Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/75514c49-8cb2-3130-a8ec-908f24fd54e8.roa
File:                     75514c49-8cb2-3130-a8ec-908f24fd54e8.roa (raw, json)
Hash identifier:          /fOnTije+loLv54aEY/UJPV9pfqHcuHvgM8T7x7m9E8=
Subject key identifier:   DA:9A:F1:82:B5:7E:AC:55:E7:D1:FB:67:A4:08:6E:8D:9B:74:73:C2
Certificate issuer:       /CN=1eba12ff-c221-4ab3-9aa6-d542d0812543
Certificate serial:       010D0C9F432858495EEEDD235E1B93416C383B40
Authority key identifier: 3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/75514c49-8cb2-3130-a8ec-908f24fd54e8.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     10973
IP address blocks:        2604:3700::/32 maxlen: 32
                          2604:3700::/48 maxlen: 48
                          2604:3700:1::/48 maxlen: 48
                          2604:3700:2::/48 maxlen: 48
                          2604:3700:3::/48 maxlen: 48
                          2604:3700:4::/48 maxlen: 48
                          2604:3700:1000::/36 maxlen: 36
                          2604:3700:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:dd:23:5e:1b:93:41:6c:38:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eba12ff-c221-4ab3-9aa6-d542d0812543
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=e1a4b9ae-bfb7-4b46-b503-fe9a3a3c31f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:11:a8:09:6f:3f:a7:00:6c:75:e7:f5:0e:
                    33:ae:92:0f:ba:9f:9a:b0:f7:fa:82:12:70:f6:31:
                    16:cc:72:ee:80:96:df:67:17:eb:51:1c:5b:95:9b:
                    c0:5b:87:0e:ad:42:db:36:64:ad:bf:26:af:5b:a1:
                    2d:4e:2c:6c:ed:6c:5d:fc:6e:fd:4f:b2:61:8b:6f:
                    30:a9:4f:f1:59:48:15:a3:8a:25:3e:6d:a0:85:7b:
                    57:b9:bf:35:2e:8e:ec:24:ff:11:48:bc:bc:6d:1f:
                    50:07:8c:a3:13:64:b2:cb:e7:a4:b5:c7:7a:76:a2:
                    82:56:9f:4b:d6:09:75:d9:cc:3d:86:cb:70:f8:3c:
                    69:76:a6:a4:e7:e2:68:57:26:13:97:b9:94:1f:0c:
                    2a:57:9f:61:aa:eb:c8:ce:bf:05:26:35:09:10:c7:
                    97:ac:ae:77:bb:bf:c8:d2:ae:44:d0:b1:d4:ac:99:
                    ec:ca:ea:08:b7:59:8b:ff:b3:c7:c8:c8:1f:de:36:
                    05:42:58:38:6f:49:31:98:3a:87:cc:92:20:8f:11:
                    ac:d7:9b:1a:90:55:ee:96:70:fc:65:c1:a6:5a:cb:
                    3a:96:99:9f:0c:a7:50:5c:34:cf:04:46:c6:6d:fb:
                    58:8e:cb:c7:5d:54:1e:ad:37:31:7b:e6:df:05:01:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9A:F1:82:B5:7E:AC:55:E7:D1:FB:67:A4:08:6E:8D:9B:74:73:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/75514c49-8cb2-3130-a8ec-908f24fd54e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl

            X509v3 Authority Key Identifier:
                keyid:3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:7f:1b:5f:d0:c8:e3:ce:6e:f5:9b:22:b8:76:3c:4c:b8:
         61:88:d0:9b:01:b0:db:75:14:2b:cc:93:ba:4b:03:90:ba:13:
         81:7b:af:ad:1a:1f:0e:26:c6:4e:85:e2:d7:a2:59:6a:ca:12:
         a8:4f:33:7d:9a:8c:dd:ac:e3:69:8c:ec:d2:6b:4d:04:bb:a2:
         34:87:1b:72:81:47:c9:da:9c:d3:f2:15:8a:ff:04:e3:d3:f4:
         d5:6b:c3:b3:ee:6e:a2:3c:22:32:8f:c3:9a:d3:f3:89:d4:84:
         7e:60:4e:15:d4:5c:e2:0c:d2:43:30:a4:27:6b:d9:48:f4:4e:
         d3:78:1b:ad:29:77:60:28:5e:84:26:f2:8c:ad:4e:e1:c3:a1:
         fe:1e:09:f3:80:be:8f:19:0a:c8:7d:56:f9:2f:89:1b:83:9a:
         8d:11:91:16:ea:6c:ba:41:a3:d1:fa:b5:d7:31:88:2e:6e:cb:
         ad:4e:e9:af:32:2c:75:78:b3:8d:a4:7f:9e:64:2f:e9:6b:fa:
         41:db:37:33:c5:bc:d4:ce:42:6e:9a:a8:29:e7:bc:b9:58:e1:
         bd:1b:42:3b:09:7b:cb:97:7c:ad:d8:d3:50:5c:e9:19:a3:c8:
         d4:c5:14:5a:7d:c1:17:04:13:72:cd:01:5a:bb:df:7a:72:63:
         d8:66:6f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net