Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/bf54a114-acdf-31cf-8c91-bc8b56eb7b0c.roa
File:                     bf54a114-acdf-31cf-8c91-bc8b56eb7b0c.roa (raw, json)
Hash identifier:          AebXNzTzaWfjmxxuXbbGZNDiKD8ec61zI9PSSDzqj40=
Subject key identifier:   B8:B2:E9:FF:C1:4A:9E:F3:29:44:59:9F:9A:1C:D2:B7:7A:5E:F4:9C
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F43285848DA70F6DEF26AF73E811B69A0
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/bf54a114-acdf-31cf-8c91-bc8b56eb7b0c.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     398493
IP address blocks:        2602:fd37:301::/48 maxlen: 48
                          2602:fd37:302::/48 maxlen: 48
                          2602:fd37:303::/48 maxlen: 48
                          2602:fd37:304::/48 maxlen: 48
                          2602:fd37:305::/48 maxlen: 48
                          2602:fd37:306::/48 maxlen: 48
                          2602:fd37:307::/48 maxlen: 48
                          2602:fd37:308::/48 maxlen: 48
                          2602:fd37:309::/48 maxlen: 48
                          2602:fd37:310::/48 maxlen: 48
                          2602:fd37:311::/48 maxlen: 48
                          2602:fd37:312::/48 maxlen: 48
                          2602:fd37:313::/48 maxlen: 48
                          2602:fd37:314::/48 maxlen: 48
                          2602:fd37:315::/48 maxlen: 48
                          2602:fd37:316::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:f6:de:f2:6a:f7:3e:81:1b:69:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=020a8f5c-0f66-48a1-8099-83945b463e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:18:88:a2:22:5c:76:b7:d6:0f:b7:50:dd:27:
                    46:bb:00:27:55:78:e3:71:43:96:62:81:a7:95:3a:
                    6a:19:54:50:e4:67:23:4a:91:42:f1:eb:3a:e3:fb:
                    67:bc:0a:79:bd:b5:2b:7f:bc:39:b7:b3:d2:eb:a5:
                    89:ef:3e:22:9c:de:72:9e:d8:42:8d:de:db:30:53:
                    d7:ae:1c:33:f8:11:63:5e:e4:53:ee:cf:c4:34:bb:
                    b3:0d:d0:3d:f2:aa:41:cf:88:5f:30:6e:21:03:dc:
                    5e:a9:2d:9c:8f:cb:fb:bd:c6:58:26:ad:a3:65:3d:
                    0b:e2:45:0c:80:c1:d6:bb:0f:26:c2:2f:80:49:70:
                    66:60:3c:4b:dc:2a:81:5b:6e:74:4f:a7:36:21:26:
                    2a:67:1e:28:55:88:0d:97:f0:79:31:bb:66:0a:92:
                    de:c0:d6:01:86:9a:38:84:14:bf:32:3a:e6:f2:a8:
                    85:c3:2c:fd:eb:c8:24:15:30:17:2b:4b:a3:f0:a3:
                    74:87:35:13:c8:1a:4a:b4:f5:b7:8e:d7:78:1e:e5:
                    b6:47:57:58:6d:5e:d0:e3:93:70:3d:aa:87:ac:e3:
                    30:06:c6:70:92:29:77:c5:40:73:cf:08:27:ce:6f:
                    7a:93:73:0b:4e:b6:40:04:37:9c:3b:46:dd:1f:a9:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B2:E9:FF:C1:4A:9E:F3:29:44:59:9F:9A:1C:D2:B7:7A:5E:F4:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/bf54a114-acdf-31cf-8c91-bc8b56eb7b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:301::-2602:fd37:309:ffff:ffff:ffff:ffff:ffff
                  2602:fd37:310::-2602:fd37:316:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:99:82:e1:a7:cc:38:d1:50:a1:15:f1:38:65:e8:aa:42:
         32:02:a7:e5:60:5a:4c:48:d8:c9:48:0b:82:77:48:d4:68:53:
         75:be:0a:09:08:c9:64:1d:19:a4:ae:e0:9b:e2:7f:b8:99:2c:
         31:40:c3:58:6f:2d:11:3b:9c:27:a7:52:de:ce:b2:cd:23:95:
         c9:7a:f6:f1:d2:fc:e6:eb:91:d3:7d:9d:62:d5:39:2f:1c:6d:
         94:5b:8b:76:31:ff:98:e9:71:99:ee:cc:e9:b8:ad:c0:5d:20:
         9f:c2:7f:12:f8:b6:d2:c6:46:3e:ea:4c:a3:2f:ff:ab:5f:7f:
         66:ae:ba:fd:45:33:4d:3c:bd:3f:0d:ec:fc:39:3a:af:b4:a4:
         68:1b:24:5a:8c:70:9a:15:28:9e:b4:dd:72:6f:00:39:44:e4:
         71:62:37:f0:d1:48:49:4e:cc:b4:9a:82:fc:f6:19:ae:ea:73:
         a8:51:79:b8:af:3c:2d:c1:17:c5:a8:10:5e:ae:f9:20:6b:9e:
         68:4c:96:f0:06:3b:56:fe:cc:50:49:fb:9d:b8:1a:40:03:f5:
         81:39:bd:64:96:8e:18:b1:b1:18:74:89:ad:54:56:30:2d:92:
         8b:a8:4a:62:d5:1e:1e:3e:d2:c7:a2:89:a9:f3:9d:c1:d7:63:
         c3:fa:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:06 2025 by rpki-client