Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1c3866cd-264e-3add-bc34-f053e76d5e30.roa
File:                     1c3866cd-264e-3add-bc34-f053e76d5e30.roa (raw, json)
Hash identifier:          hFQb3wpS2u+dD8mX1F1ffwgpGT9Ihv+j7bBbUp0QvUU=
Subject key identifier:   48:9E:F4:F6:A9:0D:B3:EE:3D:56:3B:E2:24:72:5A:7D:54:0A:34:3C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B35B636F71B2F51773374690
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1c3866cd-264e-3add-bc34-f053e76d5e30.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     852
IP address blocks:        2001:56b:9fe0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:63:6f:71:b2:f5:17:73:37:46:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=6417f0f0-43e8-4f38-99b1-bd8cfff8028d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:07:12:1e:19:42:0b:8e:ac:3a:70:a1:c0:
                    6e:76:cf:cd:bd:fb:14:83:a0:e1:57:a6:51:cd:e7:
                    1d:9c:02:7c:c2:63:ff:6f:d2:55:cb:c9:b0:88:1c:
                    78:bc:cb:a8:58:7f:dc:99:eb:6a:de:bb:e6:3d:de:
                    3f:6f:91:eb:9c:c1:7d:91:dd:cd:41:09:59:4d:bb:
                    a0:4e:f2:88:e3:d8:2d:4d:6a:ed:d0:b2:30:93:d0:
                    2c:cf:a2:1b:6a:3a:6e:bf:bf:b9:e1:11:54:44:47:
                    f0:14:11:2b:10:7f:d4:bf:e4:e4:a6:f2:6f:d6:c6:
                    fe:0e:ca:be:87:5e:fa:d2:b4:29:6f:d0:08:d3:39:
                    f8:11:54:1e:59:5e:13:28:3a:20:db:28:15:1d:3d:
                    b5:f3:aa:28:62:b2:0f:dd:5b:21:ca:2d:b5:d9:8e:
                    e8:85:b8:37:84:db:ef:81:59:61:07:7a:8a:8e:31:
                    90:10:ec:b4:12:5f:4e:01:8f:53:88:00:6f:79:60:
                    0b:28:37:ba:d8:d8:36:ee:6f:55:e3:7e:a5:37:a7:
                    44:60:1c:86:f5:de:5d:2f:a6:28:4b:17:15:cb:82:
                    20:9f:27:47:91:7b:b1:cd:5e:0e:31:12:c6:b2:7f:
                    e8:7a:fe:f4:1e:39:c3:eb:77:84:c3:16:42:90:0d:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9E:F4:F6:A9:0D:B3:EE:3D:56:3B:E2:24:72:5A:7D:54:0A:34:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1c3866cd-264e-3add-bc34-f053e76d5e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b0:6b:a3:a8:4c:3f:7e:d5:2e:29:8f:4a:d3:16:29:b2:ae:
         9d:3b:c2:92:f1:1c:17:72:de:62:ab:92:52:f4:95:77:88:71:
         37:5a:a3:6f:9e:c7:b5:cd:c3:31:b0:e5:d2:73:06:db:10:6e:
         90:88:7b:b9:14:de:f8:80:8b:70:86:42:96:cf:b6:bc:94:b9:
         03:c5:6a:db:e5:ee:a8:ad:bc:fe:4d:ec:be:3b:04:00:8d:27:
         5a:64:c4:02:2b:f1:9a:c9:16:00:cb:74:c1:fd:87:b4:f7:1d:
         23:32:48:2d:21:f4:5e:9c:43:d8:01:c2:ba:61:f5:9b:a7:c2:
         fc:b2:47:f6:69:aa:83:c8:ce:76:6a:65:eb:5b:6b:dc:43:a6:
         f2:f7:f9:f6:d4:50:14:c9:08:6d:90:38:75:c4:3a:b9:4c:ed:
         4b:27:e7:84:09:79:a8:1c:87:09:9c:7f:3b:5c:3b:44:55:51:
         3c:b0:6f:26:b1:84:9e:82:01:8c:35:7c:2b:ee:0a:61:7f:21:
         6a:e3:d1:cd:9e:ff:8d:68:43:ba:a5:ca:40:13:38:33:06:90:
         ce:4d:bd:fd:cd:fc:00:e3:13:c8:e5:b1:0f:3b:03:39:2e:6b:
         37:52:c0:4d:8f:12:81:a5:fa:96:70:66:cd:96:08:5b:da:2b:
         f2:3d:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:13 2025 by rpki-client