Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/56685eeb-742b-350e-9c07-26887bba137f.roa
File:                     56685eeb-742b-350e-9c07-26887bba137f.roa (raw, json)
Hash identifier:          Zr5vVWvSEu38O3KCBRbydjKcMpiMunoFzPrBLYySMM4=
Subject key identifier:   2E:A6:80:77:E1:9D:80:44:CA:BC:82:33:D9:C4:2E:3E:E0:6E:D0:6D
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F43285848DEA11C9AC3451B89ACAE9680
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/56685eeb-742b-350e-9c07-26887bba137f.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     18464
IP address blocks:        2602:2a4:9f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:1c:9a:c3:45:1b:89:ac:ae:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=25a38a89-d9d3-40f2-ad90-b32f547957c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:7f:50:3c:15:28:3f:8c:1c:f3:2a:3b:af:
                    5f:ec:6f:f3:46:a0:c8:c0:e2:c7:eb:c0:43:d2:cb:
                    2d:47:77:f3:2f:9b:c3:b5:ee:21:3c:4f:db:c1:73:
                    10:c5:67:0d:8e:c1:0b:b1:0b:b5:d7:d8:56:68:67:
                    1e:8a:62:eb:b7:89:bb:56:14:66:e1:05:3e:18:79:
                    46:16:3f:6a:98:fe:de:4f:cb:07:6a:23:fb:5f:1c:
                    aa:a6:1c:3b:2d:89:cc:e5:ba:be:aa:fc:d5:bb:a2:
                    4c:6a:70:19:b9:df:8b:6f:aa:2c:e8:19:b5:fa:be:
                    f5:00:ba:42:e7:07:c6:b3:08:e0:eb:d1:18:7d:4c:
                    af:9e:2e:9b:55:a0:62:ac:c9:db:c8:e9:a0:c8:eb:
                    a2:53:36:b1:e3:ef:1d:d6:33:11:c4:47:84:22:9d:
                    ab:89:38:fe:48:cc:e8:7a:ce:23:40:29:95:5b:e8:
                    73:94:2b:17:81:ff:4d:de:f9:98:58:4f:9d:e2:b0:
                    aa:71:c4:0a:78:dc:96:94:9a:cc:ee:f6:cc:75:3c:
                    96:7d:81:98:e2:41:b2:70:70:b0:02:66:93:53:7e:
                    a5:43:88:b5:27:ca:12:0f:ce:4a:17:73:f6:59:67:
                    20:30:99:db:57:9e:b4:25:0c:57:f6:93:9b:2e:1d:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A6:80:77:E1:9D:80:44:CA:BC:82:33:D9:C4:2E:3E:E0:6E:D0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/56685eeb-742b-350e-9c07-26887bba137f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4:9f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:41:0b:03:62:ee:f6:24:f0:88:85:81:16:04:02:76:82:3f:
         93:41:e8:0b:b2:bf:9b:64:9d:3c:43:ac:b9:f0:ec:ea:b5:af:
         9d:31:90:a0:72:4d:9d:d5:20:52:72:3f:a2:25:75:e8:25:f8:
         7e:4f:c5:94:72:00:51:c0:de:16:94:7f:c9:09:9d:c6:fd:82:
         d2:96:af:26:48:80:87:0b:9e:08:f7:b8:3b:90:ca:2c:79:91:
         26:60:ad:f7:85:4d:b8:06:c9:f8:74:d3:2b:f5:25:bc:c7:4d:
         f3:c8:bb:f1:54:01:df:90:cb:ec:39:c8:e7:2a:86:6a:d4:25:
         7c:83:b3:df:05:75:71:82:8b:6e:6b:35:71:a1:2a:7d:ba:53:
         49:d0:39:a8:01:0e:65:65:ca:0d:bf:3c:c0:99:fc:32:eb:e6:
         11:a6:4e:a7:30:8f:77:99:c6:02:dc:ff:25:ba:ec:f0:3f:d7:
         b0:33:c7:ef:c7:a2:89:08:e8:21:83:21:82:93:01:a0:ae:f9:
         c9:7a:3c:95:a8:4b:59:94:ee:28:f2:c4:ae:2b:ab:75:62:9a:
         72:b4:a0:99:f8:dd:9f:53:b9:6f:5b:1a:8c:76:ea:72:91:de:
         33:46:0f:f0:7c:dd:12:0d:1b:e8:38:fd:16:29:46:f6:5b:24:
         dc:37:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:09 2025 by rpki-client