Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/dee1cdfb-0d4b-3277-b1cf-711400fa0510.roa
File:                     dee1cdfb-0d4b-3277-b1cf-711400fa0510.roa (raw, json)
Hash identifier:          oQz/dWMcRtdXdiri2IUiU55bYFnVfQhrh7LL+kLY8ck=
Subject key identifier:   46:E9:33:FE:43:2D:5C:BE:35:9A:CD:C6:77:76:B1:AE:7A:02:A3:40
Certificate issuer:       /CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
Certificate serial:       010D0C9F43285848B5F3C26B2CC15962B60666C0
Authority key identifier: C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/dee1cdfb-0d4b-3277-b1cf-711400fa0510.roa
Signing time:             Thu 30 Jan 2025 00:19:21 +0000
ROA not before:           Thu 30 Jan 2025 00:19:21 +0000
ROA not after:            Tue 29 Apr 2025 23:19:21 +0000
asID:                     44382
IP address blocks:        2602:fa5d:1::/48 maxlen: 48
                          2602:fa5d:2::/48 maxlen: 48
                          2602:fa5d:3::/48 maxlen: 48
                          2602:fa5d:4::/48 maxlen: 48
                          2602:fa5d:5::/48 maxlen: 48
                          2602:fa5d:6::/48 maxlen: 48
                          2602:fa5d:7::/48 maxlen: 48
                          2602:fa5d:8::/48 maxlen: 48
                          2602:fa5d:9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b5:f3:c2:6b:2c:c1:59:62:b6:06:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
        Validity
            Not Before: Jan 30 00:19:21 2025 GMT
            Not After : Apr 29 23:19:21 2025 GMT
        Subject: CN=6cb672e0-dd48-4979-b7a1-fca5bfb1e9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bd:6b:5b:39:82:64:c0:10:a1:1d:c6:08:09:
                    35:33:66:ea:23:f6:08:92:82:f2:a3:f2:67:5c:c8:
                    1a:40:06:f8:35:8d:f7:17:a3:17:22:68:1d:f0:55:
                    78:70:79:28:91:5e:35:c3:82:9d:4b:4b:0f:23:62:
                    db:30:4e:06:1e:ea:64:4c:ba:15:8d:d6:b4:15:8b:
                    1e:1b:de:0d:68:08:91:5b:14:4b:09:68:b3:ea:ae:
                    96:f1:54:51:96:8a:9c:71:03:7b:73:e8:f7:ac:10:
                    8e:84:33:97:65:91:4c:ad:f7:2a:f5:cd:5f:33:2e:
                    85:a4:71:3b:e7:dd:4a:e2:c5:97:df:95:a4:55:1d:
                    67:fa:7d:1a:0d:4a:1b:e0:69:d4:57:c6:5b:a0:ea:
                    d8:28:28:8d:1d:d5:84:e1:5e:57:14:06:b9:15:49:
                    e6:08:e2:67:b8:e7:17:4e:f8:a6:e7:7d:3c:ac:02:
                    be:83:aa:63:ea:1d:3d:5f:5a:46:73:27:52:9a:2c:
                    71:d1:fd:05:e7:00:8a:49:fc:22:34:f2:6b:f5:83:
                    09:c5:a0:50:41:19:f6:4d:c6:9d:b6:de:86:18:22:
                    18:96:74:db:65:3c:f9:57:09:07:5a:32:bb:72:87:
                    0d:4a:91:12:21:4c:c0:e0:b7:d8:9e:77:b0:06:a7:
                    6b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E9:33:FE:43:2D:5C:BE:35:9A:CD:C6:77:76:B1:AE:7A:02:A3:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/dee1cdfb-0d4b-3277-b1cf-711400fa0510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.crl

            X509v3 Authority Key Identifier:
                keyid:C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa5d:1::-2602:fa5d:9:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:1f:fc:04:32:20:e3:88:1b:f5:fc:ae:04:da:ad:02:bf:
         fa:ed:a7:2a:be:db:cb:c9:60:a4:22:5d:b5:ce:a7:bc:99:7d:
         f2:58:e2:ef:76:21:78:68:fc:4e:97:00:64:a3:66:e5:cd:cf:
         f3:16:24:94:8a:cf:22:ad:fc:44:f0:af:3f:41:84:ca:11:35:
         85:b9:01:38:7f:4b:ab:c9:17:78:58:4f:2b:2b:45:f7:3d:97:
         07:bb:f2:ee:56:1b:d9:2c:14:f3:1a:68:a7:14:33:69:e2:cb:
         ff:17:d6:6a:a4:aa:6d:db:aa:24:53:f0:12:d5:a8:0a:cb:81:
         45:60:19:90:cf:54:ea:26:a8:ff:4e:aa:fa:3d:3f:ff:e6:b1:
         e5:b7:00:57:db:24:84:bd:60:68:d3:48:6e:15:80:ed:ab:b4:
         5d:63:1b:04:69:e1:68:37:93:10:2b:b3:cf:51:91:79:5a:9b:
         94:6d:07:29:7e:12:4e:51:f4:f9:63:24:a1:9a:f9:26:69:cf:
         ee:e2:e4:c2:3e:da:e5:86:19:35:ec:0a:f4:5f:e6:33:90:73:
         59:ff:4e:af:c0:b1:8c:85:83:a9:36:e5:ac:cf:eb:45:21:19:
         26:b3:b5:f7:89:26:ae:72:fd:c9:1b:58:9c:d5:1b:84:3b:39:
         bc:94:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:57:59 2025 by rpki-client