa
Signing time:             Fri 07 Feb 2025 13:27:28 +0000
ROA not before:           Fri 07 Feb 2025 13:27:28 +0000
ROA not after:            Thu 08 May 2025 12:27:28 +0000
asID:                     401489
IP address blocks:        2602:f7d4::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:d0:62:7d:5e:aa:72:66:50:ea:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18
        Validity
            Not Before: Feb  7 13:27:28 2025 GMT
            Not After : May  8 12:27:28 2025 GMT
        Subject: CN=c8f5cea7-c6b1-4b1c-a9fe-f8478b86a39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:8e:3e:b3:51:00:90:87:fc:9d:ed:58:20:
                    7c:2c:6e:4d:73:3b:0f:26:b3:19:e0:74:97:8f:b0:
                    41:5b:48:1e:f6:5c:5a:8f:96:d1:db:54:9a:7a:12:
                    44:e8:d6:42:e5:a7:0f:21:c8:b4:33:49:6f:2c:5f:
                    c1:aa:79:e7:7c:16:da:29:84:69:da:95:2b:be:22:
                    f5:88:f3:9f:10:4b:04:2b:a6:e5:da:de:ef:f2:90:
                    b1:c0:64:8c:0c:08:63:1c:f2:03:ea:14:26:d5:50:
                    8e:7c:48:f2:f2:39:b1:88:f7:b0:73:b1:99:83:10:
                    e4:4a:76:45:3e:3e:c6:d3:a8:32:37:a6:e5:11:a1:
                    02:77:87:12:97:b8:9c:63:cc:3f:90:89:b7:fe:e4:
                    e7:96:22:98:36:f5:29:ce:1a:8d:05:f5:8d:7c:c4:
                    c9:da:66:91:34:ad:ca:f7:7b:09:70:0b:93:30:6c:
                    36:94:4d:59:3e:bc:7f:a6:82:99:ba:82:f2:f6:53:
                    bd:17:2a:d2:1f:52:2e:63:df:63:32:c7:95:c4:96:
                    4a:90:d2:4b:2a:7e:9d:9e:30:38:4e:6e:28:c4:d9:
                    43:3f:e0:74:99:ce:5d:d8:bc:cd:7b:73:2f:4e:18:
                    1a:60:e7:fc:aa:8f:f1:a0:c2:c0:d3:04:63:18:ae:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D4:94:88:4E:87:4D:43:E0:AA:EF:C5:1A:BD:63:0B:38:B9:50:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/0774a90b-67ce-3448-ae5c-e58e9653887e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:61:ce:f5:aa:1a:c0:06:2c:18:60:c8:32:2a:c5:0a:12:e9:
         be:92:c6:65:f4:e7:f9:af:59:d1:07:30:1d:a4:56:c2:62:c7:
         a2:04:c2:c6:34:82:3a:48:74:f2:70:58:4c:ea:37:32:29:03:
         08:25:33:74:93:45:ac:05:19:4b:b7:0f:18:69:3d:ea:48:90:
         bc:64:6b:70:82:c2:7a:b4:57:c8:62:d1:64:5a:83:09:09:bf:
         34:ba:b8:2b:33:96:cb:29:ec:29:9d:37:91:98:56:f9:ee:b9:
         28:6c:6b:34:fe:bc:de:3f:80:c7:1a:65:6c:cf:c3:1a:69:f9:
         79:8f:57:5a:ce:3c:c2:e1:d4:8d:15:43:3e:11:5e:fa:de:d2:
         ef:db:9a:20:4a:86:94:51:b5:fb:21:b0:e3:20:6f:08:2b:b8:
         7e:95:f3:ea:0e:99:0f:fc:92:c9:3a:3b:25:4e:65:a6:68:1a:
         2a:93:82:c0:fb:1c:c8:69:d3:f8:8a:4d:e3:32:8c:1d:ec:1a:
         06:f1:8b:bd:a7:93:db:e1:37:07:6f:d5:57:01:84:b9:b1:76:
         ce:9b:67:e0:93:6a:1c:e8:04:c7:04:b9:5e:0f:d5:9d:8c:d7:
         4d:89:e9:54:23:b1:94:d4:ca:8d:97:69:b2:80:ea:2d:9e:8b:
         fb:99:b3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:22 2025 by rpki-client