Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/2978caed-d425-356b-b3c3-514e96c998c3.roa
File:                     2978caed-d425-356b-b3c3-514e96c998c3.roa (raw, json)
Hash identifier:          lyLNNcjOtYm4j2Ovf7MUSXfq325P3HXhptUXb8FlLjg=
Subject key identifier:   FB:1F:35:CF:97:D7:AF:18:50:A2:49:0F:FB:8C:1D:78:8A:48:9A:D0
Certificate issuer:       /CN=e42a3de7-584f-4010-acae-b7935ed3f602
Certificate serial:       010D0C9F4328584944692E0905D1D53A89669000
Authority key identifier: D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/2978caed-d425-356b-b3c3-514e96c998c3.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     14086
IP address blocks:        2620:1f:4000::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:2e:09:05:d1:d5:3a:89:66:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e42a3de7-584f-4010-acae-b7935ed3f602
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=490d8cf0-e4ee-4fe7-a1f3-7344d20cf50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:31:e9:34:f4:07:1e:6d:04:4e:6b:66:df:
                    93:0b:24:12:b5:2a:dc:ff:5e:54:34:d0:3d:71:5b:
                    e2:9d:29:b0:db:69:5d:60:c7:9c:af:52:fa:c9:80:
                    90:1d:61:92:45:ae:86:e2:df:c9:d4:8d:98:a2:20:
                    8e:c2:32:61:76:18:ae:03:bb:0e:06:7a:9a:21:a3:
                    93:00:b7:38:62:c6:48:e9:34:74:7f:09:ec:62:e5:
                    43:8f:8d:e6:49:dc:95:79:28:db:f5:d0:3b:af:5d:
                    7c:7f:b3:18:3f:52:80:d7:31:95:ae:39:1f:2d:63:
                    1f:f1:3e:de:e2:13:58:78:52:1e:93:df:1f:99:cb:
                    87:cf:16:81:50:d8:7c:a6:91:f6:81:46:56:c1:14:
                    32:97:71:b7:e9:6e:59:98:c7:e2:97:0e:94:a0:c1:
                    7d:24:6b:63:fb:03:67:b6:59:81:de:e5:f5:4f:28:
                    c4:9c:9f:ab:da:1b:f6:02:4d:3d:1e:cf:29:a6:e4:
                    86:b7:a6:9b:b9:d8:a5:21:a3:50:71:52:5f:93:b8:
                    27:bb:a4:04:d0:7e:a2:46:1f:4a:63:f1:e7:ec:16:
                    39:d3:70:64:3e:9a:74:68:e3:50:85:d6:bf:3d:28:
                    fe:2b:3a:2e:c8:b7:45:e8:84:84:9e:33:48:54:e4:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1F:35:CF:97:D7:AF:18:50:A2:49:0F:FB:8C:1D:78:8A:48:9A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/2978caed-d425-356b-b3c3-514e96c998c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.crl

            X509v3 Authority Key Identifier:
                keyid:D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:f9:0c:8b:2f:f9:9b:c6:4c:8e:45:4d:9f:a4:51:f6:4d:
         f2:4c:20:0c:e2:33:e0:8a:9d:bb:c0:0d:5a:c0:82:26:bc:87:
         9b:b1:a5:2f:5f:db:ef:ae:2a:97:6f:ff:88:71:47:a1:b7:3e:
         ac:26:a1:02:4e:ea:26:4d:c0:33:2a:34:c5:60:ec:b9:b4:1e:
         9d:40:d0:98:b1:78:3c:79:fb:e6:f1:59:3e:17:32:54:90:5f:
         9d:49:c5:18:1c:a5:15:02:cb:33:54:9e:05:f1:1f:e8:26:9c:
         d5:29:a6:c3:8c:60:8c:f5:75:bb:21:aa:08:17:18:10:9e:c7:
         72:36:73:ec:0c:5a:34:67:d3:8e:16:bd:37:3d:32:9e:3e:34:
         14:ab:1a:71:4a:3e:e7:0c:8e:a8:dd:0a:be:2b:08:31:b8:af:
         88:3b:2d:77:d5:9e:0c:d0:da:52:1c:c4:b7:d2:98:26:55:67:
         33:d4:e5:06:df:db:4e:c9:92:d0:ef:ca:39:67:e7:9c:bd:f5:
         26:ba:b5:0d:ec:46:3a:b3:92:47:d8:be:a1:98:6c:61:1f:70:
         a3:72:a0:ac:d8:c6:f4:dc:e2:d2:9b:d1:97:7d:06:73:2c:d9:
         a8:d5:e1:69:4a:39:2e:37:86:35:9d:cb:3f:03:36:d4:d3:1c:
         ad:30:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:37 2025 by rpki-client