Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/154228ce-c896-3b14-8fe0-6ae22905e7d9.roa
File:                     154228ce-c896-3b14-8fe0-6ae22905e7d9.roa (raw, json)
Hash identifier:          tjL91P2WsfKRiKOs1qgGmhT/QW6G8YWykNOgsW5R9jo=
Subject key identifier:   0D:1E:E6:7D:96:0C:1C:1B:58:EC:D3:9D:B2:B6:67:38:4B:AB:FE:32
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0066DE0BB5EA5A3AD3E5700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/154228ce-c896-3b14-8fe0-6ae22905e7d9.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:823d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:6d:e0:bb:5e:a5:a3:ad:3e:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=fb3fa7b9-ac70-45e1-a0e4-13c32fbc8e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:43:be:2b:d3:55:e1:4f:9d:4f:99:8e:bc:
                    c1:01:38:9a:e6:bc:df:51:fc:fc:e0:cf:7f:bd:7b:
                    ad:e1:cb:e1:a0:ab:d7:42:cd:e2:27:25:bc:49:1b:
                    74:71:18:4e:5e:5c:89:d4:c2:f0:fa:e0:6a:8f:05:
                    81:0b:65:8a:d8:c8:7e:08:82:8b:24:c4:db:fe:d8:
                    52:5f:e6:85:89:75:82:2a:61:f1:bd:3a:cb:cb:cc:
                    cf:13:23:ab:35:f8:99:03:7b:96:04:90:1c:36:fd:
                    94:d7:2e:6e:0f:aa:ec:cb:13:80:13:86:5e:ff:23:
                    67:01:f6:c6:ae:19:c4:33:5e:65:49:62:e1:16:cc:
                    38:df:8d:d8:d2:0d:80:d7:15:ad:7f:c4:a6:1a:e3:
                    a6:e3:06:a0:7f:39:e4:f9:83:71:4e:db:e3:29:21:
                    34:8f:84:b0:0a:f1:83:3c:26:e0:c1:e8:a3:a9:62:
                    c0:b4:9e:11:42:66:14:e5:f1:69:2a:77:13:86:a3:
                    e2:ee:18:0d:4b:39:a2:85:d7:0c:b5:2b:25:13:c0:
                    40:e0:17:b8:67:e7:9c:5a:f6:f8:43:05:27:34:4d:
                    a4:16:d6:24:d3:ec:5c:69:1e:d3:9c:47:8f:73:61:
                    65:3a:f5:bf:2b:56:07:9f:a6:d9:86:d9:b5:cb:80:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1E:E6:7D:96:0C:1C:1B:58:EC:D3:9D:B2:B6:67:38:4B:AB:FE:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/154228ce-c896-3b14-8fe0-6ae22905e7d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:823d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ac:52:8b:06:bc:30:cd:e7:5a:64:1d:cf:d9:f1:73:57:ac:
         05:50:19:3b:40:4e:2a:5c:7c:a8:27:92:07:2c:ea:84:d4:1f:
         e3:8c:88:48:2c:46:68:5a:73:01:b4:b9:00:f1:42:28:7a:b1:
         89:6a:6b:00:cd:11:95:36:4d:62:b4:8c:ab:ef:1f:c1:fe:83:
         78:c4:d5:24:12:7b:31:9a:99:3c:ff:00:70:82:33:16:9a:8e:
         a8:49:08:a5:3a:2c:e9:eb:cd:3c:bc:e2:05:14:fe:66:f8:2a:
         1e:03:6a:fd:e3:65:87:3d:a4:9c:31:77:91:27:6b:e6:fc:ef:
         65:c0:11:d7:35:40:e9:27:52:36:74:a0:7e:e8:41:3f:50:17:
         72:a3:0b:34:7e:f3:10:9d:a2:6f:a5:43:45:36:2c:c3:b7:84:
         09:d5:e1:79:37:3d:43:95:0f:0b:ef:ec:88:95:ba:ff:7b:dd:
         6a:f6:1f:41:d0:90:3d:5a:63:7e:d1:50:7f:84:6c:ae:a9:48:
         21:1a:55:e5:cd:f4:7a:ab:da:91:3c:84:24:56:91:ef:5f:c0:
         65:0a:e2:ee:5b:42:9c:77:94:27:77:6e:27:cb:d0:ba:cd:8f:
         bf:71:46:2a:63:aa:4e:99:cf:ee:bd:22:3f:cd:d4:f8:fa:c8:
         9f:64:f4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:31 2025 by rpki-client