Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69961f65-f2d7-348f-ab1d-0f6a2a6a19cd.roa
File:                     69961f65-f2d7-348f-ab1d-0f6a2a6a19cd.roa (raw, json)
Hash identifier:          AQQ7ybdwn93woL5xb83TNNPLE9oPrIY9+cth+7YVFTY=
Subject key identifier:   9F:50:7F:DD:3E:53:D0:7F:D8:5A:7E:6C:93:1C:DD:51:B0:D2:0D:91
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A13625F4370F260BA6EED140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69961f65-f2d7-348f-ab1d-0f6a2a6a19cd.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:140b:2a00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:25:f4:37:0f:26:0b:a6:ee:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=8091585d-d306-4274-830e-0937f2891444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2f:65:e7:6a:3e:72:1a:b8:fe:28:7a:78:97:
                    c8:78:92:25:0d:0b:b9:47:cc:fa:36:4f:82:b7:ca:
                    41:d1:1d:9f:07:60:e4:53:67:81:31:9e:c7:b1:ca:
                    8f:6f:c4:ec:69:32:df:e8:a4:06:49:fe:98:f1:46:
                    2e:14:d6:ea:26:23:bb:7b:e9:7f:ca:91:ce:a9:d3:
                    8d:7d:1d:f3:73:d1:fb:15:6c:3a:0a:8d:c7:c9:1e:
                    36:62:8f:43:50:ef:d4:60:c5:28:a1:09:ce:88:13:
                    6d:fb:cc:08:6e:05:d4:18:e8:b7:fd:e0:ab:bf:80:
                    3b:a7:14:46:c5:56:b0:6e:91:0c:7a:17:10:c0:6e:
                    6e:c0:dd:b1:c4:76:12:a1:7b:4d:d6:66:ce:35:db:
                    d7:75:34:3a:b4:48:b8:a4:97:67:df:99:25:b9:d9:
                    d6:d6:b3:fd:00:54:fa:d9:1a:d6:2f:2b:93:0c:85:
                    ed:91:35:62:2d:93:61:f4:c8:7c:be:43:3a:3a:44:
                    53:46:c8:c5:de:33:d8:ec:78:61:48:52:33:d8:85:
                    b2:78:eb:fe:0f:7e:ef:e4:34:cd:04:2f:c1:d5:cb:
                    50:65:05:bc:c1:12:d1:5c:e4:89:6d:fa:53:50:b8:
                    a1:60:c4:e6:27:ba:ed:b9:7f:5a:08:34:49:0d:0c:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:50:7F:DD:3E:53:D0:7F:D8:5A:7E:6C:93:1C:DD:51:B0:D2:0D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69961f65-f2d7-348f-ab1d-0f6a2a6a19cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:2a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:0c:da:07:bb:fd:61:81:45:54:78:c4:ef:29:6f:36:db:
         07:7f:a3:e4:95:fe:59:71:f9:b7:dc:8d:ef:a8:96:95:4e:f1:
         e8:1a:c3:92:b3:4a:de:b7:57:7f:be:d9:6c:e9:dd:2f:40:f5:
         a1:c4:c2:da:64:6a:65:7c:37:54:5e:96:63:c7:5d:16:fc:6b:
         74:e7:05:20:c8:c2:13:17:73:93:09:72:5f:03:b2:e1:43:8b:
         6c:4d:8e:1d:7e:d3:4e:67:46:1e:23:65:dc:cb:26:de:f5:81:
         23:84:92:29:19:d3:25:89:15:4c:10:03:ab:07:b6:9d:ae:a9:
         01:18:0c:92:eb:89:5f:3b:a7:41:e5:6a:dd:c5:dd:53:36:7f:
         28:60:b3:84:c0:7d:90:1c:5c:fb:b8:ef:be:98:a4:36:3c:2c:
         d5:d5:8a:41:74:74:3b:7b:29:86:1a:63:5e:21:80:cc:c4:f4:
         1d:cb:2f:60:95:08:ea:85:a8:f7:3a:d0:6c:31:d4:eb:2a:13:
         7c:e1:c4:b9:08:22:8a:22:a4:ce:be:18:23:bf:6d:75:46:00:
         14:5c:4b:09:09:81:a4:ac:28:a2:5e:30:76:29:cb:00:cd:d5:
         8d:b8:6a:0a:91:10:6a:90:2a:db:6c:56:0e:58:08:b5:f3:12:
         50:cc:87:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:53 2025 by rpki-client