Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa
File:                     a31500f4-cfd5-3cea-b888-2f24641d721d.roa (raw, json)
Hash identifier:          3d74Kewi3R3hhgE6P7QaD/PbkE0/GX3FpRbFS/g7G64=
Subject key identifier:   32:35:A1:D3:30:0B:61:7E:40:B9:72:E5:B4:F4:44:47:CC:59:5F:68
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F43285848A400BF8269BD5232E1DF1400
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2620:135:7017::/56 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:bf:82:69:bd:52:32:e1:df:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=c2788d37-33b3-48f9-b32c-0d519d18a5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:84:ab:89:ab:1a:44:1b:d7:34:03:f2:cb:
                    bd:b4:d0:1a:f9:08:52:03:15:6f:be:d7:33:9b:4b:
                    8b:72:24:63:c4:b4:27:e8:d4:41:8c:f3:1d:0d:09:
                    f1:6a:47:c1:68:d0:2f:e0:18:96:6c:5f:f4:45:38:
                    d0:c3:24:d8:47:7a:55:ac:7a:aa:63:7d:5c:40:1d:
                    4f:31:55:fa:a4:55:fe:66:6b:d1:8f:53:79:eb:4d:
                    41:83:f1:14:81:36:61:c4:e2:a5:81:a0:d1:f5:04:
                    71:bb:42:18:d6:3d:e6:3e:5b:f4:97:2b:db:b1:d2:
                    59:81:98:0a:65:ed:25:c1:27:7e:37:f0:eb:76:3f:
                    73:7f:86:35:41:c8:9f:2b:15:88:dd:e0:ee:c4:6e:
                    8e:66:e6:f7:39:b0:10:7e:4b:35:d2:4e:ef:4d:4b:
                    96:6b:ce:ae:4e:b7:1e:26:ad:e4:85:2b:34:8b:eb:
                    1b:3b:8e:73:ef:b2:49:61:5f:2f:f4:fe:a6:c5:d1:
                    1c:28:f6:7c:8a:cb:b1:ae:92:f0:34:c0:f2:67:a1:
                    d5:d3:69:a5:9b:73:c1:a6:d8:ca:b5:c4:7e:33:12:
                    c0:71:8a:77:72:9a:3f:29:f2:94:b5:15:19:e8:e3:
                    8a:f2:e2:c3:b6:5a:b9:f8:1a:d6:ac:3c:fa:83:bc:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:35:A1:D3:30:0B:61:7E:40:B9:72:E5:B4:F4:44:47:CC:59:5F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7017::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:6d:c3:96:a9:9e:7e:2a:a7:10:f5:cf:c7:42:f7:e7:0c:
         62:a7:7f:91:32:1c:75:c4:f0:2b:12:a6:2a:2e:40:15:a2:c3:
         1b:64:04:8a:53:ba:02:9a:91:8f:41:25:1c:35:6a:0b:08:e9:
         d4:60:8c:aa:4e:4b:39:c4:27:a1:c9:49:c0:7a:92:fb:b5:2a:
         6d:96:81:f8:67:45:5d:c7:a8:4a:6f:89:08:5e:ee:a4:f3:0d:
         18:5d:da:c9:04:34:6c:fb:04:b7:f3:33:8f:dd:a8:64:03:a5:
         8c:10:82:1d:c2:07:72:9f:77:f8:6b:65:1f:f4:03:46:9c:8f:
         66:70:93:89:ae:45:8b:06:66:03:3b:7f:72:74:5d:69:6a:4a:
         9b:e2:8f:41:c1:16:6d:71:db:52:73:1e:09:92:16:81:8e:3d:
         53:b1:93:ab:25:74:e3:2c:5e:eb:df:27:20:1b:e5:bc:56:91:
         36:c5:01:cd:23:16:a5:8a:a2:f6:3a:47:17:ac:b6:5d:9f:7d:
         cb:9f:85:21:05:d1:53:63:56:44:2f:45:c3:1d:cc:26:36:24:
         f6:d2:08:c6:49:40:dd:d2:45:f0:d8:4b:39:5f:54:d5:27:8e:
         b8:ff:91:26:5b:73:5f:3e:aa:9b:04:8b:23:1f:08:d3:a9:43:
         d9:3a:c8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:36:00 2025 by rpki-client