Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/7697f5d3-ce67-30b3-8bde-d010330b0b43.roa
File:                     7697f5d3-ce67-30b3-8bde-d010330b0b43.roa (raw, json)
Hash identifier:          W6D3m+lhqD60mjZJlgRNE9m8Uiet81dwdxQKMxON35c=
Subject key identifier:   B6:75:69:E8:DC:01:34:AC:D8:AD:A5:CE:2B:E8:BB:0A:0E:3B:60:B9
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F432858484945770296DA75E03D096940
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/7697f5d3-ce67-30b3-8bde-d010330b0b43.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     206216
IP address blocks:        2602:fb54:149::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:77:02:96:da:75:e0:3d:09:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=245b73f9-6432-43cf-b330-bb4303495509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:31:13:31:42:6b:1a:cb:02:f1:8f:8a:80:b5:
                    65:26:cf:ea:65:b4:73:78:46:27:c1:53:ed:55:06:
                    11:8e:04:f0:a1:40:91:c7:1a:7d:5b:31:fd:c3:aa:
                    41:cc:e8:c5:b7:3d:c4:20:10:00:8c:3e:85:2d:3e:
                    88:a2:f3:6d:6f:2d:00:d6:ea:4b:73:7e:56:43:8d:
                    96:56:69:73:32:72:e0:3f:ab:fc:e5:87:ca:c0:c7:
                    6b:3d:84:ac:ed:1c:df:ff:d2:71:dc:c6:61:43:b9:
                    c2:9c:44:44:7d:e0:f4:7b:d4:45:f8:c0:7d:aa:9f:
                    82:39:a8:0a:48:e1:97:b2:42:41:b6:c9:1d:62:75:
                    30:d0:f9:f0:5c:f9:73:ac:61:e6:88:73:90:a0:f4:
                    a2:e0:4f:36:92:43:a9:7b:04:0f:e8:b8:b3:ec:c4:
                    78:7c:00:01:5a:80:42:dd:94:2d:26:85:ff:8e:3c:
                    02:e5:f2:50:e4:d9:3d:a0:60:4f:36:07:cd:6d:5a:
                    90:1c:d0:71:8b:13:31:47:1a:c1:b3:70:94:a1:df:
                    6b:fc:95:77:11:aa:9f:b4:b6:28:e1:dd:8d:2b:01:
                    af:91:7b:3f:2b:2f:07:fc:14:ee:a0:21:e5:6a:12:
                    37:7f:1e:9d:52:17:54:52:ed:b5:81:56:7a:34:f8:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:75:69:E8:DC:01:34:AC:D8:AD:A5:CE:2B:E8:BB:0A:0E:3B:60:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/7697f5d3-ce67-30b3-8bde-d010330b0b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:149::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:b8:0a:0b:d1:0e:5f:49:44:3e:25:24:0e:77:ef:c3:03:b3:
         72:e3:61:74:ec:89:99:b1:d3:2d:0a:fd:45:2c:c0:ba:29:77:
         2e:89:8e:52:c1:cb:57:f4:0c:5a:f2:09:32:6e:9e:38:12:36:
         82:27:a5:37:fd:34:68:71:a6:9c:22:82:e3:1d:56:11:a8:77:
         fb:c8:79:39:8d:71:e2:f9:cf:98:37:ad:57:bb:8b:ce:ef:85:
         0f:05:d6:d4:f5:e7:1b:dc:88:0d:49:79:09:03:d1:6a:ed:15:
         10:21:92:a7:f2:10:96:80:a7:bf:62:ed:a2:cf:39:83:cc:4b:
         c0:43:f6:c1:f0:b7:38:d9:45:e9:1d:cb:8b:a8:6f:22:2d:a0:
         e1:10:03:db:ca:d7:10:d7:4c:d3:f4:a5:54:ed:0c:80:b8:d0:
         32:96:c1:be:9f:fc:7c:7c:fa:78:20:0f:4d:07:4b:89:33:9b:
         77:87:c6:87:b5:1e:7d:4c:1b:65:42:6e:11:ee:fe:57:56:b7:
         21:d1:de:d6:fb:9b:be:92:73:a8:88:8d:4b:88:b4:3c:e6:f0:
         ce:5f:95:7c:5d:cf:68:4e:58:8e:fd:12:af:6c:52:f6:38:78:
         b1:ce:a1:c4:c9:df:69:1b:8c:aa:9e:8b:e8:af:3b:66:2b:19:
         64:51:df:b3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhJRXcCltp14D0JaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
MjQ1YjczZjktNjQzMi00M2NmLWIzMzAtYmI0MzAzNDk1NTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTETMUJrGssC8Y+KgLVlJs/qZbRzeEYnwVPt
VQYRjgTwoUCRxxp9WzH9w6pBzOjFtz3EIBAAjD6FLT6IovNtby0A1upLc35WQ42W
VmlzMnLgP6v85YfKwMdrPYSs7Rzf/9Jx3MZhQ7nCnEREfeD0e9RF+MB9qp+COagK
SOGXskJBtskdYnUw0PnwXPlzrGHmiHOQoPSi4E82kkOpewQP6Liz7MR4fAABWoBC
3ZQtJoX/jjwC5fJQ5Nk9oGBPNgfNbVqQHNBxixMxRxrBs3CUod9r/JV3EaqftLYo
4d2NKwGvkXs/Ky8H/BTuoCHlahI3fx6dUhdUUu21gVZ6NPhBOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLZ1aejcATSs2K2lzivouwoOO2C5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvNzY5N2Y1ZDMtY2U2Ny0z
MGIzLThiZGUtZDAxMDMzMGIwYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7VAFJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAN+4CgvRDl9JRD4lJA5378MDs3LjYXTsiZmx0y0K/UUswLopdy6J
jlLBy1f0DFryCTJunjgSNoInpTf9NGhxppwiguMdVhGod/vIeTmNceL5z5g3rVe7
i87vhQ8F1tT15xvciA1JeQkD0WrtFRAhkqfyEJaAp79i7aLPOYPMS8BD9sHwtzjZ
Rekdy4uobyItoOEQA9vK1xDXTNP0pVTtDIC40DKWwb6f/Hx8+nggD00HS4kzm3eH
xoe1Hn1MG2VCbhHu/ldWtyHR3tb7m76Sc6iIjUuItDzm8M5flXxdz2hOWI79Eq9s
UvY4eLHOocTJ32kbjKqei+ivO2YrGWRR37M=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:32:45 2025 by rpki-client