Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/d905f62f-4b4d-3045-863f-19a39ae19108.roa
File:                     d905f62f-4b4d-3045-863f-19a39ae19108.roa (raw, json)
Hash identifier:          zeCOEeN1CVUmwDYRR3tIEACDOVuKKoxMRLlHYk5mlr8=
Subject key identifier:   C9:E2:9A:8E:9F:CC:DF:DD:FA:8B:B6:E8:EE:F8:66:AC:34:22:48:F8
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F432858491D72276EC61390399B1A1200
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/d905f62f-4b4d-3045-863f-19a39ae19108.roa
Signing time:             Sat 08 Mar 2025 02:02:16 +0000
ROA not before:           Sat 08 Mar 2025 02:02:16 +0000
ROA not after:            Fri 06 Jun 2025 01:02:16 +0000
asID:                     62787
IP address blocks:        2602:f6d0:ea::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:72:27:6e:c6:13:90:39:9b:1a:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Mar  8 02:02:16 2025 GMT
            Not After : Jun  6 01:02:16 2025 GMT
        Subject: CN=121343fb-0dd6-4c2a-97c0-11d5fad9a3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:79:f2:c8:f4:3f:76:04:c7:a7:c0:e2:e5:
                    99:0a:fd:24:bc:cc:aa:81:bf:22:36:8a:ad:01:d3:
                    8d:38:d8:56:63:56:a7:07:46:77:14:df:ab:8c:b2:
                    20:ad:f2:8d:09:d2:77:6e:44:85:d4:24:98:90:d1:
                    c2:62:7f:9d:9e:06:18:ed:fb:5f:7b:e5:1e:3e:0d:
                    0a:2c:de:d9:57:96:a8:60:26:41:13:a2:ea:b7:c6:
                    0a:e5:61:46:51:1d:b8:be:77:bb:ae:62:2e:1e:49:
                    2e:2c:38:00:bf:a0:23:fa:ac:71:c2:51:6b:17:22:
                    b6:17:f3:6c:94:15:7f:79:5b:68:96:c2:ed:bb:34:
                    9d:b1:37:06:68:6b:97:f2:ee:c7:76:ad:85:a6:56:
                    eb:5f:dd:c8:0d:89:dd:50:ae:ed:b0:86:bd:27:01:
                    30:fc:ed:bf:29:2a:d1:a8:89:28:cb:d6:41:de:e4:
                    ae:12:ae:80:12:06:0c:ee:9c:8c:ca:d3:bd:cc:45:
                    86:43:b9:55:49:01:64:74:f5:67:a1:d9:be:1a:a1:
                    e3:9a:3a:1a:20:d4:9b:21:f6:e9:9f:44:63:f2:d7:
                    33:38:e6:c0:26:8e:61:74:c7:cc:76:e1:36:80:28:
                    09:cf:7a:bb:25:9c:de:5c:db:77:ae:9a:47:6b:17:
                    e1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E2:9A:8E:9F:CC:DF:DD:FA:8B:B6:E8:EE:F8:66:AC:34:22:48:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/d905f62f-4b4d-3045-863f-19a39ae19108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:ea::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:aa:73:ad:98:35:68:02:3e:fd:2e:f4:90:e3:b6:b4:94:57:
         4e:46:05:30:3d:b1:54:75:2b:4a:5b:58:6e:ea:69:53:eb:b8:
         da:38:38:a3:07:c0:ed:cf:ac:be:fa:4a:ca:37:84:42:f3:98:
         8d:d8:e4:41:a1:60:ba:74:c5:74:30:6f:d7:4e:10:04:22:9e:
         93:a8:a0:34:f6:dc:a2:0c:4c:6d:19:ca:01:f3:fa:96:d6:a2:
         35:de:33:9c:82:62:f7:a1:34:b1:11:0d:18:77:26:0a:de:ae:
         e5:6a:0b:cd:d8:70:32:af:6b:a8:86:18:e7:ff:f0:7f:1d:8c:
         ed:04:3a:33:ce:68:c1:8a:c1:2d:67:6f:01:4d:1a:26:b3:7b:
         aa:b4:c8:d6:19:45:ac:db:ba:68:88:4d:a3:01:09:dc:e1:ca:
         bf:99:28:3a:95:db:73:bd:33:ed:7e:eb:d8:99:5e:93:0e:31:
         94:03:ac:01:dd:13:76:c0:de:79:09:9c:8f:94:3a:fa:09:de:
         f7:65:a5:83:b4:e0:d7:60:33:27:32:c7:b4:77:3e:0c:d1:5a:
         32:0b:dc:70:fb:3e:8e:7d:cd:36:af:60:2b:b2:bd:ef:ab:a6:
         7e:b1:12:23:ee:24:44:de:6c:15:54:69:a4:d2:39:e9:58:55:
         1c:27:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:37:23 2025 by rpki-client