Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/789769dc-64e2-373c-acc0-788fa6654d0e.roa
File:                     789769dc-64e2-373c-acc0-788fa6654d0e.roa (raw, json)
Hash identifier:          vMH704HgEfvIHNixfc1rPNDLWjgbFHOb/1ZPENvracc=
Subject key identifier:   0A:26:6D:FD:B8:CA:93:A7:42:D0:72:42:8E:F5:1D:AA:B5:BA:6F:8B
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F43285848F7C142C099E76473AF260400
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/789769dc-64e2-373c-acc0-788fa6654d0e.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2620:1f7:c022::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:42:c0:99:e7:64:73:af:26:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=fadeb859-c8c2-4267-8a99-84b7eda7d8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:40:38:33:26:db:bb:c7:47:7b:93:b5:f7:
                    a4:1a:3d:3a:f9:0a:fe:40:d7:aa:5c:fc:26:03:80:
                    c0:cb:15:c1:04:54:a8:7c:83:54:cf:e4:cd:91:d9:
                    0c:9f:2e:e5:b8:38:4a:39:e8:68:b5:78:85:06:56:
                    8d:7f:de:23:e7:09:78:ec:96:eb:9f:9f:7c:8f:ba:
                    e0:27:77:ae:81:75:4b:6e:00:4b:31:55:86:98:36:
                    0c:12:a7:07:5e:d6:b2:36:27:5a:e6:b3:8f:c6:9a:
                    29:c7:81:38:b8:28:41:fc:fd:5a:57:d5:ef:f7:f8:
                    fa:3c:52:1d:4c:87:7d:1e:eb:80:10:93:b6:95:4e:
                    71:5f:55:26:ee:72:de:7f:e3:77:73:95:ee:40:54:
                    0d:5b:87:b4:d2:35:1e:18:7e:1a:12:b5:da:27:3d:
                    ee:a5:ae:ba:b7:74:7a:97:17:03:d5:7a:f6:1a:f8:
                    18:1a:46:1d:6e:19:18:39:b3:a3:88:a2:fc:18:de:
                    05:0a:e0:d4:65:ea:e1:4e:4a:82:d6:64:f3:16:6f:
                    2b:c7:b4:c5:20:e7:e7:1c:17:a9:cc:e1:d5:17:8e:
                    fa:d3:89:90:c5:02:59:09:83:2c:cb:74:32:15:38:
                    8d:b6:e7:17:6c:1b:00:5d:63:aa:b8:da:b0:de:40:
                    c5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:26:6D:FD:B8:CA:93:A7:42:D0:72:42:8E:F5:1D:AA:B5:BA:6F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/789769dc-64e2-373c-acc0-788fa6654d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:77:da:9e:01:8d:dc:b9:d7:0d:d0:1a:94:6f:8a:24:ca:3e:
         dc:3a:52:00:c1:94:9d:a6:63:28:1c:af:09:f9:20:c6:0b:59:
         f8:a1:e3:22:b3:6b:33:a3:e7:ba:b3:87:84:d9:e1:ab:ea:4a:
         a7:53:b3:9b:49:3d:43:61:5e:45:b0:c4:cc:bc:37:f5:e9:bf:
         03:c7:a7:f3:ee:5b:59:21:3a:13:8a:56:46:2b:2c:9e:7e:77:
         47:81:a4:69:40:ac:24:41:70:ac:a5:65:9d:82:de:1b:6f:28:
         c9:3b:7f:12:16:5a:ed:d9:f1:54:f0:3d:2c:86:bf:d6:01:d6:
         8a:39:8c:7b:ba:85:1d:6e:90:5b:66:d4:96:af:29:b2:33:d2:
         39:0b:64:54:07:01:d2:c0:55:55:e3:ad:61:ad:e5:1f:e1:9f:
         ea:0e:d6:41:35:49:4a:2d:f5:48:e1:5b:da:ba:0c:ef:e2:71:
         b4:03:84:2b:29:84:4e:23:c4:89:fe:f6:57:05:72:2d:00:7e:
         bd:ba:18:34:19:9d:93:41:ca:a5:42:d5:f0:18:3b:ba:fd:e5:
         da:ca:0b:a5:62:a9:cf:69:5b:3b:b1:e9:de:f7:80:6f:b6:ed:
         29:17:36:a6:21:9a:67:97:e7:13:d3:44:d0:47:f8:59:61:8e:
         f4:b1:2c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:10 2025 by rpki-client