Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/255f501d-117c-3ce2-be6d-4db8309a1ac4.roa
File:                     255f501d-117c-3ce2-be6d-4db8309a1ac4.roa (raw, json)
Hash identifier:          CFeR5hhVYUbHMI4t4/hruVt2J6khqBjKOuUnutkwtM4=
Subject key identifier:   17:23:86:84:5D:75:BC:22:5D:79:FE:40:54:87:03:D8:A7:6E:88:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400EB9B20E7F4B8D023BD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/255f501d-117c-3ce2-be6d-4db8309a1ac4.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100d:a0ee::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:eb:9b:20:e7:f4:b8:d0:23:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=0ba619a6-eb9d-49fb-a61b-664ad6df73e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:b8:4a:43:1a:9a:d9:1e:17:73:b9:33:a5:
                    3b:a7:e2:92:e3:fc:5e:ba:1e:4f:ce:d4:81:d0:cb:
                    be:a7:67:f0:dd:57:6a:53:4e:4e:d0:bf:e9:3f:c7:
                    2b:1a:78:09:cb:4d:4a:b7:90:1e:45:41:23:80:73:
                    d7:bf:c9:38:ac:ab:c2:0d:24:64:c3:8c:a2:ef:da:
                    2d:f3:65:7d:3a:c0:61:54:2d:40:40:49:22:73:ce:
                    6a:de:14:7d:79:80:90:cd:02:30:c9:97:d0:95:5d:
                    39:bd:00:bb:2c:2c:a1:6e:2a:93:f2:cb:78:63:0d:
                    58:45:79:70:d7:db:44:04:12:c3:ca:5f:5c:e0:de:
                    da:b7:45:94:42:72:c7:02:a1:77:b2:67:6b:b9:54:
                    07:8b:07:df:23:51:04:82:54:25:af:d1:46:33:71:
                    e8:51:2f:08:63:60:8d:ef:33:f0:6c:60:52:6c:16:
                    7d:fb:65:ac:d3:70:46:0e:4e:e9:11:f0:98:13:d4:
                    67:8a:dc:a0:49:11:de:f7:26:56:fb:b6:a2:8c:c0:
                    84:2b:0c:45:0d:7c:30:19:af:4e:29:1e:30:0b:fc:
                    46:8a:1e:13:2f:c2:ca:01:8a:cc:c9:0d:88:90:6b:
                    0b:09:21:81:9c:35:69:06:12:ec:c9:fe:52:8d:32:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:23:86:84:5D:75:BC:22:5D:79:FE:40:54:87:03:D8:A7:6E:88:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/255f501d-117c-3ce2-be6d-4db8309a1ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a0ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:b0:d8:b7:d8:e9:4f:33:83:cc:58:71:74:0c:00:9e:76:
         0b:4b:44:87:3e:1b:70:1e:1a:a9:87:7d:b7:fe:c7:41:4e:b5:
         52:0e:50:e1:94:b5:23:7e:4f:ba:1c:47:17:31:fd:eb:6f:b5:
         d6:3a:a6:94:ef:4e:2c:52:99:8e:b3:38:5a:72:c8:02:4b:1d:
         c9:4e:ea:52:63:20:50:f2:00:23:68:45:46:ed:f4:74:71:80:
         c8:1b:e1:0c:2b:f7:df:c2:99:84:c0:fa:be:28:6b:1b:22:6a:
         e9:7f:90:b2:70:5a:dc:21:be:67:3f:8a:9b:0f:a4:b9:2b:c5:
         30:10:4c:83:9e:48:1b:a6:49:8a:9a:ae:fe:ce:98:93:66:6e:
         f2:e8:5b:42:2c:5d:2b:23:27:8d:3e:c1:ad:32:bb:0f:aa:ab:
         c7:b9:30:6c:b7:82:c8:aa:96:5b:3d:a8:5e:76:20:7e:7b:b2:
         63:b5:07:df:6d:fc:ff:76:b9:89:80:e1:47:33:03:39:a3:6e:
         5b:f7:8d:b8:60:0d:a7:6f:3e:24:08:3d:17:ac:bf:8d:c4:51:
         c4:f5:f4:5b:41:e0:48:d2:9f:d8:94:8e:0d:00:44:d8:c4:6b:
         ff:f6:06:46:44:2f:e9:ed:76:99:09:e5:c1:99:51:a6:ac:86:
         3d:83:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:23 2025 by rpki-client