Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa
File:                     1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa (raw, json)
Hash identifier:          4Jiv/LjLOiQUEIvPWhTTD9S1/m0rtBb2iGTBUAM84jE=
Subject key identifier:   A0:68:BD:76:DA:95:24:E3:1E:E2:29:20:97:19:17:7D:B6:75:97:7C
Certificate issuer:       /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
Certificate serial:       010D0C9F43285848B626151FF72877B5117B7500
Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     394470
IP address blocks:        2620:25:a000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:15:1f:f7:28:77:b5:11:7b:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=8b04c921-4f1f-46de-892a-1a4adbfaee80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b7:3f:c4:32:92:e9:85:2f:f2:10:65:5a:c3:
                    0c:3f:2d:0b:bd:0a:e3:20:2a:ed:98:7a:d7:ae:69:
                    92:d5:c9:5f:58:a5:dd:89:3e:b0:6e:47:1c:10:16:
                    b0:54:c4:fb:60:c5:7e:0a:e8:b5:93:47:98:cd:e0:
                    82:a5:e7:6d:3e:ef:0e:73:be:ba:79:61:25:db:5b:
                    45:a5:f7:1f:83:7d:1d:b6:ec:c3:7b:c8:a7:45:69:
                    93:da:88:84:17:90:fd:0d:e2:75:9a:7f:64:32:ae:
                    16:05:dc:ad:d1:3f:3f:45:d6:39:63:e4:e0:6c:c1:
                    04:aa:46:a4:fc:1c:ff:52:12:81:06:40:06:71:db:
                    ba:a0:70:c3:4c:60:3f:bd:97:04:7f:24:4e:d0:e3:
                    b2:d6:f0:8b:7b:38:f3:8b:96:b8:3d:5e:7b:d5:ae:
                    1e:c8:14:f9:89:60:7c:a1:e9:a2:1f:99:a9:0d:29:
                    9d:ff:26:42:44:f1:22:6c:7c:bc:bd:75:00:05:da:
                    82:c4:dc:da:2a:fa:9c:31:44:2a:ea:2d:97:57:37:
                    42:19:0b:86:f5:0a:35:5a:9a:0d:e3:21:f0:11:e4:
                    86:19:e2:f9:83:25:a9:ac:c7:31:15:1a:4d:b5:17:
                    cd:44:5a:cb:07:22:c5:5b:5e:86:d1:69:06:ed:26:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:68:BD:76:DA:95:24:E3:1E:E2:29:20:97:19:17:7D:B6:75:97:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl

            X509v3 Authority Key Identifier:
                keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:25:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:eb:85:3b:67:c3:1d:1b:7b:99:7a:3e:ae:d2:c6:6b:f2:a4:
         c8:fc:62:4e:a4:ca:e2:4d:d3:5a:10:bd:73:34:8b:45:ba:f1:
         45:28:fa:9a:5c:9b:d1:f9:5a:76:c0:b7:b2:e7:e6:3a:c8:41:
         29:bf:03:1d:85:9f:a2:06:ca:bc:7b:0d:24:3c:12:50:f5:ab:
         ee:c8:be:85:d4:6c:b3:1e:51:70:3a:58:7f:9f:9f:11:cb:fd:
         9f:c2:be:d0:73:a0:25:fd:38:58:ba:2c:3a:50:b1:aa:0b:44:
         da:ea:fd:e4:24:e1:6c:06:3a:12:87:98:e9:5b:df:27:2c:3f:
         c5:ae:84:7a:e2:14:a5:44:25:e9:b9:fc:a4:bf:6a:4a:75:a5:
         67:dc:d0:fe:17:8f:29:cb:a7:1f:f0:80:cf:e6:4c:f6:9c:cf:
         1c:64:df:cf:d7:d6:57:55:f3:95:f5:8e:8f:72:32:f0:41:43:
         3b:2e:87:3c:73:19:f5:91:b5:75:b7:ef:1b:bb:59:ca:d2:ae:
         80:8f:f7:24:12:be:84:e2:25:9e:60:d9:74:bf:1e:99:d0:b3:
         f8:78:a2:fa:8e:81:57:c0:c7:b0:70:6c:53:fd:d8:9e:26:44:
         27:ca:9c:64:50:6d:e8:2d:2d:81:0f:59:ad:d0:14:b4:8e:22:
         b3:4c:56:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:22:01 2025 by rpki-client