Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/4277c435-28c3-3fa2-862e-346dc42fa1d7.roa
File:                     4277c435-28c3-3fa2-862e-346dc42fa1d7.roa (raw, json)
Hash identifier:          0EhhLqoMHa2WGiXcmRoIaD6iZEUe78jQ64w06po5lyg=
Subject key identifier:   5A:86:DE:FB:F4:E4:DB:32:25:16:09:F9:AB:7F:DA:FE:06:77:BD:8C
Certificate issuer:       /CN=c24d54f2-22ea-4242-9583-989286d76aac
Certificate serial:       010D0C9F4328584953C44AF6CB8400EFB3461F20
Authority key identifier: 6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/4277c435-28c3-3fa2-862e-346dc42fa1d7.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     19382
IP address blocks:        2605:7c0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4a:f6:cb:84:00:ef:b3:46:1f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d54f2-22ea-4242-9583-989286d76aac
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=6b26c742-5bb0-4962-85f1-44933899948e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ca:12:10:2d:00:bd:90:8e:93:3e:e6:cc:9b:
                    05:88:f7:e5:fc:fc:66:83:0f:33:61:a7:aa:18:49:
                    8d:6d:24:92:c1:88:ce:8e:ca:f6:58:f9:40:2a:0b:
                    83:44:09:68:4c:fd:0e:78:50:17:e5:5c:aa:c4:a7:
                    e3:55:e6:c6:c8:11:5e:b5:68:bd:19:bf:af:87:14:
                    d7:9e:eb:5d:e8:70:93:8f:df:e2:d5:6e:df:9a:04:
                    b3:e1:69:74:6d:65:d5:7c:20:9c:b2:6d:d8:16:a3:
                    a1:4b:37:47:66:7f:4e:86:8a:28:93:27:28:7a:2f:
                    e5:5d:f4:dd:9d:d3:ec:5b:85:83:14:58:d0:1e:30:
                    28:8a:c4:44:40:b5:b9:99:c5:3a:61:58:d8:65:c2:
                    47:bf:ce:b9:fc:ea:90:0e:d9:59:28:48:9e:d2:2b:
                    24:47:28:1e:27:a3:fe:03:b4:42:10:5a:60:39:51:
                    7c:8a:2f:1a:98:b3:ff:55:16:26:c0:18:4e:0e:d4:
                    26:61:6b:ae:5b:be:65:7f:b9:97:14:e3:9e:1d:83:
                    bd:d0:08:a5:8c:2a:9e:8a:d7:dd:c8:d1:b8:d5:f5:
                    5b:67:69:cc:d0:cf:ee:85:e3:90:c7:ed:53:66:4d:
                    33:d4:05:c1:c9:8f:10:ba:23:1f:3d:7d:a0:09:b7:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:86:DE:FB:F4:E4:DB:32:25:16:09:F9:AB:7F:DA:FE:06:77:BD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/4277c435-28c3-3fa2-862e-346dc42fa1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.crl

            X509v3 Authority Key Identifier:
                keyid:6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:cc:4d:11:6d:e0:52:09:df:93:58:66:a6:1d:f2:01:3b:
         1d:c3:98:34:7b:72:d9:dd:c0:b7:f6:8e:39:67:72:e3:9d:92:
         0d:66:81:30:37:54:6d:03:75:f8:5b:de:30:8b:be:37:e0:f2:
         b1:4b:05:b7:d4:f9:61:fb:83:53:bf:ad:7f:81:93:6c:f8:21:
         83:94:6a:a1:23:27:38:d8:0c:0b:37:dd:2e:41:5f:67:aa:ea:
         12:45:08:e1:74:cb:03:b6:cc:06:6a:bb:59:bc:b1:3e:a7:6f:
         32:d8:47:40:19:b5:77:c6:ed:ac:95:82:06:6b:8e:cf:68:9f:
         43:cc:e0:68:2f:37:51:93:3d:e4:26:63:05:1c:40:fb:ef:91:
         65:1f:49:be:1f:f9:3c:22:f6:ec:f8:42:40:b0:6c:82:69:6e:
         31:2b:02:08:93:06:88:ab:f5:03:79:ed:37:06:4c:31:38:94:
         a3:c3:34:1b:65:53:7d:bd:3f:e1:5e:a6:af:46:f1:15:0a:e3:
         a5:a7:f5:09:99:ab:f5:03:ed:49:c7:56:00:f1:cf:ab:6b:f6:
         ee:78:8a:e7:fb:c3:49:17:69:64:10:47:66:63:fe:8f:4d:14:
         7c:b5:a0:74:10:7e:81:0f:a3:42:73:dc:a3:40:29:20:4b:f6:
         57:96:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:16 2025 by rpki-client