Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c3a590de-e964-3608-b8eb-bd811473f6cc.roa
File:                     c3a590de-e964-3608-b8eb-bd811473f6cc.roa (raw, json)
Hash identifier:          O9C+YQCSEwXi9BA0H7HCT1AOgTrzj5AtIGGjuK2W8VI=
Subject key identifier:   00:B1:B1:EE:BF:E6:00:BB:81:E3:C7:9C:7A:3A:F5:F9:96:22:2F:7E
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F432858489A3B42F899D766B42813E800
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c3a590de-e964-3608-b8eb-bd811473f6cc.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     53667
IP address blocks:        2602:2b7:c44::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:42:f8:99:d7:66:b4:28:13:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=6c2b6ed2-2e85-40f7-8bcc-863158cc4ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:51:11:4d:40:be:17:9e:9c:d4:4e:4c:fb:
                    0c:bd:58:d8:97:e1:30:a3:6f:51:ab:9e:41:25:bf:
                    16:9f:1f:d3:ce:8d:c7:91:c7:3d:e9:d2:bd:24:cb:
                    1b:14:13:90:af:37:a2:a2:9e:d6:00:3c:32:04:cd:
                    ab:17:f9:fb:19:ed:c2:91:c7:a7:46:58:76:1e:e9:
                    8c:3c:07:0b:ac:25:1d:4a:c5:41:2a:0e:e9:b5:1c:
                    fe:35:c4:c4:4a:1f:a4:30:4a:ce:89:b9:3b:4a:6d:
                    44:a3:cb:e7:f2:18:63:81:b1:c5:f0:29:6a:f4:42:
                    ec:1f:36:7c:6d:39:c7:0c:7c:c2:72:97:7d:56:62:
                    6b:30:7a:d5:1d:01:58:dd:2b:7b:3c:00:f1:99:9c:
                    ce:b7:1a:fb:70:ef:b6:51:80:d3:e1:fc:ac:bd:21:
                    8f:b7:62:4e:57:a1:05:47:83:3c:a4:ca:12:7a:a9:
                    1a:01:20:cd:f8:a2:97:1c:81:77:35:03:1d:b2:fc:
                    cf:28:af:b7:1c:5e:59:07:83:1b:9d:4c:db:df:62:
                    27:3c:16:ad:79:be:f4:15:68:1d:98:76:82:92:82:
                    be:5f:c9:f8:27:6a:23:9f:f3:51:8f:82:af:fc:d6:
                    0e:7f:68:3a:e9:ce:4c:0a:cc:c9:11:7d:b8:b0:dc:
                    16:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B1:B1:EE:BF:E6:00:BB:81:E3:C7:9C:7A:3A:F5:F9:96:22:2F:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c3a590de-e964-3608-b8eb-bd811473f6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:c44::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f4:bd:b1:7f:2b:35:3e:ed:c1:14:60:9d:cc:b4:1f:48:61:
         ea:6a:d2:80:7a:95:c7:15:ab:75:1a:4a:81:11:08:82:2e:9c:
         dd:f4:8e:c8:4a:8d:f4:cf:ed:e7:96:c0:90:f5:a5:9c:a9:27:
         ca:c9:4e:6b:4f:2c:99:b7:5c:3b:c4:60:ae:3c:dc:ef:a8:aa:
         b7:88:7b:a4:b3:f0:6f:2c:ff:0d:00:26:ee:53:2b:14:e9:41:
         0f:5c:30:be:68:dc:77:8c:8c:d4:d9:2b:52:3c:e1:76:18:b0:
         52:c4:8e:c8:bc:a9:ca:f7:2e:97:f4:93:99:93:cf:cd:64:38:
         b6:37:f1:83:3f:ea:33:ff:d5:f1:57:44:e2:cc:30:61:38:79:
         19:af:b6:dd:cd:44:e0:b0:b3:e2:7a:f8:e0:e8:97:b1:7a:1b:
         91:f6:36:0f:b8:72:f4:25:a8:bf:39:3d:24:5d:8a:ca:0f:8b:
         6c:52:45:a4:b3:bf:c1:0b:ed:ef:d8:c2:61:d2:74:44:6a:da:
         61:4d:eb:00:d8:ba:89:18:a8:89:4c:67:2d:3f:c7:43:91:8b:
         4d:30:11:53:fe:64:39:d5:6c:7a:f1:a8:40:23:5c:95:3a:89:
         74:7b:6e:ec:46:72:a0:b4:3e:c5:0d:9c:27:53:88:ce:25:66:
         54:c6:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:10 2025 by rpki-client