Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1d0e6107-3428-3f50-8ccf-0767fa9a77ed.roa
File:                     1d0e6107-3428-3f50-8ccf-0767fa9a77ed.roa (raw, json)
Hash identifier:          5+a9P6krUsAXyy8VQ6hZ94Q/xGCnOjECl2fCQaeEToc=
Subject key identifier:   EF:C9:21:58:37:5C:23:43:9C:C2:59:36:8E:25:FD:1F:91:94:02:AD
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285848D641086F18A39CD2FA13C180
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1d0e6107-3428-3f50-8ccf-0767fa9a77ed.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     137331
IP address blocks:        2602:fd92:c10::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:08:6f:18:a3:9c:d2:fa:13:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=ab412d99-eb22-42fe-8a15-c160ca782bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:82:da:d9:88:30:f3:20:99:de:35:19:65:
                    31:53:4a:f6:57:0b:97:ef:80:53:ab:d4:9d:58:b5:
                    c5:67:9c:16:7a:8c:31:78:4f:a6:ea:a7:9c:8d:91:
                    b1:37:18:a1:c2:3c:58:c8:56:c6:db:0a:c5:4a:05:
                    a8:0e:e2:46:4b:f9:d4:0c:b0:34:85:5a:70:70:d3:
                    a6:26:61:ad:92:97:7d:2c:6a:c4:ec:8f:04:a4:f5:
                    4e:21:e5:6d:ac:c0:a0:71:3c:32:66:c0:a4:69:ed:
                    86:27:39:13:d6:21:7c:28:c9:94:be:72:32:f0:2b:
                    f1:e3:47:da:e6:2c:aa:45:25:42:52:17:6f:03:3c:
                    ca:55:c0:46:b7:9d:7f:a4:77:80:fd:41:d1:1f:04:
                    b1:5d:ba:e0:a3:dc:1e:0b:f4:89:d8:52:d7:c5:ae:
                    d5:88:32:26:64:a9:93:62:f2:61:78:5a:dd:12:7d:
                    76:f2:6a:a1:f5:c9:24:98:3b:52:fc:a0:82:f5:5f:
                    42:6f:1c:1b:e6:54:db:c8:dd:dc:12:e4:9f:a6:6b:
                    b6:cf:2f:a6:9b:2c:a8:33:a5:5d:cc:1a:f1:de:f7:
                    a3:ea:c5:7e:7a:be:d1:38:2b:44:47:71:2c:08:4a:
                    d1:12:31:d8:72:bc:78:2e:b3:71:64:af:98:ba:70:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C9:21:58:37:5C:23:43:9C:C2:59:36:8E:25:FD:1F:91:94:02:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1d0e6107-3428-3f50-8ccf-0767fa9a77ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:c10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:d0:89:72:70:5f:d8:e6:23:d4:bf:dc:04:a9:91:73:01:b1:
         05:dd:48:7a:24:b7:18:e8:f9:94:ac:74:4e:11:a9:96:dd:c6:
         d4:dc:3a:76:57:7e:1d:25:ff:82:96:9c:54:18:b2:30:55:f8:
         88:01:9e:33:34:b4:de:df:1b:1f:92:21:25:85:a7:f7:09:80:
         fb:db:bb:af:9b:b5:ca:a7:1a:7c:fa:ce:55:47:74:79:52:45:
         21:83:e4:65:00:3d:8c:18:07:82:72:80:69:c4:7e:71:d2:8c:
         7c:09:df:57:38:ef:bf:59:b5:6d:c2:b7:f9:ad:26:01:5a:15:
         93:56:bb:71:42:8c:a0:af:05:c5:75:51:9c:b2:06:73:c4:fe:
         a4:c2:58:cc:09:3a:b6:d9:66:e3:d8:3a:2f:9b:96:99:f9:b5:
         08:25:3c:24:bb:7f:36:60:a6:81:8d:cf:6b:ee:cb:2a:19:06:
         7e:47:71:51:b8:32:e7:47:5b:e0:6c:6e:9e:01:41:d0:73:34:
         9e:f8:37:e9:2f:59:4f:62:f7:c0:d1:c6:c1:2b:61:c4:fe:9c:
         a6:a1:15:fd:33:8e:ee:47:ff:bd:ed:0f:c6:3d:d5:58:fc:27:
         e9:e7:30:4f:73:ea:ad:97:d0:77:71:fb:79:35:02:b8:eb:6b:
         26:cb:6f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:20:44 2025 by rpki-client