Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa
File:                     ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa (raw, json)
Hash identifier:          h6IEyeug2G60061d4Glrr8jxfo1SkpSrEfWtEVatPCU=
Subject key identifier:   0E:CC:FD:52:C1:68:C0:DA:D8:E9:96:B3:2D:F0:3D:56:93:6A:68:8D
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F432858492CAE9C0A47EADF4CBBE29B00
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     397041
IP address blocks:        2604:f740:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:9c:0a:47:ea:df:4c:bb:e2:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=5295e7da-2881-4293-a4c5-51a017fb063c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:49:f5:dc:0a:a2:b7:c2:07:a6:82:53:5e:
                    15:c1:f5:79:c7:77:c4:af:1b:30:43:95:dc:97:dd:
                    10:45:d9:4c:b5:d5:48:54:59:9d:11:80:ed:47:7d:
                    1e:63:9e:69:8d:90:1e:94:35:4e:ed:ba:25:58:b9:
                    f9:c5:27:38:ac:31:07:01:c9:d6:6f:14:f6:49:75:
                    96:88:af:3a:c5:6a:f7:87:44:49:0e:39:40:12:e6:
                    2e:42:b5:68:13:16:85:ca:78:14:56:42:5b:fb:a6:
                    e5:12:57:13:7e:8e:4f:f5:de:8f:f2:9a:cd:dc:14:
                    56:9d:17:95:4d:81:eb:d3:6d:a3:cb:37:7b:c0:85:
                    73:6e:b3:4e:3b:b4:78:9f:9d:d7:5c:ad:70:26:0d:
                    38:b5:e2:6d:a3:c6:a4:d7:1b:30:d3:f7:93:08:27:
                    06:9a:c5:91:b2:c8:cb:cc:f6:43:5f:72:ad:d2:11:
                    e1:0d:30:91:7b:ac:d9:f3:59:a3:4f:31:9f:1a:3a:
                    31:1b:c2:0d:bd:1f:ac:ab:61:80:5f:8c:c1:9f:f1:
                    4f:c0:22:b9:98:27:83:62:0b:6d:58:0d:38:47:7c:
                    8c:e2:f6:5b:0d:39:01:a2:dc:1d:21:1a:cd:3e:bb:
                    c3:01:18:bd:77:79:b0:22:d5:7a:43:30:41:54:a3:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CC:FD:52:C1:68:C0:DA:D8:E9:96:B3:2D:F0:3D:56:93:6A:68:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f7:6a:f7:1c:e1:93:4f:f8:65:3e:45:43:fc:a4:49:1a:da:
         b4:b0:9a:9b:2a:59:5f:4f:52:72:04:5d:8c:d1:4b:a9:5b:1d:
         bd:41:6e:5b:2c:23:df:3b:39:a6:78:2c:ee:6c:c6:3b:26:b7:
         34:9b:56:a3:ee:63:7a:92:62:62:84:66:0c:5e:ca:73:13:5d:
         fd:fe:d2:7c:79:d7:97:6b:bd:7c:b5:87:8e:54:fe:bb:74:67:
         74:bc:13:a2:0c:e4:e3:46:f7:14:59:8e:a2:eb:ce:1c:15:93:
         a3:7d:d3:2e:a6:30:0d:9d:43:5e:62:27:90:f6:09:94:05:b4:
         0b:e8:0b:3f:2f:51:43:b7:ce:08:1d:7e:7f:52:2a:de:fa:1a:
         6a:9d:5f:20:f5:7a:75:af:d5:b3:08:53:c7:27:1a:bd:6a:14:
         93:98:51:5b:d8:83:17:b0:a0:fa:16:35:8f:d4:22:60:0a:83:
         a3:4f:36:4d:03:3a:f6:87:87:7a:70:9d:89:71:5d:e0:22:18:
         e2:2e:ac:30:93:ba:bd:93:6d:af:c6:8c:6f:dc:4c:ae:dc:c5:
         a1:6f:8e:b5:ea:7c:15:89:c8:38:11:a0:9e:54:5b:96:df:17:
         c6:7b:b3:67:2d:ac:bd:81:89:6d:62:69:78:5a:4d:bd:f6:eb:
         10:6f:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----