Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/f2449e41-f362-385f-a619-ab8e715445cc.roa
File:                     f2449e41-f362-385f-a619-ab8e715445cc.roa (raw, json)
Hash identifier:          gDmOIvmq9nlSOmD7Ypm8EiA2U08HLBZuA+F4HinxAUQ=
Subject key identifier:   BB:0D:80:E0:31:90:28:E8:3E:6C:B6:AB:C7:81:31:52:83:9D:F5:92
Certificate issuer:       /CN=9bfe0eb0-0689-4c02-9a46-078ee028d631
Certificate serial:       010D0C9F43285848D7A656A75D01DF57E47A9400
Authority key identifier: 17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/f2449e41-f362-385f-a619-ab8e715445cc.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     3851
IP address blocks:        2607:fe78:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:56:a7:5d:01:df:57:e4:7a:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bfe0eb0-0689-4c02-9a46-078ee028d631
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=c3e449db-d4e3-47af-b6bc-569d3655e2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:cb:f5:65:9e:73:72:75:73:21:93:25:9c:
                    b9:17:84:85:00:65:b9:70:f5:4d:f5:6c:87:af:97:
                    70:66:93:f5:20:a5:b1:52:ea:ce:8f:9b:99:5f:9a:
                    ab:38:c1:6c:78:6b:1f:4c:24:40:62:0f:79:e9:1d:
                    d3:91:50:cd:43:16:af:e7:88:22:7c:d8:f1:9a:6a:
                    04:8e:62:f0:05:88:51:46:97:37:04:f4:a7:97:22:
                    eb:a0:05:7e:c2:58:bd:8d:15:42:97:e0:96:56:51:
                    95:8e:45:99:e7:81:48:b9:e4:51:1b:d7:70:08:9a:
                    a4:b6:dd:a0:eb:4c:d7:95:83:c0:5a:26:ad:90:90:
                    b1:de:a0:f8:29:51:81:0e:9f:15:6d:b5:b5:a3:e2:
                    5c:a8:da:91:05:0b:31:48:f5:49:8d:13:c1:bf:91:
                    ea:bd:a1:9c:12:29:52:c9:96:3e:a9:e5:24:90:ef:
                    68:06:d2:e6:fc:1c:ab:41:ae:ef:29:67:b8:0a:0f:
                    dc:af:cd:7b:c0:e7:7f:40:d5:66:09:90:96:eb:28:
                    9e:a9:cf:06:de:46:20:3b:50:38:6d:ec:e0:93:cd:
                    ee:9d:79:bd:62:ba:8d:14:4b:ab:30:42:60:5a:9b:
                    08:ec:68:ac:41:30:84:94:10:0c:72:ee:c8:62:c3:
                    33:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0D:80:E0:31:90:28:E8:3E:6C:B6:AB:C7:81:31:52:83:9D:F5:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/f2449e41-f362-385f-a619-ab8e715445cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.crl

            X509v3 Authority Key Identifier:
                keyid:17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe78:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:4c:d7:dc:60:b7:e8:a1:db:d3:67:eb:95:2e:0e:e2:fd:
         91:69:36:cb:b1:85:33:8c:33:90:9b:95:ec:96:41:8e:49:6e:
         4d:65:fe:50:a2:9c:33:6c:ec:c1:33:f4:fe:21:7c:7e:62:db:
         e0:69:71:e2:e0:a5:7e:92:3a:c9:93:e4:2b:a6:91:26:02:3c:
         c3:69:59:bb:8e:20:b0:15:1d:cc:19:80:0f:4a:a8:b1:21:b8:
         32:bd:71:8d:fc:2e:a3:06:0f:da:28:ee:96:21:f0:5f:06:18:
         79:40:21:4c:c6:2b:6e:eb:75:c0:ff:bf:e8:97:e6:fb:cb:1b:
         cc:92:b2:28:08:fc:a0:65:a7:a1:56:61:72:10:db:3d:74:79:
         8d:6e:81:1c:97:99:25:09:35:7f:2d:26:c9:88:29:a0:26:43:
         32:8b:51:48:9f:6f:3f:1b:a3:c2:f0:8a:d0:d7:2b:e1:41:44:
         99:a5:5f:3b:b9:64:33:55:a7:c1:e0:a3:ec:12:a2:3c:0e:83:
         4f:10:0c:75:e9:1d:4b:d0:53:47:3c:37:45:ba:d2:6b:fa:36:
         7c:be:62:36:6e:af:59:2d:75:e8:7a:31:60:0a:53:a0:ae:9d:
         95:1d:97:05:93:fe:d3:0e:f6:a3:30:c4:e2:e0:9d:70:7b:89:
         f2:62:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:38 2025 by rpki-client