Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74ab4167-5f81-399d-8834-0a1f835ead7f.roa
File:                     74ab4167-5f81-399d-8834-0a1f835ead7f.roa (raw, json)
Hash identifier:          wGdyOha/dwp6M5ZXR37UGAPR44tiwtKBGvL4KZmBaQY=
Subject key identifier:   9A:0D:7F:0F:15:D7:82:6C:53:2F:D5:50:F5:A5:58:28:C8:D3:4A:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A1363168FEE09473CAFC4400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74ab4167-5f81-399d-8834-0a1f835ead7f.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1416:5000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:31:68:fe:e0:94:73:ca:fc:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=0ede71b9-cf18-41c1-9b0a-ebbd56985c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:9e:03:5f:1a:cf:54:a6:80:af:96:39:6c:
                    f5:84:c4:1b:91:07:55:8b:d2:f1:70:36:95:d3:3f:
                    09:d4:ad:22:3d:bc:c8:14:e7:a8:06:a4:5d:9c:a4:
                    93:7e:07:39:9a:64:b0:3d:a1:b7:ab:9b:e0:51:09:
                    c0:45:4d:0d:40:b8:cc:21:17:e5:3e:b9:89:cb:d9:
                    12:0c:ba:60:0a:f0:ae:e9:23:79:12:e0:fe:96:cf:
                    b7:21:bd:8c:1c:cc:a3:9b:b3:29:a3:cd:6b:3c:15:
                    b1:ab:48:e7:8c:8e:0a:6b:b9:80:39:9d:a1:a5:45:
                    65:4b:38:89:3a:44:ba:65:2d:8d:e9:04:3d:08:26:
                    9d:4a:ab:07:38:e7:d0:77:2b:8e:4d:b1:4c:fa:73:
                    c0:5f:4e:9b:bf:91:01:00:f1:f8:c9:da:be:86:ec:
                    ab:23:08:ea:e9:af:cd:24:d4:ea:27:c7:35:e1:7f:
                    de:9f:39:83:b8:e9:3d:ee:01:d8:36:80:43:03:0b:
                    2c:26:64:4e:fe:44:2b:57:41:f0:41:69:ed:64:f2:
                    f2:ca:98:eb:d6:ad:8b:31:b3:b7:c7:57:a6:e3:66:
                    ac:04:6d:1d:55:37:c4:93:cc:a5:65:84:15:d1:9c:
                    41:2e:20:61:df:7c:f5:99:ba:97:2c:c8:da:75:96:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0D:7F:0F:15:D7:82:6C:53:2F:D5:50:F5:A5:58:28:C8:D3:4A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74ab4167-5f81-399d-8834-0a1f835ead7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1416:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fd:61:7c:6e:0f:88:bf:a9:8f:59:91:43:b5:50:aa:e6:be:
         5b:96:fc:71:b6:44:40:ed:88:71:73:59:af:7b:7f:03:fe:d9:
         ab:12:fb:d6:c5:46:8e:55:57:dd:d2:a0:3c:72:eb:9f:c9:77:
         66:ec:c9:91:b1:0d:5f:c9:4c:02:17:d9:21:db:a2:a6:69:f4:
         f9:be:f0:1a:bf:d0:87:6c:97:68:40:1f:1b:7c:ea:4d:a9:92:
         84:86:a7:6a:d9:6c:43:b7:2e:74:13:ca:e7:9a:a5:48:59:c6:
         1f:50:9b:c4:d5:d8:7a:b1:61:a8:cc:c6:a9:5c:3d:5c:c0:3f:
         c4:57:4a:f4:2a:2d:19:ff:63:74:88:dc:0f:41:fe:3c:d2:d8:
         33:f9:5b:fe:b7:63:fa:f3:19:0e:cf:26:8b:ef:46:5c:78:0d:
         eb:c8:13:83:28:ac:76:a6:7d:7c:5b:da:d0:db:b2:59:12:8b:
         e3:a4:6c:fb:46:a1:c7:5d:88:1f:7b:a3:d5:20:ea:39:69:cb:
         bb:67:de:14:19:8f:2d:5a:1a:e3:b2:f1:db:ca:86:fb:bb:88:
         11:8d:99:56:5e:be:d4:45:e3:b7:a6:87:ae:38:76:81:64:0c:
         bf:70:1b:83:e2:0a:03:ad:b4:e0:16:0d:f1:79:17:05:a7:b3:
         b4:be:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:19 2025 by rpki-client