Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/13bc1c4d-0c6b-38cd-98bf-ae3f8ebb18b4.roa
File:                     13bc1c4d-0c6b-38cd-98bf-ae3f8ebb18b4.roa (raw, json)
Hash identifier:          vO3GTq2YwQ0huCYxxieuW/oH7zNJ6BafHPfMin+vtCY=
Subject key identifier:   5F:51:5F:CB:CE:C3:CD:4C:D5:C0:88:91:91:7E:B8:D2:FD:50:E3:8E
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F432858489A3B48446CA6A3F5C8909900
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/13bc1c4d-0c6b-38cd-98bf-ae3f8ebb18b4.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     216268
IP address blocks:        2602:fd6f:e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:48:44:6c:a6:a3:f5:c8:90:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=47ddb3f1-323e-4c3b-b04e-8173ce498f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:a3:cc:91:db:c1:be:2c:2a:8d:c1:94:12:
                    bd:e1:b6:91:b9:3a:02:c6:c5:9b:08:6d:ab:b3:80:
                    ad:a2:0b:bb:47:7b:e8:45:e6:d9:2e:e3:22:3c:be:
                    51:e9:e1:6a:cb:af:8f:04:12:9c:68:68:fb:44:18:
                    e5:32:74:4d:a4:da:e2:80:ea:fc:b5:54:7c:f7:98:
                    31:c9:9b:c8:52:de:50:df:e5:9e:68:ea:49:1c:23:
                    08:0f:a9:bf:80:13:e7:ba:fa:e2:35:d1:ad:b9:07:
                    02:d3:2e:8b:96:cc:be:56:bd:6a:83:66:7e:6d:a4:
                    69:d1:da:a6:75:b7:05:88:32:ba:61:f4:0c:b5:d2:
                    63:a5:61:d1:5f:0f:e8:26:5e:a0:7b:b2:cb:3f:b6:
                    0a:c7:db:d5:9f:ee:d2:2f:c3:d8:a2:29:34:ba:c2:
                    db:70:f8:cf:cc:1e:e5:06:e0:39:b2:19:24:ca:a9:
                    d6:f0:0f:37:b4:73:25:0d:6c:81:93:82:73:a3:a6:
                    85:3c:23:de:d4:ef:a3:e3:24:09:40:f6:9b:96:0f:
                    ac:97:ad:36:5f:39:c3:14:bf:3e:1f:7c:fc:fc:35:
                    cd:71:0d:3c:6c:da:d3:b6:26:d5:96:2e:96:9e:0b:
                    10:0e:3e:21:ab:3b:3e:df:77:cf:09:4e:16:3f:9f:
                    d6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:51:5F:CB:CE:C3:CD:4C:D5:C0:88:91:91:7E:B8:D2:FD:50:E3:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/13bc1c4d-0c6b-38cd-98bf-ae3f8ebb18b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:47:8e:ba:71:37:d5:84:9c:cc:fc:dd:dd:0d:ef:29:bf:
         ec:24:06:96:61:ac:67:01:f2:71:64:e5:a4:f7:4e:94:9a:1a:
         28:68:30:80:ba:47:6e:f3:c2:1e:7a:66:be:50:a7:e9:57:14:
         37:fb:24:44:6c:4f:30:63:c7:a4:dd:c2:05:fb:cf:fd:09:94:
         d5:90:0c:33:94:1c:db:27:21:45:a0:ab:d3:4a:d0:81:84:59:
         60:11:b9:ac:b1:60:26:b3:51:b3:df:ac:22:69:cc:00:6a:77:
         83:27:c9:f8:d4:3f:91:18:f5:47:47:97:0c:c4:64:07:7e:1b:
         b9:84:3a:e4:33:42:6e:3e:8c:d2:da:80:0b:56:35:1f:b8:93:
         9d:2e:17:e3:88:1f:ac:ea:f9:9d:ce:cc:41:a9:d2:b8:80:cc:
         21:c0:42:1a:25:ba:33:bf:88:ab:3e:22:50:a3:74:b8:7c:e3:
         1f:3c:4e:57:52:42:3c:85:3b:a6:48:83:83:98:ef:55:88:30:
         39:0b:51:a2:cb:23:57:7b:bc:7f:a4:16:a9:9f:f7:9d:e4:fd:
         5f:a5:6b:8a:82:ff:e3:7d:4c:67:08:a7:b6:ab:77:ce:09:93:
         95:c1:9d:ad:bb:b8:88:bb:fb:6d:12:18:52:84:e6:df:a0:9b:
         57:7e:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:52 2025 by rpki-client