Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f99c6c9-de32-3f58-b267-db8dbf912d85.roa
File:                     7f99c6c9-de32-3f58-b267-db8dbf912d85.roa (raw, json)
Hash identifier:          nBHfXXsWwQYnvki7UHsoUKBSNeivdlKa2UqyhjQ3CfA=
Subject key identifier:   14:32:C1:7B:CF:99:F0:90:73:84:29:A8:A2:52:41:F7:F9:FB:7E:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848FD56B31F6C57D748D52E7000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f99c6c9-de32-3f58-b267-db8dbf912d85.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     12222
IP address blocks:        2001:4878:4259::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:b3:1f:6c:57:d7:48:d5:2e:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=f1fdb1b9-1eef-4e8d-b1d7-0113c1273686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:58:fb:74:ef:1a:e5:d5:67:d6:8c:db:88:f3:
                    5d:6d:bb:15:66:7c:40:1e:ae:9d:86:4e:b0:ee:87:
                    62:69:f3:27:56:61:f8:57:ad:cc:81:b9:b0:20:c9:
                    ad:3d:b5:46:aa:06:1d:00:32:12:fd:2f:64:02:0d:
                    3a:73:17:44:ed:63:98:75:f4:8d:67:67:f5:83:d7:
                    f6:5d:13:06:69:f1:d9:35:17:84:ec:c8:d2:36:0f:
                    e7:df:99:ad:a3:1b:3b:66:75:d6:48:8a:50:fa:37:
                    ef:ee:c3:4b:5d:64:d2:90:d6:e9:e7:ee:1d:57:03:
                    09:9e:82:31:e5:70:44:2b:08:1b:6f:ef:ff:ce:7d:
                    0f:9a:1b:ab:b5:ae:3b:71:f7:9a:9e:ba:55:96:b7:
                    15:0e:e1:e7:b4:71:74:e8:e7:07:4d:4c:51:eb:88:
                    bc:e2:ba:06:2f:5e:02:69:69:4b:17:28:ff:d9:99:
                    ea:67:a4:45:ca:9a:7c:44:b4:22:a9:24:f1:1b:4c:
                    f9:08:88:aa:9a:42:92:0f:2f:33:60:09:ba:79:0e:
                    97:ce:d7:6a:52:e0:40:7f:44:cf:24:74:e5:2e:fd:
                    d4:38:8a:f7:11:91:71:e6:23:94:52:4e:1f:17:7f:
                    59:2c:c5:7d:b5:9b:e8:6d:6a:e3:e9:e5:25:45:ad:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:32:C1:7B:CF:99:F0:90:73:84:29:A8:A2:52:41:F7:F9:FB:7E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f99c6c9-de32-3f58-b267-db8dbf912d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4259::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:71:ad:86:97:9b:35:aa:a4:80:ae:c6:e8:fb:a5:15:b7:62:
         30:8a:c4:ba:7c:71:60:6b:bd:07:87:58:22:a5:4e:df:aa:48:
         07:e5:6f:a5:0a:66:0d:19:4a:a6:13:98:1c:33:06:c3:33:87:
         0c:d0:8c:64:50:03:1e:fa:b8:53:f5:8f:63:99:6d:60:44:cb:
         48:ae:0a:94:58:ee:5d:33:51:b0:7f:3b:6e:c7:fc:18:96:bf:
         60:a9:fb:f2:c8:48:03:0d:9e:3d:f5:66:82:f7:f8:1d:17:98:
         9f:e4:34:b7:6f:9a:6a:2c:b1:18:6d:04:3d:6a:d8:60:f2:12:
         21:06:89:0a:22:aa:b3:f4:1b:90:4b:14:9d:48:26:57:bc:e1:
         a7:61:40:c8:ef:f1:a6:7c:e2:24:b2:02:84:0d:cf:5f:70:83:
         c3:eb:3b:59:de:ba:a1:26:50:12:d5:c8:e2:ce:1f:20:12:1e:
         ac:c1:9c:7b:00:e5:11:9d:ad:0f:1a:00:84:2c:6a:79:9d:87:
         d9:c1:a1:f8:dd:d2:0b:71:f4:f7:30:e9:e0:28:03:02:74:3b:
         7a:04:83:12:db:72:e1:5e:c8:05:6d:f6:32:b1:e6:28:75:10:
         4a:5e:d0:02:b9:cb:87:c0:1b:39:70:96:65:7a:4f:5a:91:db:
         df:50:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:02 2025 by rpki-client