Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/3d499736-0211-32f0-83a6-858a0975bdcc.roa
File:                     3d499736-0211-32f0-83a6-858a0975bdcc.roa (raw, json)
Hash identifier:          WnnXr3mE1msZ83Q2hZLcnFZFFH1URibLoFWcyeT1dik=
Subject key identifier:   47:0B:62:FF:FA:B0:6B:7F:3E:A5:6F:5D:36:90:00:BC:60:87:B6:14
Certificate issuer:       /CN=7671ed9c-f209-4882-bd38-5f129f761a08
Certificate serial:       010D0C9F4328584172951E99F1C6030015E20200
Authority key identifier: 78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/3d499736-0211-32f0-83a6-858a0975bdcc.roa
Signing time:             Tue 04 Apr 2023 19:04:07 +0000
ROA not before:           Tue 04 Apr 2023 19:04:07 +0000
ROA not after:            Mon 07 Jul 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:72:95:1e:99:f1:c6:03:00:15:e2:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7671ed9c-f209-4882-bd38-5f129f761a08
        Validity
            Not Before: Apr  4 19:04:07 2023 GMT
            Not After : Jul  7 04:00:00 2025 GMT
        Subject: CN=63632882-29e9-42f8-bfee-2bab29b7ee09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:32:b9:58:d3:4e:e7:c6:21:c4:ba:e0:5a:
                    67:b0:48:8b:a5:5d:40:eb:70:17:92:18:29:27:09:
                    fd:b8:03:ba:c7:5c:7f:f9:4a:01:29:8d:53:28:7b:
                    65:b4:f9:3f:1e:a4:03:6a:64:fa:cc:a4:b6:3e:c7:
                    81:94:a3:0e:96:fd:e1:95:b0:a5:5d:d3:d5:45:54:
                    f7:3f:39:14:a4:82:fc:59:61:a2:4f:fe:f9:4b:6f:
                    19:25:6f:e3:e7:9d:28:53:f6:36:57:09:2d:a9:a9:
                    f8:43:7e:b7:43:61:c5:66:30:d7:1b:3b:15:ed:7d:
                    6d:84:29:a9:5d:95:41:43:38:25:b6:16:7f:22:8a:
                    03:3d:4b:f5:44:fe:0e:93:81:b9:36:6e:89:49:1f:
                    84:89:97:ca:03:7e:07:0c:b5:5f:fe:66:5a:17:fe:
                    da:bd:27:7d:c5:31:ec:91:9b:0a:67:18:ee:c9:f5:
                    40:c7:0c:47:b4:a5:72:cc:af:aa:4b:fc:55:ea:d1:
                    25:6b:73:a2:d4:79:ef:f0:f7:e4:b4:bb:3a:1f:4a:
                    e1:e5:1f:ab:44:da:58:12:c7:c7:fa:e2:ea:0c:f0:
                    c1:bc:07:d7:78:b1:a9:78:48:0b:4f:5d:c7:f9:8d:
                    50:52:92:d5:d5:03:52:cb:fd:b5:e0:b1:38:ab:51:
                    fc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0B:62:FF:FA:B0:6B:7F:3E:A5:6F:5D:36:90:00:BC:60:87:B6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/3d499736-0211-32f0-83a6-858a0975bdcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/7671ed9c-f209-4882-bd38-5f129f761a08.crl

            X509v3 Authority Key Identifier:
                keyid:78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:5a:71:ff:ef:42:c8:e5:7a:cf:7a:2b:a9:f6:fb:72:23:
         51:85:44:cd:97:9d:de:dc:30:68:0e:66:31:b6:32:f3:03:dc:
         f9:83:7f:cb:c3:81:4d:ab:d2:b9:35:2a:99:a3:bf:4b:eb:80:
         1b:d1:a2:be:b3:42:fc:87:93:97:49:aa:59:24:6f:9c:e7:34:
         46:56:50:91:05:68:c1:87:e8:db:e5:58:85:48:4c:39:cf:33:
         a8:8e:6c:8b:fe:d2:65:3d:1e:9f:07:54:e3:d7:a1:75:5c:8a:
         da:7b:22:b6:6e:5e:87:84:46:0b:51:20:39:b5:d9:9d:15:aa:
         bd:8a:8a:8b:16:4f:65:64:07:87:1b:12:2a:29:9c:7f:b2:bd:
         fc:29:1a:8e:06:6a:22:84:ff:e9:83:98:00:de:e0:e9:b1:31:
         f8:49:56:07:f4:c7:78:72:f8:44:d7:cc:32:35:58:36:15:ab:
         51:db:88:17:d6:86:c8:db:d0:ed:75:5c:bf:ee:2a:d4:0a:97:
         31:08:f1:88:2a:73:ff:ba:01:ae:83:bc:a8:13:f3:73:0d:12:
         54:81:fe:21:d9:81:dc:40:08:0c:be:bc:9b:e4:f6:a3:09:85:
         5f:1d:6f:7f:8f:22:0b:64:c2:05:9d:a4:9f:ea:02:12:de:0a:
         ab:ac:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org