Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa
File:                     5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa (raw, json)
Hash identifier:          DYtnlceUTuR9YSi2wMJ3xjDY6IvcNCdtt7M5QGYKqhw=
Subject key identifier:   EC:3B:42:6F:BC:F3:A0:A4:D1:43:BC:CA:CC:DD:8F:84:A2:6B:A6:3F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0069B9B5F8E589704EF4DA0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:84be::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:9b:9b:5f:8e:58:97:04:ef:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=92eb2bb8-9b0c-4d5c-9c88-c32c75727d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:87:28:8f:40:28:17:df:99:87:28:f9:8f:
                    83:9e:86:bf:c2:74:6c:e0:fc:8a:cd:20:09:dd:3b:
                    94:d0:b0:03:6a:2b:3b:14:6c:b3:f0:0e:7d:d2:fc:
                    9b:7a:b7:75:9c:67:a3:bb:b9:33:c2:fe:8b:d4:fc:
                    f7:8b:8a:96:27:14:13:f5:45:7a:a6:67:2e:2d:74:
                    f8:f2:da:4b:19:3b:d5:93:2f:29:5a:8e:36:58:24:
                    66:0a:11:85:63:c6:b2:9e:4c:f7:99:e2:7f:d5:78:
                    7a:9b:30:c6:3f:75:32:1c:32:f4:8a:c0:ad:d9:96:
                    2d:86:54:b7:d4:54:46:cc:b1:1c:3c:13:a6:f9:05:
                    28:44:91:c9:59:f0:e0:fa:2f:e6:36:ee:80:38:5a:
                    eb:77:36:84:33:29:fd:ce:29:01:64:96:3c:b7:ac:
                    ba:25:02:8a:0d:ed:5d:e0:ad:28:1d:cb:a9:5a:c7:
                    ca:1d:9f:3a:71:db:ac:90:21:79:6b:ff:63:18:73:
                    14:99:4f:ab:81:c1:80:a2:47:6d:44:29:6d:f7:66:
                    41:18:c7:05:a7:3b:5b:aa:35:23:51:78:e0:96:e9:
                    e8:5e:b8:57:60:10:21:35:8b:1b:8a:49:7a:ad:0e:
                    89:85:34:dc:a8:b9:0c:9c:80:8b:07:4f:b6:3a:d4:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3B:42:6F:BC:F3:A0:A4:D1:43:BC:CA:CC:DD:8F:84:A2:6B:A6:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:84be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:cb:6f:2f:fb:cd:5f:f9:c3:e8:9f:bb:16:2e:16:8e:27:b5:
         8c:af:98:ca:ad:b8:99:cb:3c:e3:4d:d9:0e:ac:0f:8c:56:1f:
         9f:b3:4f:59:7e:1e:4e:08:ee:9e:d3:a5:25:36:3f:36:84:14:
         48:ea:93:e9:ad:53:e4:33:be:2f:e1:f7:ee:49:e4:f3:b0:00:
         0d:b7:a7:52:fa:52:70:ed:5e:00:13:a4:8d:d6:cb:eb:1f:85:
         a7:65:06:17:a7:1a:4f:fb:d7:99:ec:17:d0:a7:bd:17:1d:3d:
         c6:64:fa:d7:d9:68:f0:d3:35:33:58:8c:12:5d:e8:e9:ba:9d:
         53:cc:74:2f:af:41:e4:c6:e8:b7:fb:0f:68:97:a5:ae:58:63:
         b7:a5:c1:73:1f:8d:1b:ec:ac:25:9a:d1:dd:8f:ab:a9:bd:1b:
         45:13:88:34:20:67:7c:57:3a:7c:f3:0f:14:9e:d5:44:5b:eb:
         5c:dd:b2:e2:74:41:08:c0:94:29:bd:a8:76:f7:13:50:e0:75:
         c3:f2:a6:82:ee:ef:aa:c4:81:06:8e:7a:08:78:ba:1d:41:5b:
         07:fc:51:3d:16:1f:25:9d:97:35:6c:eb:a3:56:ca:0e:43:7e:
         36:fb:97:24:be:b4:75:ed:fd:aa:87:18:1b:ac:ec:32:76:79:
         a5:5d:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----