Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/743d10ad-e6e8-3aac-8ea8-d41cbfe75b16.roa
File:                     743d10ad-e6e8-3aac-8ea8-d41cbfe75b16.roa (raw, json)
Hash identifier:          gr2UAOBoHKIr1nJfkYhHclvG6fDWHa/k9VDOX1UVxaI=
Subject key identifier:   2D:E9:4C:C4:3C:FC:25:FA:02:29:41:42:52:FF:0B:E2:0B:EB:75:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858494FA294CFE59AEE49B76A8700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/743d10ad-e6e8-3aac-8ea8-d41cbfe75b16.roa
Signing time:             Wed 26 Mar 2025 01:30:16 +0000
ROA not before:           Wed 26 Mar 2025 01:30:16 +0000
ROA not after:            Tue 24 Jun 2025 01:30:16 +0000
asID:                     149290
IP address blocks:        2001:470:15a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:a2:94:cf:e5:9a:ee:49:b7:6a:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 26 01:30:16 2025 GMT
            Not After : Jun 24 01:30:16 2025 GMT
        Subject: CN=c2c0760d-b7d6-4821-84a4-0424588007ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:d5:4d:9e:54:01:57:a1:b6:70:b1:61:50:
                    09:bd:b1:57:c6:df:99:6c:06:ec:bc:45:7f:0b:7b:
                    f1:92:47:8f:36:9b:f0:0f:6a:ee:fb:4c:34:92:8c:
                    55:e7:82:0b:25:f3:9a:55:c8:17:b4:58:fa:4c:31:
                    51:31:90:75:85:d4:42:a6:c2:ea:dc:86:d5:5f:81:
                    0d:27:b7:59:ba:4d:d7:c9:3b:b1:b1:ee:a2:a4:a1:
                    a9:31:f4:e7:f6:77:97:96:4a:49:f6:0f:7a:38:03:
                    5f:2a:42:bc:f6:0b:fa:c7:bb:15:be:2d:b4:ad:ba:
                    be:21:a3:5d:38:5d:65:c0:79:45:60:56:29:0b:03:
                    45:1a:8d:ee:52:ee:26:64:0b:ed:ab:0e:02:43:21:
                    24:e9:d9:0c:f6:54:55:9b:56:50:da:96:08:be:4d:
                    20:3e:f0:49:6b:2c:17:54:2e:f9:a5:95:e3:32:30:
                    42:90:d8:2b:cf:83:e0:8c:49:b4:e8:86:9a:18:db:
                    23:1c:0f:8d:b8:bd:bd:3f:8f:8d:40:13:3a:7a:c3:
                    63:e6:b0:df:0e:55:7d:4e:3e:08:37:25:18:ff:c0:
                    11:09:16:70:c9:77:aa:87:6f:3c:f2:05:d9:32:a2:
                    5e:4b:e0:53:be:b0:88:14:3f:c9:fd:8f:93:6f:18:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E9:4C:C4:3C:FC:25:FA:02:29:41:42:52:FF:0B:E2:0B:EB:75:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/743d10ad-e6e8-3aac-8ea8-d41cbfe75b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:15a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:17:42:d9:c5:b1:71:47:ac:33:f6:fc:e2:61:15:1f:07:05:
         d4:88:4e:3d:f9:bc:08:73:09:66:a7:2a:21:de:b6:7a:2a:a9:
         63:47:08:bf:0b:88:8f:5a:99:26:88:61:a4:d4:ef:39:13:73:
         06:ac:19:c1:be:6d:e9:0b:43:4c:6c:df:4b:da:b8:f8:ec:69:
         38:02:fe:dc:ac:38:30:1e:34:f4:a8:e1:9d:a6:39:ee:33:a9:
         b1:d3:38:00:21:e0:05:3d:f5:ab:25:8e:e8:3f:c8:7a:aa:f5:
         98:bc:4d:ad:1a:19:64:e7:fe:99:94:14:15:c6:1f:c6:22:2f:
         a6:10:77:d6:ea:e9:d0:d3:3b:60:37:ba:7f:a3:b6:5d:4c:87:
         42:a1:c0:33:e4:bc:e2:94:dd:d5:80:d5:73:f9:24:9c:7c:7d:
         40:31:45:22:f7:99:a2:09:8f:41:fb:96:e3:69:a9:11:c4:a0:
         39:6e:9c:5f:44:b7:ca:25:85:bd:66:5f:b6:d0:85:cf:d4:1a:
         d0:79:e8:07:e8:1c:f6:3b:07:9b:c3:66:26:35:63:d1:e7:dd:
         f9:c4:e3:2a:e1:a9:93:d0:17:55:fc:6c:14:95:88:dd:22:70:
         8a:aa:da:7d:a5:03:8c:ea:fe:e3:bf:cc:9a:44:7a:27:d3:7e:
         34:70:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:52 2025 by rpki-client