Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c5c4e90-e52a-3220-98e5-57e5a09c29f8.roa
File:                     5c5c4e90-e52a-3220-98e5-57e5a09c29f8.roa (raw, json)
Hash identifier:          kN0+ERbnJxvVBIYa66Rkqu4xJ6tUtdgan1rYNUvV48Y=
Subject key identifier:   D4:BB:F0:03:BD:DE:98:DA:36:0C:EB:8E:89:0B:7F:F8:B3:A6:42:3E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA522113CE86138E3DB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c5c4e90-e52a-3220-98e5-57e5a09c29f8.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1011:b1c8::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a5:22:11:3c:e8:61:38:e3:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=27697f7d-4b67-4bf2-8589-ea58dce63495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:d1:8e:de:9d:39:fb:27:a8:0c:46:2b:f7:
                    ad:be:f7:53:4b:2c:7a:8c:cd:9e:f6:68:51:8c:8b:
                    55:64:aa:6e:dd:04:74:b0:fb:ee:6f:f9:b2:d8:7d:
                    2b:78:c5:7f:95:eb:4d:89:c5:43:6f:58:a9:0c:41:
                    2c:7e:d4:c2:db:e6:c5:dc:42:e3:0d:b2:07:27:bd:
                    32:fc:9f:29:04:ad:07:de:e3:8b:5d:7b:26:ac:26:
                    64:58:fa:1b:e1:f2:ba:66:30:b6:d5:39:87:08:65:
                    e5:2b:a8:41:0c:1e:a9:72:91:91:24:bc:76:5c:11:
                    23:82:73:16:97:ce:bc:40:6d:76:8d:d3:af:b8:43:
                    90:cf:3f:20:bd:7d:62:91:bc:79:c2:d9:e8:c7:44:
                    a6:95:ae:71:35:b3:9f:13:15:5d:3b:e9:96:4d:b5:
                    39:7f:e8:d5:2e:1b:e4:21:39:06:6f:d5:2f:fe:b1:
                    0c:35:14:d7:d3:43:f0:c1:ed:06:45:24:04:d9:cd:
                    5d:34:37:c0:20:7a:65:7e:b7:ee:01:8d:01:ee:3c:
                    df:cc:ad:71:82:f7:e6:9f:76:81:06:76:c0:57:7c:
                    4e:48:7f:1f:b2:17:3d:87:36:91:db:d5:62:f0:e9:
                    be:6b:5d:66:35:69:c1:b1:50:aa:14:c8:b5:02:4b:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BB:F0:03:BD:DE:98:DA:36:0C:EB:8E:89:0B:7F:F8:B3:A6:42:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c5c4e90-e52a-3220-98e5-57e5a09c29f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b1c8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:97:7e:6d:d8:0f:5b:e9:88:a8:92:c7:8e:87:5b:fc:ff:4a:
         0b:52:6e:53:e8:70:73:df:37:55:05:67:ae:f2:f5:60:07:69:
         60:10:59:f0:cd:07:a5:19:87:4c:e1:ab:0d:8d:6b:df:cd:36:
         47:de:44:50:b0:88:0d:ed:e8:87:b8:e4:d8:bd:27:f0:b7:c6:
         9a:85:89:c6:00:9f:95:2f:66:51:80:13:00:28:06:c0:2b:9a:
         55:14:0f:eb:6a:01:47:bd:01:57:c2:ef:a1:6d:0f:92:05:2a:
         31:09:9e:c4:c0:d2:df:43:51:b8:ab:39:93:df:e1:f5:95:c5:
         ff:7c:7d:00:8f:6f:28:de:81:5b:1b:9f:a6:80:ab:52:c7:c9:
         dd:8a:d4:02:39:d7:27:4d:eb:64:4c:bf:34:5d:c4:a9:1f:78:
         2d:57:f6:29:67:ed:20:b4:53:91:07:e0:c7:d8:2c:5b:e2:ec:
         e7:ad:a4:50:52:0a:fd:1b:fa:d8:8b:b0:ce:03:49:c8:52:86:
         52:ad:5c:bf:8c:e9:b0:6f:bb:6d:57:82:16:41:cf:ea:92:43:
         c0:f4:61:12:60:84:b2:c2:79:f1:b5:05:ac:70:36:3c:0e:58:
         40:a8:de:19:cc:44:40:7f:35:50:60:f0:c7:25:da:a6:c1:bf:
         ab:90:ca:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:52 2025 by rpki-client