Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/fd72274a-524d-3958-b3e6-a306e2c8e19b.roa
File:                     fd72274a-524d-3958-b3e6-a306e2c8e19b.roa (raw, json)
Hash identifier:          mm/6MSYDpkDVrF4A3f/oVhlrko6wIp1BcN2jwpUE9+w=
Subject key identifier:   7B:96:0B:99:D2:6B:9E:CB:67:A7:8A:43:D4:FD:3D:90:E4:09:57:C3
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F432858481F653259D62B4BEA73890F00
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/fd72274a-524d-3958-b3e6-a306e2c8e19b.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     209453
IP address blocks:        2604:3400:aaac::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:32:59:d6:2b:4b:ea:73:89:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=4f59d5c2-b0c1-462b-aec9-6fa9764f3004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:3d:5b:09:15:0d:c0:5b:09:b9:6a:07:52:
                    ff:f7:e3:ce:f9:a8:1d:58:75:1a:05:cd:4f:45:7b:
                    47:8f:e9:df:ed:7b:a3:ae:0a:f8:ee:b5:d0:ad:30:
                    19:8d:92:9c:57:bf:d1:bd:a8:74:80:3d:01:8b:49:
                    e5:bf:68:31:11:ba:b0:ed:d1:b8:09:5c:1f:9f:90:
                    3a:88:8d:85:ee:42:bf:8e:bc:60:d8:1b:7c:86:7a:
                    63:43:13:aa:ab:9e:c5:c6:e6:c8:f2:9c:0c:c6:ed:
                    60:7d:26:ee:f0:86:92:54:37:cb:dd:c4:17:64:7a:
                    2c:3e:f7:87:69:aa:48:cb:e2:89:f5:84:c5:b1:16:
                    e5:0c:79:dc:23:25:25:7e:b5:ff:f7:d0:31:83:5c:
                    0a:f7:8d:49:09:18:44:31:c5:e2:4c:a5:b8:29:5d:
                    cb:5b:f2:4f:04:37:cb:90:d4:03:1b:6b:b5:41:5a:
                    9f:ef:fd:17:a2:c6:f8:fc:0b:d6:7e:6a:03:d8:e3:
                    fe:98:c0:02:ad:70:20:89:64:3e:eb:bd:ea:52:19:
                    56:46:37:8c:cc:7c:12:b4:82:59:18:58:38:46:4e:
                    b6:27:34:8e:24:55:58:5e:00:51:96:01:8a:0d:df:
                    b5:ba:cb:30:ba:2f:1e:b3:76:d7:89:ea:83:98:37:
                    46:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:96:0B:99:D2:6B:9E:CB:67:A7:8A:43:D4:FD:3D:90:E4:09:57:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/fd72274a-524d-3958-b3e6-a306e2c8e19b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3400:aaac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:90:f5:35:9e:4d:96:68:9b:b0:96:e2:b5:1c:1e:c7:ba:cf:
         39:78:9f:d2:30:99:8b:44:f3:26:5f:ff:37:ca:34:9e:9e:eb:
         70:7b:72:11:71:14:99:df:b2:66:dd:e7:55:db:85:c9:36:93:
         0d:8b:a5:0e:a8:9c:2a:35:38:b1:e1:07:64:a7:e1:cc:8c:9a:
         24:a7:b1:97:ef:09:69:5b:c8:5a:74:9e:a3:99:a6:41:75:d3:
         b6:e9:fb:c2:56:e0:37:c5:dd:de:fa:6d:28:66:f8:3d:70:65:
         dc:56:5e:3b:b9:a7:87:fe:bd:ac:62:62:9e:24:ed:22:c1:90:
         ab:31:c2:5f:0e:f9:9c:1a:b9:d5:c0:73:c5:31:a5:72:14:00:
         5a:97:7a:0c:3c:a1:5e:b9:b1:34:93:3c:bf:bd:02:49:18:43:
         d5:69:5b:ed:22:cb:4d:ce:f3:dd:89:71:36:1c:22:38:c9:d5:
         6e:ac:69:3b:24:a3:20:17:f5:92:9f:30:dd:57:29:cc:72:35:
         40:9b:be:71:f1:a8:06:f4:1a:43:79:8c:40:38:eb:03:c1:7b:
         c4:04:05:c8:b5:1d:7c:ed:65:14:81:24:65:64:63:8e:a9:2f:
         2f:a7:2b:cc:51:b1:8f:b8:c1:db:f3:de:57:76:25:83:ca:89:
         64:f3:46:c0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgfZTJZ1itL6nOJDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTRlZTMyOWYtNmE5Ni00NGNiLThjYzUtMjIyZTBmZWM4
YzNhMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
NGY1OWQ1YzItYjBjMS00NjJiLWFlYzktNmZhOTc2NGYzMDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri89WwkVDcBbCblqB1L/9+PO+agdWHUaBc1P
RXtHj+nf7Xujrgr47rXQrTAZjZKcV7/Rvah0gD0Bi0nlv2gxEbqw7dG4CVwfn5A6
iI2F7kK/jrxg2Bt8hnpjQxOqq57FxubI8pwMxu1gfSbu8IaSVDfL3cQXZHosPveH
aapIy+KJ9YTFsRblDHncIyUlfrX/99Axg1wK941JCRhEMcXiTKW4KV3LW/JPBDfL
kNQDG2u1QVqf7/0Xosb4/AvWfmoD2OP+mMACrXAgiWQ+673qUhlWRjeMzHwStIJZ
GFg4Rk62JzSOJFVYXgBRlgGKDd+1usswui8es3bXieqDmDdGPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHuWC5nSa57LZ6eKQ9T9PZDkCVfDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNGVl
MzI5Zi02YTk2LTQ0Y2ItOGNjNS0yMjJlMGZlYzhjM2EvZmQ3MjI3NGEtNTI0ZC0z
OTU4LWIzZTYtYTMwNmUyYzhlMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTRlZTMyOWYtNmE5Ni00NGNiLThj
YzUtMjIyZTBmZWM4YzNhLzE0ZWUzMjlmLTZhOTYtNDRjYi04Y2M1LTIyMmUwZmVj
OGMzYS5jcmwwHwYDVR0jBBgwFoAUrkgj+aHqwwoeetBYqtTqeK/B7BowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNGVlMzI5Zi02YTk2LTQ0Y2ItOGNjNS0yMjJl
MGZlYzhjM2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ0AKqs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHmQ9TWeTZZom7CW4rUcHse6zzl4n9IwmYtE8yZf/zfKNJ6e63B7
chFxFJnfsmbd51Xbhck2kw2LpQ6onCo1OLHhB2Sn4cyMmiSnsZfvCWlbyFp0nqOZ
pkF107bp+8JW4DfF3d76bShm+D1wZdxWXju5p4f+vaxiYp4k7SLBkKsxwl8O+Zwa
udXAc8UxpXIUAFqXegw8oV65sTSTPL+9AkkYQ9VpW+0iy03O892JcTYcIjjJ1W6s
aTskoyAX9ZKfMN1XKcxyNUCbvnHxqAb0GkN5jEA46wPBe8QEBci1HXztZRSBJGVk
Y46pLy+nK8xRsY+4wdvz3ld2JYPKiWTzRsA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:22:30 2025 by rpki-client