Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/f74a9f89-9c89-3ae4-8406-a461573d59fa.roa
File:                     f74a9f89-9c89-3ae4-8406-a461573d59fa.roa (raw, json)
Hash identifier:          BjYfiWu0CKTYpQPMXYZfEpZRjhcXqlOkBhPuyQAkO2g=
Subject key identifier:   16:08:E4:66:42:C2:05:98:08:58:7F:24:ED:9A:2D:8E:92:7E:67:1F
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F43285848BBBB81020F8FF1574DD24640
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/f74a9f89-9c89-3ae4-8406-a461573d59fa.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     398292
IP address blocks:        2602:fd23:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:81:02:0f:8f:f1:57:4d:d2:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=0cd6c9bd-40ee-4bfc-935d-88ec127d3e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:a6:b3:9e:9a:62:ec:f3:68:ba:c2:80:0f:
                    dc:0a:11:62:53:45:8f:3a:64:c5:83:6b:63:ca:e4:
                    82:1e:14:bc:d5:fd:d8:e9:8e:12:f9:25:af:1b:2f:
                    f8:35:70:ce:6a:84:09:9b:ea:0c:95:dc:1f:75:20:
                    68:5f:32:aa:13:3c:97:fe:7b:21:5c:d7:92:6f:f2:
                    6b:29:b8:5b:51:6e:f6:e4:31:1e:11:18:20:43:6a:
                    15:3a:a1:d7:58:d0:95:8f:12:7a:96:c1:1d:7e:da:
                    82:a1:13:b3:63:ed:32:71:30:8b:24:62:24:a7:e1:
                    b6:05:15:66:ed:40:2c:bd:5d:1b:cf:a9:0c:d8:79:
                    79:85:ae:9e:bd:84:b6:09:07:80:e5:e0:c4:db:b0:
                    80:75:40:07:28:ea:6b:51:33:69:bc:a5:3d:b1:93:
                    72:a3:d8:fd:83:25:a8:20:ed:e4:7a:e7:71:d6:d5:
                    65:88:cf:ae:9a:f4:04:91:ea:7b:a8:9d:28:f8:1a:
                    f5:1a:4e:c8:05:61:2e:4a:28:df:2e:f1:71:1e:7d:
                    58:2b:71:52:ab:07:61:f6:a7:a5:23:96:69:e3:06:
                    c6:51:d9:60:36:dd:a4:bf:e0:95:1b:b8:98:ba:24:
                    69:45:e1:2d:84:9b:5d:81:6c:a9:38:78:b2:d8:6d:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:08:E4:66:42:C2:05:98:08:58:7F:24:ED:9A:2D:8E:92:7E:67:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/f74a9f89-9c89-3ae4-8406-a461573d59fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd23:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ef:88:e0:7a:0a:48:48:46:1f:f6:ba:ec:55:9e:df:92:4f:
         a1:6c:51:86:ca:b7:7d:99:0c:c4:e8:c2:1d:8c:1c:0d:88:4e:
         6d:54:53:12:85:d8:c5:68:c0:b9:58:ee:cd:5c:8d:17:ad:22:
         6e:b8:92:a2:52:11:b8:c7:a4:08:a7:b2:bb:5b:a7:ea:50:1b:
         3f:2a:b0:27:ab:af:fc:23:76:63:31:59:c3:ee:55:04:62:bb:
         cf:c5:fa:bb:65:c7:cd:8a:17:4b:f8:fe:67:bc:c2:bb:27:ee:
         c4:52:7e:c6:48:79:f9:ba:55:1d:78:9e:ba:ae:b3:79:5c:cd:
         0c:90:44:87:9e:ce:db:b5:02:6f:37:22:35:9a:34:94:2e:77:
         10:ca:74:09:1c:4b:ba:30:02:43:f4:f3:4f:2f:ee:1e:72:18:
         4d:29:dc:da:b3:63:fd:6f:fe:f8:ff:76:e2:e4:ea:9f:51:3e:
         dc:b6:72:20:43:a3:42:fb:9e:7e:ea:98:81:fc:54:ad:48:25:
         42:db:53:2d:6e:25:a6:88:19:cb:89:66:53:4b:8a:c7:da:40:
         fc:44:90:4e:eb:c6:3e:5a:5c:cf:5e:50:9c:ca:8a:cf:bd:ba:
         4b:96:e5:1e:23:c9:97:9a:8a:f9:c1:0b:46:6d:b9:58:9a:5e:
         8d:fb:51:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:23 2025 by rpki-client