Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4bb34237-0994-3f94-9fc0-1daf653dec2b.roa
File:                     4bb34237-0994-3f94-9fc0-1daf653dec2b.roa (raw, json)
Hash identifier:          /MmZT+3u1gOqgHE7Zr+lSzedIFhY9W1RiiLpueGLyGQ=
Subject key identifier:   A4:69:4D:9E:1D:B3:2E:01:50:C5:3E:DF:20:5D:E3:43:5E:11:68:AB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D12B7F64F1CC8305F64770
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4bb34237-0994-3f94-9fc0-1daf653dec2b.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        2605:a000::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:2b:7f:64:f1:cc:83:05:f6:47:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=e573998a-c307-4b74-a185-e4cd9288b859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2b:4f:04:9c:e2:b2:ae:0a:89:ab:79:13:4b:
                    b9:bc:ff:4a:26:b6:01:48:3e:b4:30:17:ce:7e:e9:
                    a2:0e:13:20:9e:ac:61:59:95:5e:75:30:d4:23:f9:
                    c1:16:d0:00:12:4b:33:a5:09:ec:b6:94:28:87:7e:
                    dc:1f:8d:1a:e2:7e:ec:0e:f2:26:d7:8c:b3:c9:83:
                    8d:01:05:f6:ef:51:b5:f5:43:3a:5e:50:51:aa:71:
                    e3:24:c3:1b:bb:bb:6c:c5:32:b0:b0:77:87:5b:a6:
                    0c:a3:82:0e:f2:1e:65:89:19:9b:40:ee:a7:3b:c3:
                    7b:05:e8:87:d1:48:71:f5:b5:33:55:da:02:be:d0:
                    04:67:e9:ed:ff:27:9b:e4:92:15:40:9a:ee:80:59:
                    aa:d0:a6:27:f2:e3:49:0c:3e:6b:99:10:9c:36:43:
                    96:52:bd:6b:41:2e:5f:c5:8e:32:b8:b3:15:45:36:
                    06:8d:d3:28:ee:5f:f7:12:92:ce:6c:25:57:6f:b6:
                    a7:32:2b:c0:46:09:51:23:e2:53:0d:f8:a5:c6:cd:
                    40:cc:92:8d:b3:19:e8:32:88:17:be:51:32:a6:f9:
                    31:b0:93:68:08:88:a4:ea:8c:dd:13:d7:74:98:62:
                    5d:cc:82:e0:d7:01:41:f6:5b:ba:e9:b2:8d:27:4e:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:69:4D:9E:1D:B3:2E:01:50:C5:3E:DF:20:5D:E3:43:5E:11:68:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4bb34237-0994-3f94-9fc0-1daf653dec2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:06:98:54:8c:c2:21:bf:c7:5f:8d:1d:bb:4b:9a:6f:1e:f1:
         e1:e1:bd:3e:b3:9b:c8:7b:0c:72:74:04:a5:a2:d3:9f:72:f4:
         d0:eb:4e:c5:9a:d1:e6:bb:de:b8:08:91:6b:96:91:c2:85:da:
         9c:37:fd:10:85:b1:e1:40:79:24:5f:ad:1e:a8:a5:fd:94:af:
         9b:2e:62:a0:86:a7:de:86:64:42:64:27:17:b1:ff:93:b9:23:
         2b:1a:e3:92:b9:1d:c1:52:82:1e:5c:c5:39:e3:fb:6f:83:ff:
         e0:7a:b4:7a:2d:83:0f:0d:e5:9e:c5:36:eb:6e:52:b0:7d:f4:
         71:ba:c0:b0:fd:c9:7c:46:2f:07:83:46:b5:fa:78:25:32:fb:
         6d:b8:4e:66:0d:ae:32:05:f2:a8:d6:9e:82:ba:2f:3a:61:71:
         31:9e:8f:5e:5d:ed:34:42:13:a7:1d:f1:e8:c7:2a:5d:71:c0:
         43:6b:24:68:aa:be:19:39:0e:f9:d2:94:c8:f9:5e:f4:d0:01:
         ad:d4:d1:6d:e5:74:f2:88:13:c9:81:83:4f:ed:1a:67:60:d5:
         b3:6b:44:d1:62:5d:16:1c:4c:1d:68:3f:42:7e:b4:b9:d2:52:
         9a:32:68:24:23:d9:24:cb:74:f1:cd:46:60:5c:7a:a3:d7:b3:
         c3:f0:26:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:55:25 2025 by rpki-client