Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/92fd047e-6299-3cbf-bfe5-cdbb379d4fbf.roa
File:                     92fd047e-6299-3cbf-bfe5-cdbb379d4fbf.roa (raw, json)
Hash identifier:          Abwm5MgMzEAFU1ELtARD00Ic+LlcoDGII04Z+zpp4MA=
Subject key identifier:   1C:6D:AF:B4:A1:BD:83:66:F1:52:AF:0D:DF:B7:39:3F:2E:2C:08:B4
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F43285848067A3E8BFE59C085D0F77840
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/92fd047e-6299-3cbf-bfe5-cdbb379d4fbf.roa
Signing time:             Thu 28 Nov 2024 03:48:03 +0000
ROA not before:           Thu 28 Nov 2024 03:48:03 +0000
ROA not after:            Wed 26 Feb 2025 03:48:03 +0000
asID:                     216056
IP address blocks:        2602:f9df:600::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:7a:3e:8b:fe:59:c0:85:d0:f7:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Nov 28 03:48:03 2024 GMT
            Not After : Feb 26 03:48:03 2025 GMT
        Subject: CN=beede72d-b63e-40cb-a8f9-e3df7cd27208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:15:56:d6:1f:d0:bf:35:fc:e1:07:86:cb:
                    e1:2d:73:bd:2a:3c:a7:75:fa:2f:ef:1f:b2:33:dc:
                    7a:94:71:4f:8b:a4:3e:a7:35:10:33:09:41:ad:c5:
                    f6:e1:1c:db:ef:de:d8:c2:42:6c:65:37:31:9b:db:
                    1c:20:02:e5:05:30:85:23:4f:6a:c2:17:50:71:10:
                    ba:b1:3e:d5:3b:1e:e7:f6:d4:5d:5d:1e:a0:ec:48:
                    12:06:d5:1c:52:8a:dc:a4:bb:42:8a:31:27:82:b5:
                    9a:21:dc:f4:cf:5a:b5:72:2c:bf:2c:04:f2:60:29:
                    6b:27:d9:aa:57:cb:3b:58:72:a4:18:ef:c3:57:87:
                    d1:43:4a:0d:18:a9:2b:8f:43:7c:dc:b8:28:83:c3:
                    32:e2:b8:6c:a6:f0:8a:f7:6e:78:a5:d1:41:06:4c:
                    b3:cd:6e:b4:f8:c0:8b:80:d7:d3:d5:8b:7c:56:0c:
                    9b:dc:91:98:4c:d1:82:b6:07:10:71:a3:99:af:2e:
                    13:53:da:c8:2c:5a:d0:6b:6c:88:3f:a9:2b:ec:c4:
                    6e:e0:96:43:e8:0e:73:e6:7d:83:ae:e1:d3:25:ba:
                    77:ca:e0:22:ad:37:4d:37:dc:25:b6:4e:bb:5d:b9:
                    16:90:7e:dc:99:fa:f5:9e:75:37:dc:a7:06:23:17:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6D:AF:B4:A1:BD:83:66:F1:52:AF:0D:DF:B7:39:3F:2E:2C:08:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/92fd047e-6299-3cbf-bfe5-cdbb379d4fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:82:7e:ce:7e:62:cb:03:e1:c9:bb:96:27:0c:e5:0a:9c:49:
         0c:77:25:b7:3e:ee:50:33:ea:8e:10:e7:1a:f6:8d:b9:a5:c7:
         94:5c:09:f3:9a:54:98:d3:a6:cd:06:f3:4c:73:e2:b0:b2:a8:
         85:8b:9c:10:01:dc:63:54:75:b3:24:65:f4:b8:c5:aa:02:90:
         9d:0f:85:5e:b6:f7:e9:bf:6d:79:db:90:ba:d3:2b:1b:02:c8:
         56:4c:4d:b1:7f:f8:82:12:a1:be:7a:48:50:34:69:9d:09:ea:
         35:64:30:af:c0:fb:f4:2f:6a:e4:c7:a6:4f:35:1c:99:1f:2e:
         73:09:f5:b8:55:6d:de:09:71:da:4a:b6:bd:53:71:9e:9e:d6:
         88:8c:3a:66:91:ea:3d:fc:44:a1:4a:e5:2f:a7:0a:20:99:ff:
         90:28:76:f7:c8:61:d1:2c:b0:7b:ce:7a:5d:11:1c:90:17:31:
         16:eb:e6:a8:36:d4:66:32:62:33:e9:15:95:1c:bf:03:07:2c:
         e9:a6:1c:81:4c:4b:49:7a:d9:a8:00:b7:3e:09:ed:54:3a:da:
         41:6e:dc:c1:a0:59:31:ab:cd:a8:7f:b0:5d:ee:a7:68:e5:79:
         0a:e7:77:ee:85:39:72:9f:fa:c3:27:fb:91:b4:ab:ce:17:46:
         6c:7f:b8:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgGej6L/lnAhdD3eEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4
ZWJlMB4XDTI0MTEyODAzNDgwM1oXDTI1MDIyNjAzNDgwM1owLzEtMCsGA1UEAxMk
YmVlZGU3MmQtYjYzZS00MGNiLWE4ZjktZTNkZjdjZDI3MjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL0VVtYf0L81/OEHhsvhLXO9Kjyndfov7x+y
M9x6lHFPi6Q+pzUQMwlBrcX24Rzb797YwkJsZTcxm9scIALlBTCFI09qwhdQcRC6
sT7VOx7n9tRdXR6g7EgSBtUcUorcpLtCijEngrWaIdz0z1q1ciy/LATyYClrJ9mq
V8s7WHKkGO/DV4fRQ0oNGKkrj0N83Lgog8My4rhspvCK9254pdFBBkyzzW60+MCL
gNfT1Yt8Vgyb3JGYTNGCtgcQcaOZry4TU9rILFrQa2yIP6kr7MRu4JZD6A5z5n2D
ruHTJbp3yuAirTdNN9wltk67XbkWkH7cmfr1nnU33KcGIxd8+QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBxtr7ShvYNm8VKvDd+3OT8uLAi0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl
YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvOTJmZDA0N2UtNjI5OS0z
Y2JmLWJmZTUtY2RiYjM3OWQ0ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj
MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4
OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh
ZWQ5ODhlYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL53wYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXIJ+zn5iywPhybuWJwzlCpxJDHcltz7uUDPqjhDnGvaNuaXHlFwJ
85pUmNOmzQbzTHPisLKohYucEAHcY1R1syRl9LjFqgKQnQ+FXrb36b9teduQutMr
GwLIVkxNsX/4ghKhvnpIUDRpnQnqNWQwr8D79C9q5MemTzUcmR8ucwn1uFVt3glx
2kq2vVNxnp7WiIw6ZpHqPfxEoUrlL6cKIJn/kCh298hh0Sywe856XREckBcxFuvm
qDbUZjJiM+kVlRy/Awcs6aYcgUxLSXrZqAC3PgntVDraQW7cwaBZMavNqH+wXe6n
aOV5Cud37oU5cp/6wyf7kbSrzhdGbH+47Q==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:33:41 2025 by rpki-client