Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4884c810-e7e6-351b-a375-cfcc46d2e1af.roa
File:                     4884c810-e7e6-351b-a375-cfcc46d2e1af.roa (raw, json)
Hash identifier:          yiYOWL3b5jacF4Llb8cta5vKKYLzChFju07bTi4YAa0=
Subject key identifier:   C5:BC:2B:B2:8F:4D:82:96:C5:72:B5:93:20:75:8E:42:01:51:1E:ED
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F4328584839EAB58F07AC58538622A280
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4884c810-e7e6-351b-a375-cfcc46d2e1af.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     33711
IP address blocks:        2602:fbec::/36 maxlen: 36
                          2602:fbec:224::/48 maxlen: 48
                          2602:fbec:226::/48 maxlen: 48
                          2602:fbec:227::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:b5:8f:07:ac:58:53:86:22:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=621c0124-a13e-4f33-ad6b-4c56ec62b204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:5a:e9:86:e1:02:67:18:37:52:d5:83:8d:
                    ce:d8:95:3e:4b:a5:a1:16:62:f3:73:32:61:e3:60:
                    a2:a8:a5:27:ba:38:0f:15:f0:25:7e:d5:9a:ca:e1:
                    48:c1:29:dd:a4:b5:ec:74:a2:7b:b2:01:b1:16:7e:
                    f0:e0:59:f0:f1:ab:f4:a5:2e:aa:e1:0d:ff:59:96:
                    46:fa:87:36:2e:dc:78:91:86:8a:75:3a:bd:47:63:
                    e2:20:3a:bb:97:e9:95:3e:9d:7c:8d:38:b7:cf:c5:
                    d4:d1:02:34:b1:8e:7d:1f:82:d9:7b:d5:e8:7b:95:
                    4b:1f:0b:6c:dc:4e:ff:47:ab:6d:8d:27:7a:73:0a:
                    78:3a:fe:a7:93:0f:6b:2c:b4:70:b3:f4:de:ba:39:
                    ca:ca:ef:cb:f0:63:6b:4e:07:9d:47:c5:63:07:e8:
                    26:1b:f3:8d:65:b6:8a:0f:af:08:f0:2a:d4:48:d8:
                    44:ac:ce:4a:7b:86:f9:a4:48:be:b1:f6:ae:e7:42:
                    9e:1a:9f:c6:da:66:01:03:66:7c:6b:fe:05:3a:e3:
                    d8:da:d9:55:51:71:c7:ca:56:ef:32:f2:8b:c1:6b:
                    40:3a:5c:4e:44:02:a3:ee:6e:9a:95:63:e4:a1:e3:
                    21:bf:e9:3b:f9:63:17:25:1a:5c:3d:8b:44:79:f8:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BC:2B:B2:8F:4D:82:96:C5:72:B5:93:20:75:8E:42:01:51:1E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4884c810-e7e6-351b-a375-cfcc46d2e1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbec::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:19:9b:b8:3b:9c:b6:bf:0f:6e:b3:bc:19:85:4b:bb:37:35:
         ca:44:af:07:48:9e:50:c1:21:a4:02:df:1a:3a:36:c9:c5:f2:
         22:e7:4b:e1:72:55:ee:e1:99:3d:01:b2:aa:e3:9b:de:3e:a1:
         2f:ca:ea:c1:4a:49:5b:00:06:96:db:b2:78:ee:60:86:30:ac:
         0c:05:a8:f3:49:f3:6e:7f:0c:e6:82:97:33:85:1e:3e:d7:c4:
         eb:7a:99:72:e5:bf:a3:3f:1f:3d:f3:ca:07:ae:18:c9:8c:28:
         0c:36:96:87:f4:e3:e8:55:44:e2:65:18:13:ed:07:c7:1a:59:
         63:8d:da:9f:09:cc:77:01:d7:c5:94:9d:78:35:23:85:ab:0a:
         85:77:59:f6:25:c8:dd:40:8b:79:92:dd:36:d8:c3:f5:e3:5f:
         56:fc:e8:43:66:f0:e8:b5:3e:2f:79:78:dc:5b:e9:2b:a3:07:
         fa:6a:6a:1a:02:a5:e4:cf:da:db:c4:d3:b9:b3:33:be:8a:c3:
         37:69:59:d9:bd:71:97:64:d2:90:26:09:06:53:a9:78:94:4d:
         84:a2:f8:c7:0a:fd:5f:a7:63:c1:a2:32:ab:99:31:85:4e:e9:
         4f:84:18:ba:31:7c:8a:b0:c9:50:f4:37:5e:c3:da:2a:dc:38:
         84:cf:05:88
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEg56rWPB6xYU4YiooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTUxMTUxNDMtMTFjOC00YjA2LTgwYTEtYTk5MWZhNTBm
MmZhMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
NjIxYzAxMjQtYTEzZS00ZjMzLWFkNmItNGM1NmVjNjJiMjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjpa6YbhAmcYN1LVg43O2JU+S6WhFmLzczJh
42CiqKUnujgPFfAlftWayuFIwSndpLXsdKJ7sgGxFn7w4Fnw8av0pS6q4Q3/WZZG
+oc2Ltx4kYaKdTq9R2PiIDq7l+mVPp18jTi3z8XU0QI0sY59H4LZe9Xoe5VLHwts
3E7/R6ttjSd6cwp4Ov6nkw9rLLRws/TeujnKyu/L8GNrTgedR8VjB+gmG/ONZbaK
D68I8CrUSNhErM5Ke4b5pEi+sfau50KeGp/G2mYBA2Z8a/4FOuPY2tlVUXHHylbv
MvKLwWtAOlxORAKj7m6alWPkoeMhv+k7+WMXJRpcPYtEefga8QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMW8K7KPTYKWxXK1kyB1jkIBUR7tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNTEx
NTE0My0xMWM4LTRiMDYtODBhMS1hOTkxZmE1MGYyZmEvNDg4NGM4MTAtZTdlNi0z
NTFiLWEzNzUtY2ZjYzQ2ZDJlMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTUxMTUxNDMtMTFjOC00YjA2LTgw
YTEtYTk5MWZhNTBmMmZhLzE1MTE1MTQzLTExYzgtNGIwNi04MGExLWE5OTFmYTUw
ZjJmYS5jcmwwHwYDVR0jBBgwFoAUVxb9oR0aCplObiedKLlylvm9hkQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNTExNTE0My0xMWM4LTRiMDYtODBhMS1hOTkx
ZmE1MGYyZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL77AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaRmbuDuctr8PbrO8GYVLuzc1ykSvB0ieUMEhpALfGjo2ycXyIudL
4XJV7uGZPQGyquOb3j6hL8rqwUpJWwAGltuyeO5ghjCsDAWo80nzbn8M5oKXM4Ue
PtfE63qZcuW/oz8fPfPKB64YyYwoDDaWh/Tj6FVE4mUYE+0HxxpZY43anwnMdwHX
xZSdeDUjhasKhXdZ9iXI3UCLeZLdNtjD9eNfVvzoQ2bw6LU+L3l43FvpK6MH+mpq
GgKl5M/a28TTubMzvorDN2lZ2b1xl2TSkCYJBlOpeJRNhKL4xwr9X6djwaIyq5kx
hU7pT4QYujF8irDJUPQ3XsPaKtw4hM8FiA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:54:03 2025 by rpki-client