Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa
File:                     9f2004b3-f46d-3e83-a948-cc255fe3a018.roa (raw, json)
Hash identifier:          nJh2Le0tGspmIxCYwUl9/IkU7n1jHacZVJLP9D0fGPQ=
Subject key identifier:   85:69:2D:18:3F:00:2F:3A:29:F8:27:04:CC:6A:26:DC:15:44:C0:E0
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285848090FA7065BB8B937809BAF80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     62651
IP address blocks:        2604:fc80:2800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:a7:06:5b:b8:b9:37:80:9b:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=0d694b43-c90f-42cf-b39b-a14931ff27fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:65:36:a9:57:ed:9b:bb:7f:0f:ba:1a:b8:b1:
                    db:8a:80:2b:16:f7:7d:eb:66:9a:d5:98:15:44:e8:
                    9d:2b:d6:bf:84:6b:31:d5:bc:4d:ff:03:d8:2e:a1:
                    d1:6f:87:87:47:7b:db:cf:74:a7:25:81:dc:47:8d:
                    13:64:fc:b2:df:0f:c6:e2:e9:f9:5a:2e:69:f8:65:
                    56:e9:9a:f6:7a:6c:1b:d4:c3:72:5e:77:fb:bc:e5:
                    62:1c:37:c8:60:28:23:74:95:e3:88:d4:81:ba:9f:
                    87:4b:8e:cc:19:be:18:76:d1:6c:88:36:6d:ac:f9:
                    51:b8:a6:14:bf:67:e2:98:e7:c8:66:32:01:b3:a0:
                    7a:04:64:b5:6d:af:62:f2:63:ce:05:3e:cf:f6:b2:
                    f5:97:93:ab:6f:22:b2:77:ff:67:3c:2a:4a:c9:eb:
                    b0:5e:2b:c8:0b:46:a5:36:c8:ac:c7:98:52:a1:80:
                    7b:cc:fc:7a:03:e2:19:d0:e0:11:7f:f7:80:e3:9f:
                    2f:60:ba:1f:c7:a6:13:3d:da:04:9d:a5:46:1c:2b:
                    38:0c:7c:ab:1c:60:25:1d:bb:65:58:03:89:2d:c2:
                    eb:0d:35:0e:26:bb:27:1c:a6:ad:79:a0:3b:95:77:
                    1d:81:f0:57:5c:c0:30:34:91:4a:a9:5b:c8:7a:46:
                    26:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:69:2D:18:3F:00:2F:3A:29:F8:27:04:CC:6A:26:DC:15:44:C0:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:47:7d:53:f4:59:08:cd:b9:76:50:67:2c:69:10:2a:84:61:
         dd:b5:0f:e5:e3:d7:9d:3a:62:d9:99:cd:74:cb:2a:53:c9:9e:
         b7:6a:1b:d4:56:77:2e:19:55:5a:2d:9a:f9:71:dc:c3:ef:3b:
         39:ae:51:b5:28:24:ee:f4:c4:24:ac:20:e2:cc:1e:a3:b8:dc:
         ed:3e:4f:02:fc:7c:e0:8d:1a:d3:ec:ab:a6:07:53:86:93:50:
         0e:8a:84:75:6e:a6:7d:20:2c:1d:d0:8f:05:ab:06:76:a1:fe:
         ad:86:3b:d5:d8:77:a5:d8:83:ad:bd:db:f0:19:c3:5e:ba:0e:
         66:7b:ab:79:25:2b:5a:6c:62:c5:3a:3f:4b:c9:43:7f:6e:14:
         96:f6:72:57:fc:db:f0:a8:db:d0:41:d9:32:91:41:97:71:a6:
         2c:41:80:41:61:ec:28:11:3e:c1:9d:2c:f7:4c:e6:44:4b:1b:
         eb:7f:cc:59:59:88:f8:f4:5d:0b:6d:b9:75:60:5e:03:8c:b1:
         f8:46:8e:de:a6:b3:84:97:61:05:0c:5b:e7:4b:4e:ea:f2:3e:
         21:fb:f6:96:1a:af:d8:e2:f3:0f:fd:9f:32:3a:d6:74:dd:f8:
         b0:a4:b7:4a:8d:f4:90:b2:69:3e:a7:7b:c7:ac:4f:be:ee:96:
         f0:7d:00:3f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgJD6cGW7i5N4Cbr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
MGQ2OTRiNDMtYzkwZi00MmNmLWIzOWItYTE0OTMxZmYyN2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22U2qVftm7t/D7oauLHbioArFvd962aa1ZgV
ROidK9a/hGsx1bxN/wPYLqHRb4eHR3vbz3SnJYHcR40TZPyy3w/G4un5Wi5p+GVW
6Zr2emwb1MNyXnf7vOViHDfIYCgjdJXjiNSBup+HS47MGb4YdtFsiDZtrPlRuKYU
v2fimOfIZjIBs6B6BGS1ba9i8mPOBT7P9rL1l5OrbyKyd/9nPCpKyeuwXivIC0al
Nsisx5hSoYB7zPx6A+IZ0OARf/eA458vYLofx6YTPdoEnaVGHCs4DHyrHGAlHbtl
WAOJLcLrDTUOJrsnHKateaA7lXcdgfBXXMAwNJFKqVvIekYmDwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIVpLRg/AC86KfgnBMxqJtwVRMDgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOWYyMDA0YjMtZjQ2ZC0z
ZTgzLWE5NDgtY2MyNTVmZTNhMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT8gCgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGkd9U/RZCM25dlBnLGkQKoRh3bUP5ePXnTpi2ZnNdMsqU8met2ob
1FZ3LhlVWi2a+XHcw+87Oa5RtSgk7vTEJKwg4sweo7jc7T5PAvx84I0a0+yrpgdT
hpNQDoqEdW6mfSAsHdCPBasGdqH+rYY71dh3pdiDrb3b8BnDXroOZnureSUrWmxi
xTo/S8lDf24UlvZyV/zb8Kjb0EHZMpFBl3GmLEGAQWHsKBE+wZ0s90zmREsb63/M
WVmI+PRdC225dWBeA4yx+EaO3qazhJdhBQxb50tO6vI+Ifv2lhqv2OLzD/2fMjrW
dN34sKS3So30kLJpPqd7x6xPvu6W8H0APw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:27:18 2025 by rpki-client