Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/124079a6-8004-3270-8dd9-7dd5c869384a.roa
File:                     124079a6-8004-3270-8dd9-7dd5c869384a.roa (raw, json)
Hash identifier:          IVoi6tz+e6Jr7qW7EmYooN04FiIy6Wx+9wV6853tNpI=
Subject key identifier:   28:BB:85:B9:26:02:B9:94:75:5D:74:13:DE:23:A5:2D:0F:32:D9:6C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A13631BE11780C0C30604390
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/124079a6-8004-3270-8dd9-7dd5c869384a.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1417:4c00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:31:be:11:78:0c:0c:30:60:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=5993b2be-0348-454b-8800-bc2ea478ffbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:e7:7b:60:c3:51:de:fa:83:ea:b9:40:7f:
                    ae:13:e2:46:2b:f3:c9:17:87:f1:0a:e3:2e:d3:82:
                    89:a9:76:dd:de:e1:ae:e9:71:88:d8:f2:01:a5:72:
                    1f:9a:fc:6f:50:dc:35:18:0f:34:db:ef:af:5e:28:
                    bc:df:ce:e2:cb:c5:34:ba:68:e8:e1:39:43:8b:99:
                    6b:4a:fc:c4:50:95:3a:d5:b2:cd:23:45:d7:ec:b5:
                    f9:17:1f:ef:d8:09:88:7d:a2:cd:9e:4a:22:3c:ed:
                    8f:b8:12:12:cd:8b:e2:8d:63:28:64:6d:05:10:13:
                    f0:4c:e1:55:71:19:e6:dd:71:26:60:cf:45:36:05:
                    8f:4b:eb:8a:7d:3d:29:c3:b0:68:aa:5e:52:be:8f:
                    a5:6d:2b:15:58:85:d0:aa:c7:c0:df:30:52:e8:fc:
                    9a:e4:30:cb:35:11:22:eb:7a:df:7a:de:28:6d:18:
                    84:0a:cb:a1:f7:9f:91:d7:b2:b3:4d:3d:03:69:b0:
                    05:43:42:35:ac:19:b9:f9:67:79:71:d3:06:7e:d8:
                    91:16:aa:03:5b:7e:a6:20:b1:fa:d3:bd:43:a5:aa:
                    b1:72:8a:1c:90:5d:ff:bb:18:f8:fa:7a:ec:10:1c:
                    54:3b:1d:84:c4:da:13:23:3a:67:13:52:60:49:fb:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:85:B9:26:02:B9:94:75:5D:74:13:DE:23:A5:2D:0F:32:D9:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/124079a6-8004-3270-8dd9-7dd5c869384a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:4c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:72:46:ab:1f:04:61:98:e4:08:59:5b:a8:47:2a:26:94:
         37:9b:a0:8d:db:e5:4d:ad:11:d0:87:ba:a0:65:b2:64:0d:74:
         65:7b:5b:9c:d9:4f:11:2c:e5:b2:33:16:f1:ed:97:8e:06:ea:
         ac:2b:67:46:55:2e:64:a6:37:59:91:02:e4:4e:84:12:0d:d5:
         5b:c8:c0:0b:62:ce:4f:41:06:47:8a:e1:c4:06:76:7d:18:03:
         f5:fd:9a:2c:21:6a:52:5d:8c:c5:ee:62:ce:60:88:f4:b4:0e:
         e8:e4:64:47:90:9f:6c:ac:68:2f:91:47:e0:7f:92:93:c1:ac:
         1b:b7:33:4c:4f:ba:45:05:a6:90:08:7f:a5:ea:bb:9d:3e:43:
         85:87:3a:2a:c3:6a:0c:c0:a6:8f:81:dc:45:78:01:db:4e:ba:
         45:27:62:d4:38:c7:b4:68:9d:9b:f9:66:7d:7a:34:c0:91:1f:
         d5:1e:b7:39:39:95:43:18:06:29:22:7c:bc:49:76:3a:0d:e5:
         39:8c:41:d0:69:ad:98:f7:83:ab:7c:b0:c7:34:18:af:88:b7:
         c0:ea:c7:84:3c:45:c5:5e:1c:4f:42:2b:7d:73:6e:1a:10:99:
         f5:bd:82:77:31:9c:9c:cd:73:9b:79:8b:88:a9:45:6b:5e:14:
         20:ef:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:52 2025 by rpki-client