Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00170eb8-09d4-3a41-827a-11b2d1262769.roa
File:                     00170eb8-09d4-3a41-827a-11b2d1262769.roa (raw, json)
Hash identifier:          Hwm7iCELdUmT93ZVp0lfVeHf7zoJIg7VyRoSdBWOMPg=
Subject key identifier:   8C:2E:BE:67:7C:B7:B4:CC:92:6D:9E:3C:C2:DD:29:98:38:C6:1E:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143DAB44F4EB8FA866AF4640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00170eb8-09d4-3a41-827a-11b2d1262769.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        2601:18d:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3d:ab:44:f4:eb:8f:a8:66:af:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=ee8832dc-6a1d-4206-8447-0e1c691d29f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:86:f2:0b:57:2f:aa:0d:10:90:98:a7:5a:
                    57:51:71:f5:92:35:9f:c4:eb:42:1f:58:db:cb:05:
                    55:9f:3b:10:56:f3:86:df:0e:47:66:6e:08:d4:21:
                    81:b2:e1:a5:cb:62:d3:32:7c:f8:ce:0f:af:29:f9:
                    1d:45:3a:06:6d:4a:1a:bb:ce:8d:9d:8d:a0:1a:fa:
                    ef:62:d0:82:7c:ee:91:f2:48:90:ce:73:09:44:dd:
                    46:c8:e4:4a:24:e5:67:4c:8f:3a:51:f9:d1:7a:c3:
                    97:76:56:9c:a2:fd:b8:79:6a:ed:9a:fa:68:7a:62:
                    7b:1c:ff:23:fa:ba:34:fc:02:29:6a:eb:57:ff:d7:
                    72:a1:0c:36:ff:8c:63:bc:5b:8b:c3:fb:ac:d2:06:
                    f9:24:87:3b:e9:22:65:b2:21:b1:47:f4:1f:b7:fa:
                    94:f7:a6:a2:d5:29:00:75:0a:c9:ae:30:e4:49:58:
                    51:00:0f:04:05:15:1a:19:65:94:df:0b:1b:5d:cf:
                    93:48:2c:b2:24:31:7e:75:50:f9:4c:22:31:41:16:
                    2b:1b:9f:79:4b:f7:d3:38:ab:48:15:0f:ca:38:42:
                    8c:73:53:f2:de:f2:3f:6b:de:fa:c5:85:c8:17:a2:
                    ec:ee:cf:2f:76:11:a9:d1:2e:bd:27:de:65:c2:2a:
                    5a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2E:BE:67:7C:B7:B4:CC:92:6D:9E:3C:C2:DD:29:98:38:C6:1E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00170eb8-09d4-3a41-827a-11b2d1262769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:18d:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:f0:fa:f9:be:cd:e5:cc:bc:9a:52:1a:16:8e:43:a1:79:5a:
         78:d9:b6:79:52:c2:ab:77:69:94:2f:69:87:9f:7f:da:72:ce:
         1a:51:e5:b6:8d:97:fe:8e:9b:5d:73:9c:8c:de:16:fe:f9:49:
         0a:77:98:21:74:18:8e:41:05:8c:9f:0d:69:db:6f:0e:47:af:
         f6:f0:77:0f:a3:4e:58:3e:72:61:dd:43:f6:7f:44:87:87:77:
         fa:a8:8c:0d:65:50:22:6b:15:15:90:e5:fc:5c:f1:a8:b7:43:
         9c:96:bc:e3:31:be:41:da:50:71:dc:6c:16:5f:4c:c6:e4:a6:
         2a:17:26:b1:35:44:4c:60:19:8a:3f:4b:52:d9:0d:b0:e3:52:
         79:88:e9:c1:ea:ab:54:b5:0a:a6:e2:fe:1f:0d:fd:f6:77:32:
         4a:83:82:76:b1:a9:1e:bc:e8:b5:ec:4d:88:6c:84:e8:7a:18:
         86:30:0c:a9:f0:64:cd:1d:0a:05:be:a2:d8:85:8c:3c:d7:88:
         9a:cf:e7:28:bc:5d:9e:84:e1:06:32:fa:b6:87:a6:84:51:86:
         36:cf:96:ae:06:ec:b7:94:28:19:ea:a6:70:b0:07:e1:b0:03:
         b6:18:68:04:32:06:d9:27:2c:89:1f:68:8b:a2:28:cf:dd:6c:
         00:70:fd:a4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgUPatE9OuPqGavRkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZWU4ODMyZGMtNmExZC00MjA2LTg0NDctMGUxYzY5MWQyOWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMaG8gtXL6oNEJCYp1pXUXH1kjWfxOtCH1jb
ywVVnzsQVvOG3w5HZm4I1CGBsuGly2LTMnz4zg+vKfkdRToGbUoau86NnY2gGvrv
YtCCfO6R8kiQznMJRN1GyORKJOVnTI86UfnResOXdlacov24eWrtmvpoemJ7HP8j
+ro0/AIpautX/9dyoQw2/4xjvFuLw/us0gb5JIc76SJlsiGxR/Qft/qU96ai1SkA
dQrJrjDkSVhRAA8EBRUaGWWU3wsbXc+TSCyyJDF+dVD5TCIxQRYrG595S/fTOKtI
FQ/KOEKMc1Py3vI/a976xYXIF6Ls7s8vdhGp0S69J95lwipasQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIwuvmd8t7TMkm2ePMLdKZg4xh6pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDAxNzBlYjgtMDlkNC0z
YTQxLTgyN2EtMTFiMmQxMjYyNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEBjcAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAv/D6+b7N5cy8mlIaFo5DoXlaeNm2eVLCq3dplC9ph59/2nLOGlHl
to2X/o6bXXOcjN4W/vlJCneYIXQYjkEFjJ8NadtvDkev9vB3D6NOWD5yYd1D9n9E
h4d3+qiMDWVQImsVFZDl/FzxqLdDnJa84zG+QdpQcdxsFl9MxuSmKhcmsTVETGAZ
ij9LUtkNsONSeYjpweqrVLUKpuL+Hw399ncySoOCdrGpHrzotexNiGyE6HoYhjAM
qfBkzR0KBb6i2IWMPNeIms/nKLxdnoThBjL6toemhFGGNs+Wrgbst5QoGeqmcLAH
4bADthhoBDIG2ScsiR9oi6Ioz91sAHD9pA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:02:01 2025 by rpki-client