Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/e6503301-3b1c-32d4-9763-95a27fdd924e.roa
File:                     e6503301-3b1c-32d4-9763-95a27fdd924e.roa (raw, json)
Hash identifier:          kssWq67hP37EqBw/CCHDgeqXdT1PTS7j6rXF6HqZSh8=
Subject key identifier:   5D:AF:73:E1:30:43:90:9C:39:4C:13:B5:11:E8:3B:6F:08:0F:77:9C
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F43285849287E51A48E2305CCB857E37F
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/e6503301-3b1c-32d4-9763-95a27fdd924e.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     14445
IP address blocks:        2606:18c0:2b9::/48 maxlen: 48
                          2606:18c0:7ee::/48 maxlen: 48
                          2606:18c0:d15::/48 maxlen: 48
                          2606:18c0:18c3::/48 maxlen: 48
                          2606:18c0:1a62::/48 maxlen: 48
                          2606:18c0:2363::/48 maxlen: 48
                          2606:18c0:2627::/48 maxlen: 48
                          2606:18c0:30e2::/48 maxlen: 48
                          2606:18c0:362f::/48 maxlen: 48
                          2606:18c0:37f3::/48 maxlen: 48
                          2606:18c0:38bd::/48 maxlen: 48
                          2606:18c0:3954::/48 maxlen: 48
                          2606:18c0:3ed7::/48 maxlen: 48
                          2606:18c0:4115::/48 maxlen: 48
                          2606:18c0:4644::/48 maxlen: 48
                          2606:18c0:4700::/48 maxlen: 48
                          2606:18c0:48a4::/48 maxlen: 48
                          2606:18c0:5b7c::/48 maxlen: 48
                          2606:18c0:5d1c::/48 maxlen: 48
                          2606:18c0:63c6::/48 maxlen: 48
                          2606:18c0:66e2::/48 maxlen: 48
                          2606:18c0:6f89::/48 maxlen: 48
                          2606:18c0:7235::/48 maxlen: 48
                          2606:18c0:758e::/48 maxlen: 48
                          2606:18c0:a922::/48 maxlen: 48
                          2606:18c0:bf73::/48 maxlen: 48
                          2606:18c0:ced9::/48 maxlen: 48
                          2606:18c0:dc2b::/48 maxlen: 48
                          2606:18c0:dfa4::/48 maxlen: 48
                          2606:18c0:e217::/48 maxlen: 48
                          2606:18c0:ff21::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:51:a4:8e:23:05:cc:b8:57:e3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=b5ceef8b-2dd6-4fdc-9f11-9a302a2e081d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:96:03:3e:a2:2c:2c:60:55:f4:a3:05:d4:
                    af:d9:42:d5:df:c9:a1:29:c0:91:36:75:b4:c9:05:
                    25:07:ce:9c:ac:13:c8:e4:2b:e6:c1:36:87:04:1e:
                    5e:8a:6a:4c:48:e0:03:e5:96:11:8f:ea:b7:c2:5b:
                    9b:1c:6b:71:13:46:2b:87:c3:05:75:7d:40:db:e1:
                    9c:9c:3c:8a:27:30:f7:a1:d9:32:19:b4:9a:19:64:
                    a6:a1:fe:24:4b:06:dc:e9:57:97:6f:18:f7:87:bd:
                    94:30:93:87:6e:80:32:e6:68:0c:69:cf:9f:cc:45:
                    0c:e3:ba:11:30:de:17:5b:88:97:d0:e8:24:0a:ef:
                    1f:e0:13:de:7d:c4:25:06:04:75:03:6f:e8:fc:b0:
                    df:43:b4:f8:74:ad:12:8e:a9:25:03:6f:28:d6:68:
                    11:b9:08:74:a4:d5:ef:98:ea:78:9c:cc:3c:f6:1d:
                    70:be:4a:a5:4d:5c:dd:a7:80:e0:f5:b6:e8:a7:d5:
                    9c:28:32:cf:a1:89:a1:79:93:f7:59:8e:70:14:29:
                    52:eb:b4:bc:d4:25:62:00:98:91:d3:d8:70:52:4a:
                    c1:0d:a5:08:a8:31:84:ff:fe:2e:2a:37:20:e6:f2:
                    f1:e1:06:23:fb:2d:e5:17:ec:6e:ed:a6:98:3c:38:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AF:73:E1:30:43:90:9C:39:4C:13:B5:11:E8:3B:6F:08:0F:77:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/e6503301-3b1c-32d4-9763-95a27fdd924e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:2b9::/48
                  2606:18c0:7ee::/48
                  2606:18c0:d15::/48
                  2606:18c0:18c3::/48
                  2606:18c0:1a62::/48
                  2606:18c0:2363::/48
                  2606:18c0:2627::/48
                  2606:18c0:30e2::/48
                  2606:18c0:362f::/48
                  2606:18c0:37f3::/48
                  2606:18c0:38bd::/48
                  2606:18c0:3954::/48
                  2606:18c0:3ed7::/48
                  2606:18c0:4115::/48
                  2606:18c0:4644::/48
                  2606:18c0:4700::/48
                  2606:18c0:48a4::/48
                  2606:18c0:5b7c::/48
                  2606:18c0:5d1c::/48
                  2606:18c0:63c6::/48
                  2606:18c0:66e2::/48
                  2606:18c0:6f89::/48
                  2606:18c0:7235::/48
                  2606:18c0:758e::/48
                  2606:18c0:a922::/48
                  2606:18c0:bf73::/48
                  2606:18c0:ced9::/48
                  2606:18c0:dc2b::/48
                  2606:18c0:dfa4::/48
                  2606:18c0:e217::/48
                  2606:18c0:ff21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b8:fc:c4:a0:3b:dd:94:aa:19:96:8c:ec:78:b5:ca:bc:11:
         06:d5:3c:47:b7:d1:e6:77:14:92:83:ae:5a:1f:1a:0e:21:7c:
         1e:70:47:f1:c7:08:8b:47:29:24:63:63:1c:6f:c8:27:a6:0b:
         e0:cd:af:46:40:b2:4f:83:c9:31:0c:b2:c7:8f:e8:d7:39:62:
         ed:44:1b:d7:79:57:67:4f:1c:28:ee:37:3b:90:50:d1:2a:ca:
         10:d5:af:6f:2d:6f:c8:7b:0c:1d:e8:0e:3a:bf:a5:a9:f8:6a:
         73:b0:7a:19:ca:4a:7d:8f:f9:61:9e:80:d0:d1:e8:1f:f9:49:
         02:c8:74:7f:ab:7b:47:80:1c:f8:26:97:af:5b:cc:c8:85:6f:
         ca:fb:52:aa:5e:89:09:89:b0:cf:6f:ff:a6:35:83:a2:78:0b:
         41:c8:4c:e4:9e:b1:58:ab:c6:78:fc:db:cb:6f:0d:59:0e:9f:
         2e:b7:d0:ac:1f:80:91:ec:6a:61:0e:8a:49:ab:22:ba:a7:7f:
         cb:55:1f:c9:f0:69:16:b2:0b:0e:eb:7e:77:0a:78:12:75:7a:
         27:f4:d1:e5:49:d4:6d:95:01:0c:95:48:10:f7:37:96:83:f1:
         95:25:cf:93:9c:d8:d9:82:08:72:bd:ba:e3:c5:a0:b1:6b:57:
         0b:cd:59:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:43 2025 by rpki-client