Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632/42dae4c5-11eb-358b-8c8e-c835d0cdb121.roa
File:                     42dae4c5-11eb-358b-8c8e-c835d0cdb121.roa (raw, json)
Hash identifier:          qEGrYrFoPnlHYWQrO/9P1qMSoP9OzG854/H/KbP3IPc=
Subject key identifier:   7B:B5:6D:52:9F:60:6D:3C:0B:A5:6F:D4:40:39:04:81:46:F6:6B:A5
Certificate issuer:       /CN=e7bfb575-94f7-4f8c-923b-dc42cd2ac632
Certificate serial:       010D0C9F432858493A65CAA5444947849FB21800
Authority key identifier: CB:5B:4D:FC:6E:47:4B:EA:30:9C:9B:CB:29:5C:CB:F8:99:01:B5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632/42dae4c5-11eb-358b-8c8e-c835d0cdb121.roa
Signing time:             Tue 18 Mar 2025 10:55:48 +0000
ROA not before:           Tue 18 Mar 2025 10:55:48 +0000
ROA not after:            Mon 16 Jun 2025 10:55:48 +0000
asID:                     23532
IP address blocks:        2602:f8fd::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:65:ca:a5:44:49:47:84:9f:b2:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7bfb575-94f7-4f8c-923b-dc42cd2ac632
        Validity
            Not Before: Mar 18 10:55:48 2025 GMT
            Not After : Jun 16 10:55:48 2025 GMT
        Subject: CN=cc948aea-e786-4376-b088-96fbd846985e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fe:20:08:fc:1b:68:25:a0:ce:00:63:15:22:
                    0a:39:1f:01:b6:18:35:09:0d:2c:91:24:7e:7d:1c:
                    80:99:3e:23:5d:de:78:9c:57:09:8a:a7:ec:a2:88:
                    73:09:2f:5e:3a:07:80:c3:f4:5f:b9:09:54:56:fc:
                    13:cc:09:36:96:35:3d:7a:97:6c:cf:17:e3:b5:9a:
                    c5:b3:e7:28:59:7e:ce:57:ac:79:00:4f:46:fe:d3:
                    c5:53:c4:23:7f:43:fe:51:a3:71:d1:03:da:10:37:
                    14:8a:97:51:3c:c8:75:7c:0b:c4:26:61:c6:7c:e1:
                    d4:35:57:bd:18:61:e6:05:54:f7:1e:7f:39:39:34:
                    d4:04:a6:7f:a7:a0:90:a4:ad:83:bb:7c:d8:52:66:
                    49:c6:56:62:f9:a8:9e:d4:8b:76:02:5f:a1:73:0d:
                    64:12:62:6f:ff:67:8c:ad:f1:0d:5f:14:f6:b5:1c:
                    e0:dd:71:fd:39:54:9c:63:9b:da:58:81:d1:b3:64:
                    b0:aa:2b:4d:7d:b8:38:1b:25:2b:de:68:c4:d4:89:
                    63:8f:7c:fe:46:3f:27:03:c2:3e:25:4b:41:a6:c7:
                    99:4a:75:a4:c7:cc:92:c6:98:fa:aa:d0:7b:e6:48:
                    06:79:3c:c3:37:5e:12:f2:4b:42:25:53:79:3c:cd:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B5:6D:52:9F:60:6D:3C:0B:A5:6F:D4:40:39:04:81:46:F6:6B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632/42dae4c5-11eb-358b-8c8e-c835d0cdb121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632/e7bfb575-94f7-4f8c-923b-dc42cd2ac632.crl

            X509v3 Authority Key Identifier:
                keyid:CB:5B:4D:FC:6E:47:4B:EA:30:9C:9B:CB:29:5C:CB:F8:99:01:B5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8fd::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:12:d6:eb:54:81:bc:3f:c3:af:46:fc:c5:f8:60:cb:62:
         f7:45:d6:f1:af:cd:26:a5:03:b5:3f:fb:d0:22:71:da:c8:6e:
         90:1c:7e:dd:5e:d3:13:c8:ec:e0:96:84:05:4f:c4:93:38:22:
         2c:c7:e1:95:2f:c3:a0:41:5b:2b:5e:f0:34:f8:22:18:ea:1e:
         60:4b:e0:35:f0:a6:7f:ce:e2:65:c8:d1:fe:08:f5:a0:1d:25:
         19:b3:c0:6b:5b:79:d5:2d:ae:cf:97:f5:6f:b4:1e:18:f9:38:
         4b:2b:6e:87:c9:64:eb:6e:77:32:c4:1e:4c:59:25:bc:93:01:
         d8:ca:24:5b:8a:eb:50:22:c0:b7:04:7a:ef:8f:dd:63:ad:a1:
         2a:00:7e:2b:91:70:12:ee:f0:88:f9:cf:83:87:14:2f:b0:ac:
         a0:4d:a4:c3:c5:2d:df:c0:a8:3f:62:52:81:d0:fd:4e:6c:79:
         b3:51:5f:19:ff:6a:c0:ab:2f:03:fe:44:68:a1:0d:88:28:95:
         9d:99:7e:7f:09:d6:bd:f4:8a:61:1d:00:9f:56:6a:0f:ed:f3:
         52:67:3c:56:4d:ba:16:8c:34:9b:26:36:68:fa:1a:b7:36:79:
         1e:d3:5b:08:1a:8d:69:fd:ae:d0:e3:eb:ad:88:48:a0:91:5d:
         5e:f8:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----