Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/20fd783a-f6e0-312e-bd39-483e8ce8931d.roa
File:                     20fd783a-f6e0-312e-bd39-483e8ce8931d.roa (raw, json)
Hash identifier:          lbyQqeEhQ7Ki9O93tVDBBz7PfbJ2soEsIm95axQi1oI=
Subject key identifier:   CE:FE:34:F2:84:54:F0:9F:68:36:14:95:E8:52:5E:47:58:BC:9A:7C
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F43285848BBBB80C192C0978ECAE04C00
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/20fd783a-f6e0-312e-bd39-483e8ce8931d.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     399122
IP address blocks:        2602:fcd5:2e::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:80:c1:92:c0:97:8e:ca:e0:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=3c789665-57aa-4361-8af3-4185c2529cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:f0:60:f6:5d:86:31:ac:9e:fd:41:51:f2:
                    79:41:6f:c8:99:5e:1c:68:14:32:1c:50:9b:72:1b:
                    5d:26:52:98:a3:f4:7d:7c:3d:3a:58:65:ec:13:86:
                    fd:69:d6:db:89:5b:6a:7d:10:e0:9e:b1:4b:46:4c:
                    c1:25:96:16:ed:c8:b3:f6:a6:be:59:fd:f6:d2:9c:
                    11:82:55:b2:1b:27:21:f5:99:6d:1a:38:e2:fc:8c:
                    91:81:ec:6c:04:3c:68:89:da:d1:f9:d8:70:57:06:
                    d4:50:fb:e1:ba:88:7a:27:f8:0e:e5:fe:16:53:50:
                    69:c9:c9:5c:76:a0:ec:4c:4d:4b:09:f0:27:29:0a:
                    5f:24:7a:0c:f6:e7:65:d7:41:44:b6:69:0b:99:73:
                    db:ba:95:c4:a0:84:58:67:af:07:85:81:f4:d9:d9:
                    a9:b5:f2:a8:71:25:21:49:ba:73:bf:8b:06:fa:72:
                    ad:4b:5e:e1:ca:0b:59:60:d9:41:21:b8:e9:5b:99:
                    a0:d5:69:6c:a9:94:da:ec:27:a1:a6:8b:26:b8:e9:
                    8b:58:ff:48:87:f7:1d:31:82:3b:8b:19:58:17:ba:
                    55:48:1c:9d:5c:fe:24:f0:15:4a:10:49:4c:41:4d:
                    6b:f8:9b:ec:b3:ce:8b:ff:5d:a2:ab:c4:45:4b:f1:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FE:34:F2:84:54:F0:9F:68:36:14:95:E8:52:5E:47:58:BC:9A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/20fd783a-f6e0-312e-bd39-483e8ce8931d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:2e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:6b:ae:d3:22:74:2d:b8:18:b6:f0:6c:c3:60:74:2f:1d:3d:
         de:6b:3b:63:e4:e8:91:d3:94:07:93:16:a4:af:76:e8:5f:d1:
         d1:71:d6:64:e7:91:82:bd:79:cf:21:df:ad:3f:21:af:b3:dc:
         b2:15:a2:77:10:99:d3:7c:3d:d8:02:22:a2:4e:14:c3:22:36:
         17:93:8d:4a:ed:14:b9:a6:09:7c:16:e9:24:60:26:b6:6e:94:
         19:cc:ce:36:c0:66:e1:bc:cc:83:4b:be:96:51:08:5e:f7:f0:
         74:bc:71:38:ba:59:fc:ea:d9:83:de:0f:9f:93:d8:f8:34:2c:
         56:10:6d:e0:81:0a:df:13:52:4f:e6:56:23:28:f5:d7:fb:e8:
         bf:21:01:65:7d:09:84:95:b5:7d:fe:06:1a:56:ff:8b:31:2f:
         69:3b:24:15:06:f2:b9:62:5e:83:57:88:10:c9:60:72:a5:7a:
         14:b1:18:d2:43:5f:04:c8:0c:2f:0a:b7:2e:2a:0e:98:25:e9:
         35:c8:57:cc:7b:ed:89:73:c7:a3:fb:b7:55:17:7c:19:d1:15:
         71:29:d1:2c:47:b4:01:82:bc:ee:37:2a:4f:c5:23:81:7d:51:
         94:26:70:c2:3f:00:35:e8:bb:78:ce:d7:8d:51:c7:0f:dc:f4:
         13:0c:e4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:11 2025 by rpki-client