Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fce156c9-1097-392a-a5ba-b961c3676875.roa
File:                     fce156c9-1097-392a-a5ba-b961c3676875.roa (raw, json)
Hash identifier:          FW7M2XbBmOy39jIjTbbNXkr3drsSwCOwSe64YLGkepQ=
Subject key identifier:   8F:9B:A0:F3:DD:55:78:98:CB:A3:B0:B3:AD:80:84:5E:3E:9A:92:87
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848F22C7333AF686351BB3E7F00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fce156c9-1097-392a-a5ba-b961c3676875.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     33363
IP address blocks:        2605:a404::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:73:33:af:68:63:51:bb:3e:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=32e3fdf6-2dfd-42a1-a325-2134f7c3b5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:0f:a5:20:db:e1:c3:75:9c:17:59:97:ff:
                    5d:80:cb:34:09:a2:d2:3f:cd:68:87:ca:c3:86:6d:
                    f2:e4:03:31:83:d5:d8:a9:10:a8:75:d6:86:f7:0b:
                    76:5c:a1:1d:d6:80:84:fe:54:ad:24:e2:2d:21:5b:
                    f0:55:36:3c:49:f4:a2:0b:75:69:41:7c:92:93:40:
                    2a:11:f9:ee:20:65:f0:78:86:20:ad:86:df:cf:20:
                    ee:44:2d:fa:02:5a:c6:bf:9c:cc:74:e5:9e:89:a0:
                    8a:7b:26:85:2a:90:b7:a6:a2:64:11:c8:08:3f:93:
                    a9:bf:59:5a:ab:62:75:00:11:11:b2:39:51:ab:7b:
                    eb:31:bf:a3:33:27:51:2b:59:47:1d:5f:f2:24:72:
                    36:68:00:ec:08:4b:9f:04:09:2c:5f:07:04:1c:95:
                    ea:82:28:45:6b:79:a2:23:bb:40:f0:a2:a0:05:87:
                    de:a6:dc:7d:3e:aa:7c:ba:98:f1:ca:ce:c5:28:08:
                    7a:3a:0e:51:52:ce:88:bb:be:27:ba:c7:fc:52:d5:
                    de:8f:aa:14:86:50:98:b7:d3:a0:1c:66:22:8a:5a:
                    60:bf:4e:63:d0:60:f9:df:88:66:9a:2c:ff:e7:67:
                    2c:f3:fc:1c:65:f4:24:a4:62:4b:5d:78:35:c3:8a:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9B:A0:F3:DD:55:78:98:CB:A3:B0:B3:AD:80:84:5E:3E:9A:92:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fce156c9-1097-392a-a5ba-b961c3676875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a404::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:5f:36:c0:cb:aa:08:61:b8:c6:51:34:dd:f5:f1:57:be:b2:
         e1:46:bb:d9:66:7b:01:d1:df:47:fe:6d:01:12:36:ee:5b:14:
         0b:c5:8d:8e:05:38:ff:67:74:a1:57:14:79:0e:a3:ae:83:2b:
         e2:a1:78:ed:b9:f8:95:d4:07:ee:f8:3e:07:dd:ea:2a:2c:d0:
         e7:4a:3c:54:35:a9:eb:db:58:6b:dd:ed:d4:7e:9b:3c:15:26:
         2e:01:18:f0:2d:79:fb:ee:44:0e:46:57:8a:1c:b3:d7:ec:45:
         20:1d:11:70:e4:4f:50:17:82:1c:0b:80:5a:1a:91:65:c3:46:
         7b:7a:5e:d2:80:5e:c3:52:fd:85:fc:58:69:36:be:c6:42:37:
         86:ef:57:76:3a:21:fb:67:2b:ca:45:46:f9:8f:df:17:2c:0f:
         e2:34:5e:ac:89:d5:59:0d:bc:c3:e6:14:de:5e:91:cf:b3:b1:
         88:9b:36:72:4c:0a:cf:a8:6d:94:99:d6:a7:8c:55:8d:95:59:
         d9:2a:ca:a4:d9:63:d6:04:65:4d:b5:13:93:c2:63:bb:ce:5f:
         17:dc:44:6b:91:b9:8e:d3:4e:08:05:55:74:30:1e:15:fb:3e:
         40:9a:da:d2:72:52:3d:a6:f6:c1:7d:7a:ab:91:09:7c:22:08:
         c8:9f:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:11 2025 by rpki-client