Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d/1804a11d-ed55-3822-b9ad-6334d7bf49d8.roa
File:                     1804a11d-ed55-3822-b9ad-6334d7bf49d8.roa (raw, json)
Hash identifier:          KtS06fY8M+Yiqvkl9yfw8b/zanLrzystCLZxvBEMUlk=
Subject key identifier:   F2:5E:EC:C4:23:39:41:60:7B:67:3F:52:A8:DF:6A:49:CC:EB:F3:77
Certificate issuer:       /CN=2aa9f898-6727-4155-9669-aa60100f6c8d
Certificate serial:       010D0C9F432858483AD32007492B208EBF1FA0C0
Authority key identifier: 72:54:1B:C0:07:2D:B0:60:29:78:9B:2B:ED:DF:6E:2B:01:D4:D8:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d/1804a11d-ed55-3822-b9ad-6334d7bf49d8.roa
Signing time:             Mon 16 Dec 2024 21:49:10 +0000
ROA not before:           Mon 16 Dec 2024 21:49:10 +0000
ROA not after:            Sun 16 Mar 2025 20:49:10 +0000
asID:                     53343
IP address blocks:        2602:f765::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3a:d3:20:07:49:2b:20:8e:bf:1f:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa9f898-6727-4155-9669-aa60100f6c8d
        Validity
            Not Before: Dec 16 21:49:10 2024 GMT
            Not After : Mar 16 20:49:10 2025 GMT
        Subject: CN=322ca005-225a-4834-8902-bcd40a17cac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:1e:5e:af:f5:e4:b3:89:ba:18:38:70:43:
                    2c:eb:ee:28:79:68:24:3b:23:4d:a2:a1:52:40:f2:
                    f0:a7:03:46:0d:7b:81:e9:9f:c3:d8:29:42:49:68:
                    8f:7a:87:46:ef:53:39:49:3e:2c:df:50:71:a6:f3:
                    af:73:51:2b:95:04:e9:e6:d6:0b:fe:2b:da:36:51:
                    d5:9e:22:d7:29:6f:67:3c:52:29:94:5d:88:eb:07:
                    9d:f1:d2:9b:f8:5f:2b:6a:07:03:65:96:10:89:16:
                    46:c0:fd:9b:02:24:96:4d:e7:c0:3b:fb:25:7d:18:
                    ef:10:3b:73:b9:03:8a:2e:22:b4:59:a2:8c:78:a8:
                    b8:f2:f5:7d:31:8a:98:89:5d:ca:43:80:64:02:d6:
                    f4:53:af:90:e0:0d:7e:ee:42:32:ee:7c:a0:a2:f4:
                    fb:96:2b:65:0e:75:eb:94:6f:d3:6d:97:48:f7:ed:
                    17:1f:b7:02:34:67:1a:36:be:f6:28:e9:7e:55:e3:
                    1a:eb:40:3a:cc:a1:3f:25:36:2d:6e:a0:8a:c7:07:
                    2d:d7:27:c8:e4:42:54:94:0e:1e:83:86:88:ae:33:
                    86:8a:66:aa:9d:f7:7d:8b:f1:88:6a:bc:07:c6:2f:
                    28:75:15:fb:0a:4a:a5:ff:02:1b:f1:dc:fa:52:fe:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5E:EC:C4:23:39:41:60:7B:67:3F:52:A8:DF:6A:49:CC:EB:F3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d/1804a11d-ed55-3822-b9ad-6334d7bf49d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d/2aa9f898-6727-4155-9669-aa60100f6c8d.crl

            X509v3 Authority Key Identifier:
                keyid:72:54:1B:C0:07:2D:B0:60:29:78:9B:2B:ED:DF:6E:2B:01:D4:D8:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f765::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c6:9d:3e:ee:12:27:41:00:b4:40:37:af:ad:64:f8:b1:25:
         06:46:d9:03:3f:51:b6:37:58:c7:8d:50:60:29:59:a0:43:be:
         81:69:d0:22:ef:b5:f8:86:dc:ed:93:78:72:c3:88:b5:c6:e2:
         5d:99:50:31:21:c3:39:3e:d0:3b:99:39:0c:ad:70:ac:e3:0f:
         34:1a:eb:76:ab:39:92:56:d7:2f:9e:b3:7d:fe:a4:59:69:b0:
         22:b2:88:1d:ed:e3:41:ba:38:d1:cc:f1:19:40:3f:53:47:c3:
         7a:b5:40:55:ae:a2:18:f9:bf:6e:1b:1c:0a:1a:f8:c9:56:d4:
         e0:a6:dd:03:6f:bd:aa:23:38:90:ed:d2:5f:8e:84:8b:8e:87:
         e5:aa:19:5e:d3:d1:af:b1:2a:9e:34:03:b0:b0:74:96:cd:98:
         7e:f2:54:e4:b2:e8:79:b2:81:fa:58:d7:94:c3:69:d0:9a:b0:
         db:77:ec:17:88:7c:43:57:5b:ba:b3:48:63:34:04:79:3f:d9:
         d3:6d:06:57:b2:32:fb:20:9c:0c:1b:c6:ee:b5:ac:24:1d:1a:
         01:f1:78:1e:78:53:6d:ab:0e:84:4f:ac:f4:8a:53:ba:7f:d8:
         ff:5e:9b:69:4e:6d:96:56:34:4e:aa:70:3d:34:d3:35:be:c5:
         37:f9:81:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:31 2025 by rpki-client