Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
File:                     2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa (raw, json)
Hash identifier:          s7e8/QpUf3xO/nxDiNUkHXgr87b0nsjtyBZhaz8YlhU=
Subject key identifier:   D7:42:C6:76:4D:A3:16:3E:70:73:70:6E:3C:FD:7F:DC:29:33:73:F8
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285848A830A710760F9D45559C7F80
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     57439
IP address blocks:        2605:f440:53::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a7:10:76:0f:9d:45:55:9c:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=ea2b5786-7b05-4db3-87f7-fa1e417bd999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:23:f9:4e:6c:70:9d:99:b8:ec:82:e9:36:
                    5a:a8:3d:97:88:66:0e:2f:bb:aa:bb:49:85:f8:a4:
                    a4:60:75:e3:46:96:3b:96:1a:3c:db:f9:58:ad:2e:
                    bc:98:e8:aa:8e:7b:43:f7:94:a0:f8:7b:97:fb:4b:
                    7a:21:e0:0b:7e:27:6f:66:41:d2:bf:74:0c:b9:86:
                    dd:b3:eb:7c:80:57:10:17:2a:7c:32:1e:1f:5c:b0:
                    51:4a:bc:6a:37:5c:5a:81:28:77:ee:a6:db:b2:dc:
                    b8:f3:9e:06:57:5f:b6:4e:85:4e:7a:2c:57:c1:e6:
                    42:f7:f0:27:3b:d5:02:1e:57:03:c8:f0:4f:4f:5d:
                    fa:76:77:66:01:e0:f6:8e:ec:f7:99:63:3a:3a:6e:
                    1b:44:d8:c9:8f:8e:3a:72:85:da:25:c7:ac:33:38:
                    eb:31:b5:cf:3b:15:cd:96:b7:18:01:e2:a8:96:94:
                    9b:54:3f:ba:5c:63:d3:d2:fd:c7:b7:3c:ce:21:4d:
                    b6:2d:7b:3d:4d:87:82:56:b2:6b:21:61:b6:fe:58:
                    1b:81:05:1d:6b:1b:9d:a0:88:1a:3f:f1:a8:66:a8:
                    9e:ef:b3:de:62:6e:8e:98:bf:18:2a:f0:2c:c7:4a:
                    fc:ea:30:55:70:b0:30:ff:89:8f:5c:42:32:9c:3f:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:42:C6:76:4D:A3:16:3E:70:73:70:6E:3C:FD:7F:DC:29:33:73:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:fd:1f:f5:6b:2a:f2:62:39:b8:bd:0c:59:9f:58:34:8b:05:
         25:87:23:20:ae:4b:90:0d:6c:43:80:55:d5:aa:fc:63:64:4b:
         2d:26:54:0e:ae:48:71:d4:05:1f:cf:72:61:37:26:a7:00:0b:
         91:2a:62:d9:11:02:4a:83:f3:e2:d4:08:d3:58:8c:cd:a4:3a:
         6d:a2:69:37:24:b4:dc:82:c6:d7:f9:3d:09:82:35:68:97:5a:
         6a:9a:48:d3:69:42:0a:21:ea:e9:d5:dd:a0:2a:b4:64:4c:00:
         d7:f0:b8:44:55:92:5f:da:8e:b0:52:28:1f:ef:ff:7a:98:f0:
         67:86:46:a4:bf:f4:36:fc:8a:38:2d:c8:e5:a0:79:a9:d9:d1:
         d7:49:28:3c:10:04:fd:e3:23:58:c3:d4:1b:a2:1a:83:ea:77:
         7e:73:4d:51:d5:9c:13:11:3a:7c:ab:91:8b:e1:26:e4:9a:e2:
         a9:64:4f:79:e1:5f:87:43:89:ad:8a:cc:dd:ed:1c:a2:19:2b:
         39:ef:e0:1d:48:e9:40:da:9b:18:8c:16:44:c3:85:25:35:2c:
         92:75:22:9a:2e:7c:bb:90:10:e7:ba:e3:5a:42:6e:41:6e:4e:
         de:52:a6:24:14:b5:21:27:e4:60:18:0c:f7:2c:d6:6c:be:b7:
         9f:51:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:44:10 2025 by rpki-client