Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa
File:                     42f72087-4467-3691-8acf-0987d8d58f26.roa (raw, json)
Hash identifier:          Hu7AxEn62MtfrgI3qM5yggzDSzVI6X5mzj/ZEljp1aM=
Subject key identifier:   69:C4:D2:09:77:85:D7:B1:07:77:02:90:B3:75:0F:A0:DC:05:F0:4D
Certificate issuer:       /CN=e8a5a257-a121-41de-b0be-6ab191fc4486
Certificate serial:       010D0C9F43285848A18AD55A886B370D25981100
Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa
Signing time:             Wed 22 Jan 2025 16:51:46 +0000
ROA not before:           Wed 22 Jan 2025 16:51:46 +0000
ROA not after:            Tue 22 Apr 2025 15:51:46 +0000
asID:                     32709
IP address blocks:        2605:ea80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:8a:d5:5a:88:6b:37:0d:25:98:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486
        Validity
            Not Before: Jan 22 16:51:46 2025 GMT
            Not After : Apr 22 15:51:46 2025 GMT
        Subject: CN=2e29e314-2ae0-4902-93bb-bafd25065199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:8c:fb:ee:89:d0:b6:06:45:98:0a:5d:ed:
                    4c:a9:fd:51:bc:a9:8e:6c:68:9e:6c:c4:ed:24:f8:
                    60:cf:83:3c:a9:50:f3:91:c4:10:b7:10:80:00:cc:
                    b7:08:14:29:57:1d:fe:7f:08:32:50:8f:3b:ee:d5:
                    25:2b:46:55:5b:62:5c:b3:71:01:6d:ed:62:81:db:
                    ae:ef:c0:4b:e8:e2:a7:d1:90:c1:0c:6d:e6:f8:c2:
                    f4:5d:27:16:07:4b:5e:61:4c:0b:04:ba:9d:98:f1:
                    e4:bb:dd:b6:d2:c8:61:60:b4:03:dd:b7:2b:31:3e:
                    b1:25:27:9a:2f:31:f5:83:f3:fa:92:2d:1a:45:ca:
                    d2:a0:fc:69:f5:e8:88:07:34:00:fe:c7:97:3a:6c:
                    fa:8f:17:51:ed:31:a4:a7:b1:c3:9b:84:88:69:c7:
                    f0:8f:77:14:6e:75:06:f7:d0:d0:ee:8c:5e:b4:a2:
                    fc:28:70:a5:6a:d2:ec:ad:3a:43:21:93:da:74:5f:
                    37:c4:3d:cd:32:f4:73:44:e4:fd:34:57:f4:d5:29:
                    a0:b1:49:c5:78:1e:48:4d:90:d2:8f:27:34:ae:a6:
                    31:77:6f:d9:21:f3:55:70:e4:27:67:1d:b4:56:00:
                    08:66:d9:22:7b:91:7f:12:63:69:89:78:eb:bb:21:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C4:D2:09:77:85:D7:B1:07:77:02:90:B3:75:0F:A0:DC:05:F0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl

            X509v3 Authority Key Identifier:
                keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ea80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8b:7a:a4:e6:75:23:9d:5d:2a:78:f9:07:e2:a3:1e:d1:62:
         e2:cd:70:66:99:36:48:01:fc:e1:b8:96:95:92:51:92:84:be:
         1a:1c:1e:c1:4c:de:bf:3f:50:5a:45:fe:06:d6:11:1c:d9:db:
         66:42:fe:b4:ba:39:75:83:34:6e:05:23:64:f1:e9:2d:10:b1:
         4e:3c:08:76:de:3e:6e:87:14:5e:95:2f:d6:f0:62:38:4f:2d:
         9d:f6:8c:68:86:6c:d1:5a:b8:91:26:4c:e7:30:05:07:71:94:
         2a:2b:32:2b:1e:64:13:fb:e5:ac:83:6e:e0:c7:dc:fc:37:02:
         47:97:2c:ae:bf:d9:9f:83:62:9b:29:5b:2a:da:35:04:d7:46:
         b1:29:7c:11:33:cf:ba:08:cb:60:84:b2:7a:dd:8b:41:73:3f:
         09:8a:d3:69:11:01:a1:2b:db:3c:24:63:11:02:4d:ca:b0:b9:
         47:79:cc:8d:4c:d5:0e:71:e2:5e:b5:29:7c:e3:6d:fd:40:17:
         7c:52:bf:a8:34:03:33:c2:56:fe:1c:b9:38:13:95:de:18:e0:
         b3:35:d0:ee:f0:4d:0c:61:2f:68:cf:de:0a:58:db:fe:de:ad:
         e7:09:42:6e:e5:3f:45:17:5a:48:12:bd:ae:10:be:76:e3:01:
         f4:ac:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:28 2025 by rpki-client