Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/12e5bb8b-9c46-37f4-bb3f-54d127222bef.roa
File:                     12e5bb8b-9c46-37f4-bb3f-54d127222bef.roa (raw, json)
Hash identifier:          udlPIPzurLii03aLqKq2wBbEhVE1CuMIKfACHEdTufk=
Subject key identifier:   54:31:5B:9B:CE:43:82:B1:DA:17:7D:22:B7:63:6C:3D:EE:F5:D6:07
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F43285848D0ABABCED063B006525AD490
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/12e5bb8b-9c46-37f4-bb3f-54d127222bef.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2602:80a:2001::/48 maxlen: 48
                          2602:80a:2002::/48 maxlen: 48
                          2602:80a:2005::/48 maxlen: 48
                          2602:80a:2006::/48 maxlen: 48
                          2602:80a:2007::/48 maxlen: 48
                          2602:80a:2008::/48 maxlen: 48
                          2602:80a:2009::/48 maxlen: 48
                          2602:80a:200b::/48 maxlen: 48
                          2602:80a:200c::/48 maxlen: 48
                          2602:80a:200d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:ab:ce:d0:63:b0:06:52:5a:d4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=29f63130-20d6-4c5a-8dab-0887abc9c543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:b9:79:4e:e5:9c:50:51:33:79:fa:29:f6:
                    27:bc:f5:b8:b1:16:03:0e:51:b4:ab:81:58:cc:4a:
                    cf:71:c1:bc:ad:29:67:a9:ce:69:8f:7b:7e:a7:2e:
                    06:1f:e3:5b:a6:33:d6:84:b4:01:fe:ad:11:e1:ef:
                    1d:b2:fa:41:07:83:c4:05:2e:d2:70:50:bf:57:48:
                    f9:da:bf:c1:64:6b:86:43:b0:31:0b:f2:13:75:d4:
                    f4:f9:80:26:31:c2:69:cb:32:38:d2:5c:4a:c2:45:
                    91:86:d6:52:ac:4a:cb:c6:84:de:b4:15:cb:64:d3:
                    8e:6e:64:39:76:7f:30:90:cb:c6:76:ed:86:f6:f0:
                    28:99:68:ce:62:fd:7b:0e:af:2f:7b:02:d9:56:b5:
                    a0:2b:b7:73:33:7b:21:76:79:2c:70:d0:b8:e9:8d:
                    a9:ea:4f:35:19:2d:ec:e7:a0:64:02:f4:c1:fa:a0:
                    ac:b7:1a:91:ee:f5:26:0b:2b:db:09:5a:ff:53:62:
                    c0:ec:ae:98:6f:d2:63:d9:d2:68:c7:39:4b:18:16:
                    ff:ca:8a:53:ce:28:35:ba:96:dd:a2:ae:01:7c:bc:
                    84:47:65:26:9f:b7:4d:63:7c:f8:be:d5:04:7c:67:
                    ff:9c:f6:d7:3c:36:86:89:6f:a9:3e:1a:9e:1a:1b:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:31:5B:9B:CE:43:82:B1:DA:17:7D:22:B7:63:6C:3D:EE:F5:D6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/12e5bb8b-9c46-37f4-bb3f-54d127222bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2001::-2602:80a:2002:ffff:ffff:ffff:ffff:ffff
                  2602:80a:2005::-2602:80a:2009:ffff:ffff:ffff:ffff:ffff
                  2602:80a:200b::-2602:80a:200d:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:48:10:12:34:b2:4e:bf:c0:f4:dc:4d:7e:17:8d:2e:9b:7a:
         e9:6f:f6:1b:69:13:4e:1d:f4:16:10:45:8c:2b:f7:55:aa:6a:
         d7:ed:a9:00:4d:b2:26:f4:4d:7e:08:1c:eb:f6:8b:19:02:e7:
         d8:ce:31:ec:67:06:20:78:26:8c:06:df:ff:d1:f4:6c:fb:10:
         2e:e2:01:54:1d:98:49:f2:45:f2:b0:6a:33:44:53:3b:c6:47:
         70:8d:2d:c1:7e:06:14:10:43:d1:11:76:4a:53:69:28:8d:ab:
         1e:d2:b6:3e:c9:66:17:d2:0c:b5:fe:fb:0c:25:b9:39:80:b0:
         4a:a6:24:59:8d:a9:e8:be:f1:ba:9b:09:49:08:80:5f:fb:6e:
         e8:66:44:a7:b6:bb:78:7b:92:d9:c8:03:ef:13:34:92:d8:65:
         02:9c:b8:d6:15:20:d2:f5:d6:4c:fa:c3:08:a3:f7:94:83:95:
         3a:01:6a:c7:f1:22:fe:39:4c:c3:67:42:be:83:a1:47:7e:40:
         dc:b9:ac:58:08:3d:a2:a3:47:9f:22:61:9c:e0:26:67:b1:01:
         81:1c:c5:1e:4c:4e:82:b2:d3:fe:76:fa:4e:31:3a:96:ca:18:
         61:0d:e1:d7:82:85:aa:e7:bd:ef:cd:69:af:cb:e5:1c:f4:0e:
         ca:b5:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:14 2025 by rpki-client