Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/60232445-db5b-3c06-a511-b1f62fa79ccc.roa
File:                     60232445-db5b-3c06-a511-b1f62fa79ccc.roa (raw, json)
Hash identifier:          Hdn5eR4kpABky1cTdSX67mUGkTS4gLeH+Xl3QJQkYzw=
Subject key identifier:   5C:0D:51:9C:88:A6:90:75:32:FB:76:2E:F7:1D:F0:EC:F5:18:7B:4D
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F432858483B5010966F0B1B4487CD1440
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/60232445-db5b-3c06-a511-b1f62fa79ccc.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     7106
IP address blocks:        2607:fa10::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:10:96:6f:0b:1b:44:87:cd:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=40b5c202-55fb-44d6-905b-af13bcc01e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:bc:0b:81:58:1d:3a:25:67:9b:a4:fe:64:
                    a9:4b:ae:78:b1:29:ac:f3:8e:60:54:05:0b:11:14:
                    d0:b1:95:31:09:70:98:9e:29:a2:84:a0:00:36:06:
                    a0:b7:fa:30:c1:f9:66:5a:23:08:89:d7:d4:c8:cc:
                    c8:00:5b:64:22:a7:9f:9c:23:d1:79:13:db:9a:a6:
                    00:3a:10:28:bb:e4:e2:29:b2:e2:b6:01:b8:fe:5e:
                    64:e6:99:07:99:e5:10:ca:ac:d5:22:58:84:d5:30:
                    85:f5:7a:f8:e0:57:60:f4:bd:22:c0:63:08:65:9a:
                    21:75:d2:f3:01:77:18:c9:34:52:70:16:47:f7:4b:
                    53:7a:75:0b:c0:fc:30:73:1f:6f:4b:a5:87:e2:91:
                    e3:fb:d0:8f:7b:3d:30:be:cd:af:fc:14:e5:d9:40:
                    a4:24:b7:57:41:d5:c9:52:b5:dc:f6:b0:e5:f9:35:
                    86:63:21:15:33:87:cf:45:0c:35:56:bd:5b:df:88:
                    63:8e:6d:13:fc:a0:17:4f:22:9d:80:4d:34:da:17:
                    16:c4:cf:d0:1a:33:83:03:e9:84:f3:9d:93:f0:28:
                    9e:ba:ec:61:d1:45:b6:f2:5a:c6:b1:fe:1e:53:92:
                    43:a4:08:f8:61:47:79:08:f4:3d:96:62:e6:cd:cc:
                    0c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0D:51:9C:88:A6:90:75:32:FB:76:2E:F7:1D:F0:EC:F5:18:7B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/60232445-db5b-3c06-a511-b1f62fa79ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa10::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c0:74:ae:b7:cc:6b:01:fb:c6:39:75:2d:5a:1a:d4:e8:d3:
         c7:11:08:24:8c:b6:5b:ce:f4:92:df:0c:08:f4:02:12:26:43:
         a7:42:bd:05:1a:73:36:a1:9a:ad:cc:af:00:af:4d:02:66:46:
         d1:cd:26:cc:a2:12:27:b0:14:17:c6:f7:09:c3:3a:44:68:04:
         b5:59:d6:e2:ef:c0:de:84:ca:7e:e1:5e:47:9d:6c:74:64:55:
         59:37:93:9f:bb:68:d9:d0:5d:be:50:20:b6:02:cb:cb:70:bd:
         73:0d:f8:ab:17:92:bb:6a:7d:c2:3a:03:d5:32:8c:08:5d:c7:
         a7:bb:a5:3c:4c:6b:3d:67:82:34:b6:e6:21:c2:2c:1a:fa:b5:
         e7:ee:a0:0c:ae:31:c2:ac:5b:c6:1e:83:f9:17:80:34:15:1d:
         6f:1a:e2:0e:c0:44:79:7d:25:cf:56:77:f4:b8:0c:51:5e:dc:
         8f:30:cd:7b:0b:c2:5a:15:a9:13:07:96:a8:43:e7:fa:42:20:
         0b:5c:f7:20:eb:78:cc:42:c9:c7:2f:a6:f8:d5:27:48:74:8e:
         fb:3e:e6:38:69:3e:03:27:94:e7:ff:5f:be:ce:15:88:15:44:
         b9:7f:65:06:7c:91:cf:c4:c6:e7:17:e9:5c:29:a1:da:ce:f5:
         1e:fd:33:84
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEg7UBCWbwsbRIfNFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk
N2ZiMB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
NDBiNWMyMDItNTVmYi00NGQ2LTkwNWItYWYxM2JjYzAxZTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMi8C4FYHTolZ5uk/mSpS654sSms845gVAUL
ERTQsZUxCXCYnimihKAANgagt/owwflmWiMIidfUyMzIAFtkIqefnCPReRPbmqYA
OhAou+TiKbLitgG4/l5k5pkHmeUQyqzVIliE1TCF9Xr44Fdg9L0iwGMIZZohddLz
AXcYyTRScBZH90tTenULwPwwcx9vS6WH4pHj+9CPez0wvs2v/BTl2UCkJLdXQdXJ
UrXc9rDl+TWGYyEVM4fPRQw1Vr1b34hjjm0T/KAXTyKdgE002hcWxM/QGjODA+mE
852T8Cieuuxh0UW28lrGsf4eU5JDpAj4YUd5CPQ9lmLmzcwMQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFwNUZyIppB1Mvt2Lvcd8Oz1GHtNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2
ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNjAyMzI0NDUtZGI1Yi0z
YzA2LWE1MTEtYjFmNjJmYTc5Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl
ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1
ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1
YWMzNWQ3ZmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6EDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAOwHSut8xrAfvGOXUtWhrU6NPHEQgkjLZbzvSS3wwI9AISJkOnQr0F
GnM2oZqtzK8Ar00CZkbRzSbMohInsBQXxvcJwzpEaAS1Wdbi78DehMp+4V5HnWx0
ZFVZN5Ofu2jZ0F2+UCC2AsvLcL1zDfirF5K7an3COgPVMowIXcenu6U8TGs9Z4I0
tuYhwiwa+rXn7qAMrjHCrFvGHoP5F4A0FR1vGuIOwER5fSXPVnf0uAxRXtyPMM17
C8JaFakTB5aoQ+f6QiALXPcg63jMQsnHL6b41SdIdI77PuY4aT4DJ5Tn/1++zhWI
FUS5f2UGfJHPxMbnF+lcKaHazvUe/TOE
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:36:59 2025 by rpki-client