Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/05759f57-91eb-3f3f-8597-fafdab00dba3.roa
File:                     05759f57-91eb-3f3f-8597-fafdab00dba3.roa (raw, json)
Hash identifier:          q6eBe9GFrorrnu7iP+nLdppvV4fLtO/j8GJhSH3u6WI=
Subject key identifier:   E2:6B:D6:6C:61:7C:C4:48:B7:95:0F:EF:91:F6:98:1F:79:84:8A:9D
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F43285847FD4AC79F266BDF67F42FB000
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/05759f57-91eb-3f3f-8597-fafdab00dba3.roa
Signing time:             Sun 24 Nov 2024 20:50:08 +0000
ROA not before:           Sun 24 Nov 2024 20:50:08 +0000
ROA not after:            Sat 22 Feb 2025 20:50:08 +0000
asID:                     400919
IP address blocks:        2602:817:2003::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:4a:c7:9f:26:6b:df:67:f4:2f:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Nov 24 20:50:08 2024 GMT
            Not After : Feb 22 20:50:08 2025 GMT
        Subject: CN=547a3558-dc99-46c2-9bc1-fcc8d777e81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:26:b8:06:f4:7c:ee:9c:ac:a9:83:c1:fa:
                    40:96:93:73:94:80:ea:00:f1:30:a0:9d:54:f2:c8:
                    28:b3:b2:32:32:dd:85:d4:77:5a:7b:e9:8e:f9:72:
                    82:58:ea:4a:d5:4f:5b:ed:e0:23:7e:72:93:eb:6e:
                    5c:4f:6f:70:11:76:f6:23:e8:13:3e:2a:3f:22:4e:
                    a6:d2:9e:77:52:f9:cd:af:68:0f:25:ca:1b:f2:65:
                    08:f6:c6:67:20:8c:03:8a:db:9c:6e:c6:f2:cc:cd:
                    10:16:37:f1:11:ee:30:9b:47:c3:05:ed:fe:e2:bd:
                    eb:5a:16:55:33:43:3e:96:d0:e5:1d:00:ab:f8:b2:
                    8a:51:6d:0e:77:7f:44:53:b7:f0:d0:5e:d0:97:eb:
                    51:10:ae:d0:39:1f:3e:a6:ea:3b:44:bb:43:73:1f:
                    fe:60:34:f6:c5:6d:af:17:57:83:bf:ca:be:82:ea:
                    63:48:ff:2a:62:fc:c2:4e:9e:6b:79:0e:a1:31:d6:
                    7f:62:4b:46:fb:18:d0:f4:bc:aa:67:c7:7d:51:e9:
                    45:2d:88:ce:5c:84:32:a6:b8:fe:21:45:58:29:1a:
                    6c:79:4e:f6:bf:2b:91:08:c0:ab:bc:88:6b:7a:93:
                    74:b7:4e:2a:1d:22:87:6a:86:2f:7c:51:ae:eb:80:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6B:D6:6C:61:7C:C4:48:B7:95:0F:EF:91:F6:98:1F:79:84:8A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/05759f57-91eb-3f3f-8597-fafdab00dba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5d:f8:1b:ff:2b:2e:52:90:2a:1f:02:8d:dd:94:af:58:83:
         c5:3d:83:8a:f7:33:9c:6a:7c:ab:ab:05:1a:51:dd:b8:d0:9a:
         ee:94:ff:b7:ba:ef:40:7f:72:58:00:f1:aa:aa:50:c6:06:1f:
         9b:36:85:f3:63:b8:8d:f2:5e:24:a3:5c:ab:05:94:e3:58:10:
         e6:eb:bf:85:f7:23:8d:e9:e0:2c:21:72:a5:ac:9d:b0:df:a6:
         4b:50:bf:34:9b:e4:85:29:2f:d1:87:7c:64:87:1b:ce:b4:2b:
         ca:41:88:07:16:b0:a4:12:b2:f3:a8:08:48:16:ee:bb:63:40:
         c6:4d:70:6c:73:8c:e9:9a:ab:32:0f:28:30:77:68:8b:75:1a:
         29:52:82:ec:f9:a2:69:b9:11:01:14:eb:af:1d:77:6c:a6:fa:
         28:20:6a:0a:83:80:57:c3:9c:57:03:f8:b8:d3:cf:96:fa:e4:
         5f:3c:92:e1:86:53:c0:01:d2:ff:6a:2a:58:f0:16:db:36:4e:
         90:05:f0:74:5f:02:76:41:2f:6e:ad:a7:4a:94:ea:f6:bb:bd:
         2c:52:36:7f:e7:4f:fb:30:69:a7:b5:8e:7e:d0:46:f5:96:4f:
         5e:c2:6f:66:6f:c1:4a:cf:16:61:39:b5:f4:2d:b6:c6:cc:87:
         3e:3f:54:c5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEf9SsefJmvfZ/QvsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE3NjdmYjMtMDkxMS00MzVhLWEzYTQtMTg5YjgyNjIy
MTU3MB4XDTI0MTEyNDIwNTAwOFoXDTI1MDIyMjIwNTAwOFowLzEtMCsGA1UEAxMk
NTQ3YTM1NTgtZGM5OS00NmMyLTliYzEtZmNjOGQ3NzdlODFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNgmuAb0fO6crKmDwfpAlpNzlIDqAPEwoJ1U
8sgos7IyMt2F1Hdae+mO+XKCWOpK1U9b7eAjfnKT625cT29wEXb2I+gTPio/Ik6m
0p53UvnNr2gPJcob8mUI9sZnIIwDitucbsbyzM0QFjfxEe4wm0fDBe3+4r3rWhZV
M0M+ltDlHQCr+LKKUW0Od39EU7fw0F7Ql+tREK7QOR8+puo7RLtDcx/+YDT2xW2v
F1eDv8q+gupjSP8qYvzCTp5reQ6hMdZ/YktG+xjQ9LyqZ8d9UelFLYjOXIQyprj+
IUVYKRpseU72vyuRCMCrvIhrepN0t04qHSKHaoYvfFGu64AZywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOJr1mxhfMRIt5UP75H2mB95hIqdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYTc2
N2ZiMy0wOTExLTQzNWEtYTNhNC0xODliODI2MjIxNTcvMDU3NTlmNTctOTFlYi0z
ZjNmLTg1OTctZmFmZGFiMDBkYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWE3NjdmYjMtMDkxMS00MzVhLWEz
YTQtMTg5YjgyNjIyMTU3LzFhNzY3ZmIzLTA5MTEtNDM1YS1hM2E0LTE4OWI4MjYy
MjE1Ny5jcmwwHwYDVR0jBBgwFoAUMZd8fKTs1HliGSxrDAQkrzTVdKEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xYTc2N2ZiMy0wOTExLTQzNWEtYTNhNC0xODli
ODI2MjIxNTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFyAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIpd+Bv/Ky5SkCofAo3dlK9Yg8U9g4r3M5xqfKurBRpR3bjQmu6U
/7e670B/clgA8aqqUMYGH5s2hfNjuI3yXiSjXKsFlONYEObrv4X3I43p4CwhcqWs
nbDfpktQvzSb5IUpL9GHfGSHG860K8pBiAcWsKQSsvOoCEgW7rtjQMZNcGxzjOma
qzIPKDB3aIt1GilSguz5omm5EQEU668dd2ym+iggagqDgFfDnFcD+LjTz5b65F88
kuGGU8AB0v9qKljwFts2TpAF8HRfAnZBL26tp0qU6va7vSxSNn/nT/swaae1jn7Q
RvWWT17Cb2ZvwUrPFmE5tfQttsbMhz4/VMU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:05:45 2025 by rpki-client