Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dde6e25-b721-3b73-87bb-20ff3f8beba2.roa
File:                     3dde6e25-b721-3b73-87bb-20ff3f8beba2.roa (raw, json)
Hash identifier:          rRXLDgcJF8Clqwq6F11qalQdwijGQdf4DBskkRF02HY=
Subject key identifier:   27:81:9D:05:32:8D:FD:57:A2:A0:AB:C7:F9:4B:34:68:06:43:A1:F6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848AC60DBF5AC73C1B792FCB2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dde6e25-b721-3b73-87bb-20ff3f8beba2.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     35994
IP address blocks:        2600:1408:1000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:db:f5:ac:73:c1:b7:92:fc:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=af4530ef-6444-4f53-99f4-57ca597e7bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:d8:b7:76:5f:32:60:6a:e5:97:cc:c4:ad:
                    00:2b:e5:ce:83:c2:5b:5f:2f:07:ee:70:d4:2a:15:
                    54:71:fe:6c:5e:92:3d:8d:b3:74:57:eb:4e:80:42:
                    28:42:14:24:e8:1d:44:4e:e8:0a:52:6a:02:3f:93:
                    db:28:e9:f2:eb:41:81:e5:49:43:c8:64:bf:8e:e3:
                    e2:3c:ad:b2:7b:d9:84:12:40:8e:ae:31:f3:3c:3e:
                    bd:9d:4d:ce:08:a3:32:c6:e2:1d:21:75:8c:cd:ee:
                    be:3c:df:d5:25:fc:c5:98:32:73:f1:44:b5:4b:87:
                    9d:ac:05:e7:32:19:1b:1b:58:5e:87:38:2d:7f:d3:
                    f8:35:1d:0d:40:87:55:0d:91:89:c7:16:28:6a:8c:
                    d8:e3:5f:9b:1f:06:7f:8b:5c:7d:f0:d1:ff:76:b5:
                    e8:19:4a:fb:32:13:ec:95:52:ee:d4:97:35:88:a8:
                    6d:74:61:9e:c6:cb:e7:c1:37:09:dd:d0:48:18:b4:
                    aa:38:8c:9d:36:33:31:57:48:5c:79:3b:50:75:e9:
                    13:3f:10:c0:43:23:b3:ec:4a:3b:ac:40:45:fd:27:
                    fd:9f:6a:92:ff:7e:ef:a3:ba:d5:4b:8a:5d:21:48:
                    d2:c5:43:92:60:68:3a:e7:56:94:9d:44:81:58:a1:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:81:9D:05:32:8D:FD:57:A2:A0:AB:C7:F9:4B:34:68:06:43:A1:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dde6e25-b721-3b73-87bb-20ff3f8beba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:17:d4:68:b0:5f:65:f1:ec:7b:1e:3d:22:c7:f2:48:4f:aa:
         97:87:38:c3:ac:72:31:c5:3a:34:67:73:5b:b6:23:e0:ee:04:
         e8:ef:76:0b:63:52:3f:b2:3b:09:e8:6f:72:d4:f6:1b:96:77:
         25:48:25:21:20:10:63:a9:76:bb:60:aa:f9:39:cb:db:26:6a:
         c2:11:87:1e:3b:d4:ce:92:bc:d6:fd:dd:37:35:70:01:c5:63:
         8c:6e:3e:65:f4:cd:18:e5:21:11:00:17:b5:91:7b:a0:02:4c:
         d6:a7:09:17:7e:52:fd:16:aa:36:16:42:06:57:7d:03:3f:80:
         05:0a:b1:3d:4d:b1:72:62:99:bf:02:1d:b1:07:df:e0:55:19:
         fe:82:a1:a5:78:61:64:d0:27:32:77:10:e3:2e:6d:e5:a2:6a:
         a6:f2:90:cb:c0:54:bb:e2:a9:61:97:02:fc:72:05:3f:5b:a2:
         e8:6d:e4:25:19:de:60:43:82:28:ab:55:08:9f:25:cf:a2:bd:
         3e:93:4c:ef:48:b2:0a:67:56:f8:fd:f5:be:7c:8f:ca:a8:bc:
         b9:81:f9:18:8e:52:20:0f:8c:31:dd:1f:be:75:0c:5f:fd:2e:
         88:28:3b:fd:13:ff:d7:ff:65:e5:ec:e2:73:ac:64:5e:61:66:
         1c:21:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:30 2025 by rpki-client