Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa
File:                     e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa (raw, json)
Hash identifier:          trnOUM4k/lHP/IBEHgZRCzU1sVmBECreqWPtlFQzg/c=
Subject key identifier:   CF:A7:11:BD:A3:DC:65:21:1E:31:B2:2B:F1:0A:42:9A:1B:8E:71:AE
Certificate issuer:       /CN=b12072dc-8b29-49de-800e-2439a1f4bf97
Certificate serial:       010D0C9F43285849350EB0D92008ED1C9F4E6B00
Authority key identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399737
IP address blocks:        2602:f9dc::/40 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:b0:d9:20:08:ed:1c:9f:4e:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12072dc-8b29-49de-800e-2439a1f4bf97
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=e3fc8ee1-4403-4602-8c28-0bf584bea29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:21:81:6f:6c:b5:5e:29:ec:bc:ad:d5:a5:
                    10:b9:e9:b5:54:95:75:61:e4:d0:91:09:20:7f:87:
                    ec:85:e1:d4:1f:a8:a8:9b:14:08:db:eb:e4:87:43:
                    fb:89:94:08:e2:00:1c:51:a1:ff:12:7c:87:9c:76:
                    cd:35:5c:5d:4e:74:24:e8:d8:2b:87:45:2a:15:6b:
                    e9:4e:08:61:e1:09:ec:87:c6:49:fd:97:9e:66:40:
                    d0:e6:9f:bc:de:e5:cd:b6:4e:84:64:bc:a9:bb:d3:
                    ca:86:5c:13:a6:8e:7a:b7:0c:19:0e:20:7d:9f:57:
                    63:0e:f8:08:92:46:ff:0c:cc:db:25:bd:4a:6d:d2:
                    80:a1:5a:fc:11:68:ae:5f:de:e6:34:26:c7:f0:1d:
                    b5:4a:64:33:de:99:b0:75:06:be:3b:67:cf:c7:35:
                    14:d3:3b:cc:d6:51:c1:43:17:09:45:40:40:b5:2c:
                    e0:80:55:0e:21:b5:e1:df:43:e7:b4:cb:79:86:35:
                    cf:fe:df:44:ce:d7:b2:1c:0a:97:5b:3b:59:8d:3b:
                    55:88:67:4a:b8:ac:bd:83:cd:17:e3:90:71:39:41:
                    25:fe:ec:fa:ce:0d:b5:f7:7f:01:99:87:64:55:5b:
                    de:75:07:6d:0d:38:08:d8:b1:b5:b4:9c:b6:b4:92:
                    02:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A7:11:BD:A3:DC:65:21:1E:31:B2:2B:F1:0A:42:9A:1B:8E:71:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9dc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:62:79:f4:8a:4f:f5:0f:05:c3:01:36:a4:11:d5:66:5d:67:
         92:9a:6c:3c:7e:e4:b8:c9:1e:19:54:f7:8c:1a:f8:89:40:f6:
         78:f6:dd:d0:55:a2:8f:ea:d9:9e:c3:4b:4e:ce:8d:f9:8e:79:
         86:22:32:07:9e:36:24:9b:94:c2:c0:1c:13:64:02:d7:5a:6c:
         a4:3d:13:d7:86:57:3b:57:4b:00:2f:6e:d6:d8:ce:fe:5f:f9:
         8d:12:46:71:79:56:a7:9a:a1:a8:f4:29:4f:05:37:1f:14:59:
         c8:04:e9:18:4b:da:fb:88:ca:d8:2b:3b:3d:21:e1:9d:49:75:
         5e:98:60:8d:12:d3:41:76:f4:5e:6f:b6:df:e5:d6:3e:e5:da:
         1a:c2:9c:61:be:f9:58:8a:3b:4d:20:63:20:16:65:b4:98:15:
         21:71:fa:a8:92:ed:58:6f:51:be:fd:eb:29:32:35:40:6a:cc:
         9b:c3:24:72:23:60:9d:6a:47:ba:86:b6:c8:52:5c:5f:d6:ee:
         43:b7:9e:a1:1f:61:0b:af:1b:29:80:c5:36:b9:57:6c:d9:95:
         d8:a9:00:57:c0:64:bc:6a:18:58:e4:63:1f:7b:9f:44:64:f3:
         ab:97:29:e1:bb:d1:59:dc:16:fa:e1:3a:67:49:d6:73:96:a0:
         4f:32:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:18:36 2025 by rpki-client