Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/25bc85b0-8ee6-3007-babe-2bd9a0b4f676.roa
File:                     25bc85b0-8ee6-3007-babe-2bd9a0b4f676.roa (raw, json)
Hash identifier:          E4MqDvojDPLbyOG/ieagEcjw8mWfowLcFhtL31rnV00=
Subject key identifier:   A3:AB:A3:CD:42:48:6D:BE:D2:43:2C:4E:1C:BA:83:16:5C:3D:7B:2F
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F4328584944A7226D2B8E8D6FDC433B00
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/25bc85b0-8ee6-3007-babe-2bd9a0b4f676.roa
Signing time:             Sat 22 Mar 2025 03:05:33 +0000
ROA not before:           Sat 22 Mar 2025 03:05:33 +0000
ROA not after:            Fri 20 Jun 2025 03:05:33 +0000
asID:                     11832
IP address blocks:        2602:f6b1::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:a7:22:6d:2b:8e:8d:6f:dc:43:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Mar 22 03:05:33 2025 GMT
            Not After : Jun 20 03:05:33 2025 GMT
        Subject: CN=9bbb4c8e-0b50-427b-8cfc-01489691e300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:bf:16:89:36:8f:ee:9d:8d:ee:0a:aa:f3:
                    83:98:82:87:42:1a:81:fe:60:45:b1:89:42:68:79:
                    d6:2b:54:2d:46:ec:ea:ae:c8:b6:f5:d2:49:a5:c0:
                    cc:0e:5c:b7:20:7a:0a:a9:86:35:d1:4a:e0:97:eb:
                    5c:5e:db:bf:a8:ff:67:90:89:61:35:c1:9e:29:49:
                    08:6d:a4:34:9d:96:60:fe:93:99:29:ea:00:db:ee:
                    ba:c4:0a:86:b4:fb:f6:de:d8:e7:33:80:70:2d:6c:
                    d9:00:56:18:ed:81:0d:f0:c6:03:0c:01:53:58:c1:
                    d6:11:98:17:bc:bd:d9:60:5c:a7:5a:ea:1c:bb:68:
                    bf:53:f5:8d:51:b0:31:44:a0:52:3c:ca:28:4a:c3:
                    70:f8:f9:9f:f6:b4:ff:88:60:2d:46:cc:1d:8b:aa:
                    8a:44:00:23:0a:53:bf:cf:61:33:7b:ea:c6:39:6f:
                    a6:b3:fe:78:e1:4f:d0:ca:bd:3e:af:1c:e8:45:64:
                    22:fc:5a:01:35:8c:3b:f4:a4:40:4e:c8:6a:c3:17:
                    17:fa:b5:7f:99:f5:aa:f2:a7:98:75:8b:6a:57:8f:
                    af:7e:75:a0:ed:34:96:47:9e:4c:a1:d7:d3:36:f8:
                    46:4d:fc:fd:03:fd:78:a7:13:0f:2b:18:9c:22:87:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AB:A3:CD:42:48:6D:BE:D2:43:2C:4E:1C:BA:83:16:5C:3D:7B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/25bc85b0-8ee6-3007-babe-2bd9a0b4f676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:18:1e:2d:8d:a7:e8:c6:af:35:21:81:7b:2e:8e:f1:3b:88:
         97:28:11:b0:88:34:00:89:df:d4:c6:45:99:97:ee:b2:1b:12:
         ce:a1:d4:c5:72:fe:3f:71:df:9e:f9:04:82:5c:fb:58:ea:9f:
         ff:99:f9:ec:45:b6:c3:e1:a5:78:8c:33:57:69:8e:19:4e:d5:
         8d:09:64:29:9b:02:c9:c7:aa:4d:90:aa:ae:99:e0:e8:32:f6:
         5a:09:d9:01:c2:45:a3:1d:61:5b:7c:78:f6:75:ab:c2:fa:7a:
         3e:89:81:78:6d:0a:c2:b9:78:df:48:6d:33:d8:de:9d:d1:1d:
         75:26:58:a8:7a:29:bf:d0:6e:e1:e7:41:be:a6:c1:d8:0f:81:
         ec:96:f3:a5:9c:de:4b:6b:b7:1f:d6:4f:38:df:40:9d:83:78:
         a8:12:7e:02:63:32:d0:c4:2a:ca:df:84:e0:49:d0:8a:de:fc:
         a3:53:82:e8:29:aa:92:01:34:b7:70:ef:41:5a:3e:78:1f:0d:
         0d:4a:d0:1f:fa:2d:23:3c:49:9c:77:64:59:df:28:26:03:2b:
         ad:ad:a7:69:75:2e:60:4e:c6:6b:74:1f:98:5d:80:fd:48:7e:
         12:11:6f:8b:b8:ce:ff:37:d1:1e:95:15:ee:61:4a:54:b1:2f:
         ba:5f:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:32 2025 by rpki-client