Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa
File:                     5587e601-3810-3cad-ad39-d5b549845ba7.roa (raw, json)
Hash identifier:          3lzv8teumUpWxcuZNLWRfQP0Afs5cPnfhzUlsPkVJdw=
Subject key identifier:   20:9A:3E:11:56:BC:C0:6C:E3:7B:32:F7:58:53:A1:5D:19:16:6D:81
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F432858483CA78A04DF517A5FA20630C8
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa
Signing time:             Tue 17 Dec 2024 13:32:58 +0000
ROA not before:           Tue 17 Dec 2024 13:32:58 +0000
ROA not after:            Mon 17 Mar 2025 12:32:58 +0000
asID:                     4186
IP address blocks:        2602:fbdc:80::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3c:a7:8a:04:df:51:7a:5f:a2:06:30:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Dec 17 13:32:58 2024 GMT
            Not After : Mar 17 12:32:58 2025 GMT
        Subject: CN=74eb4dfd-3a1c-4bf8-8926-ab7bdf5d78a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:08:27:24:f4:ac:ec:4a:f4:00:24:44:cc:
                    5c:37:17:e3:e1:aa:d0:b8:f4:1e:8f:df:15:77:a8:
                    6f:33:01:e7:50:ae:98:93:5c:a1:3b:5e:5e:84:28:
                    e7:df:76:28:eb:5b:42:15:0a:eb:0d:40:41:c5:0f:
                    62:1d:0c:63:85:e8:b8:5a:a1:29:fb:f2:6a:86:2d:
                    95:23:a7:61:0b:c5:95:90:f1:0c:a3:b7:dc:ed:b2:
                    18:d6:60:2e:b7:5f:33:a6:3a:a4:88:f2:1e:7d:72:
                    65:0e:1d:cc:ff:93:28:43:6b:04:3d:d9:73:25:79:
                    ed:82:73:61:1b:86:ae:8c:42:9e:e2:2a:e5:cd:34:
                    f3:37:99:24:a0:5b:79:fd:89:ab:7b:79:be:ea:4b:
                    f5:37:46:4f:c4:06:22:4e:54:bd:7b:05:dd:62:7d:
                    39:7e:30:46:59:ed:ce:0d:54:8e:79:73:9b:f5:21:
                    1f:fd:08:02:20:ca:10:b4:5f:90:e2:5f:ec:43:7a:
                    20:d3:46:3d:bd:8d:e9:ae:25:96:b7:54:f8:74:e9:
                    63:c1:4c:81:e1:06:cf:b9:9d:ee:ce:16:84:7c:aa:
                    37:f9:fd:2a:6e:2d:4e:47:12:79:55:e2:6b:52:17:
                    ae:1d:bd:01:0d:19:72:b8:22:93:7d:33:ff:99:63:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9A:3E:11:56:BC:C0:6C:E3:7B:32:F7:58:53:A1:5D:19:16:6D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:58:92:13:90:01:e3:e7:2c:f1:96:99:06:8f:cc:d8:0d:6d:
         4e:eb:aa:39:bc:2a:33:70:fb:57:90:60:ed:70:9b:2b:5a:8e:
         a3:32:92:a6:f9:a1:da:b0:85:b2:64:45:f4:08:b6:76:b3:fc:
         8f:98:ba:30:97:de:48:bb:f6:35:51:8b:83:dd:0a:b5:2f:87:
         44:37:13:64:c3:81:2b:4a:18:f8:10:69:39:4c:3a:56:0c:4e:
         c0:21:bb:d8:08:87:9d:dc:55:99:e6:15:21:d2:9b:a9:64:4f:
         d3:2e:03:0d:31:5e:52:14:b1:db:d1:aa:5b:02:43:d6:54:d5:
         70:02:a3:61:57:69:c1:05:5d:4e:92:d5:ea:85:17:0a:e3:91:
         74:13:a9:03:25:62:d6:30:e7:82:12:75:63:86:bf:de:3f:ba:
         96:1c:72:99:e7:75:75:06:c8:ac:ba:d2:bc:af:a6:d1:05:04:
         53:03:23:60:5c:61:b5:c8:7f:2a:c8:15:11:75:ec:49:52:21:
         e7:d9:e8:fb:f0:f7:90:bb:42:a3:26:25:06:ae:51:50:0c:7f:
         d9:92:3f:26:ca:50:32:af:22:bc:f7:15:24:69:dd:ef:bc:b6:
         df:70:9f:83:f5:d6:23:9c:ff:57:34:0f:c3:e3:29:80:88:15:
         58:1a:21:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg8p4oE31F6X6IGMMgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI0MTIxNzEzMzI1OFoXDTI1MDMxNzEyMzI1OFowLzEtMCsGA1UEAxMk
NzRlYjRkZmQtM2ExYy00YmY4LTg5MjYtYWI3YmRmNWQ3OGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8AIJyT0rOxK9AAkRMxcNxfj4arQuPQej98V
d6hvMwHnUK6Yk1yhO15ehCjn33Yo61tCFQrrDUBBxQ9iHQxjhei4WqEp+/Jqhi2V
I6dhC8WVkPEMo7fc7bIY1mAut18zpjqkiPIefXJlDh3M/5MoQ2sEPdlzJXntgnNh
G4aujEKe4irlzTTzN5kkoFt5/Ymre3m+6kv1N0ZPxAYiTlS9ewXdYn05fjBGWe3O
DVSOeXOb9SEf/QgCIMoQtF+Q4l/sQ3og00Y9vY3priWWt1T4dOljwUyB4QbPuZ3u
zhaEfKo3+f0qbi1ORxJ5VeJrUheuHb0BDRlyuCKTfTP/mWNZ1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCCaPhFWvMBs43sy91hToV0ZFm2BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvNTU4N2U2MDEtMzgxMC0z
Y2FkLWFkMzktZDViNTQ5ODQ1YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAM9YkhOQAePnLPGWmQaPzNgNbU7rqjm8KjNw+1eQYO1wmytajqMy
kqb5odqwhbJkRfQItnaz/I+YujCX3ki79jVRi4PdCrUvh0Q3E2TDgStKGPgQaTlM
OlYMTsAhu9gIh53cVZnmFSHSm6lkT9MuAw0xXlIUsdvRqlsCQ9ZU1XACo2FXacEF
XU6S1eqFFwrjkXQTqQMlYtYw54ISdWOGv94/upYccpnndXUGyKy60ryvptEFBFMD
I2BcYbXIfyrIFRF17ElSIefZ6Pvw95C7QqMmJQauUVAMf9mSPybKUDKvIrz3FSRp
3e+8tt9wn4P11iOc/1c0D8PjKYCIFVgaIa0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:13 2025 by rpki-client