Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/166a3d4c-a665-3eea-8418-ff9896cd0a6b.roa
File:                     166a3d4c-a665-3eea-8418-ff9896cd0a6b.roa (raw, json)
Hash identifier:          gw+ArsxKLEMNbujMLbcs11YbJ6D6+RGKmwqt6v3/Knk=
Subject key identifier:   36:D1:E9:75:3F:31:6D:26:A2:DA:BB:18:0B:CE:1F:07:F9:60:12:1A
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858483B500AA91F07ADC90D804F80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/166a3d4c-a665-3eea-8418-ff9896cd0a6b.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     9009
IP address blocks:        2607:740:61::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:0a:a9:1f:07:ad:c9:0d:80:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=064e28fc-4d4c-4d59-90a6-7c4844169a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:71:22:e3:4c:3d:ae:a6:33:d3:cd:b3:1f:
                    9d:9f:26:25:b3:25:61:c6:25:a8:f4:30:7a:d8:02:
                    ae:9a:8c:cf:1b:41:59:1d:0c:9a:0d:fe:06:d3:a0:
                    80:76:b2:78:28:a0:5e:ba:18:5e:26:c4:2b:27:6b:
                    be:9d:dc:ff:69:4e:3d:cc:3f:30:02:e0:f8:f9:e7:
                    34:ba:4c:ed:ef:61:7c:c8:48:a6:ef:46:a6:99:80:
                    83:5e:08:a0:aa:42:95:e5:f2:77:96:54:8e:f7:d4:
                    c0:a8:99:4e:c6:58:11:52:51:c9:37:53:f5:3e:86:
                    2f:1c:f7:5b:dc:f0:d0:e7:e4:e1:d2:15:4e:39:23:
                    b5:69:1c:83:8c:48:8b:c1:87:0e:41:12:59:c8:e1:
                    7d:b2:f4:1b:df:c3:41:8b:02:dc:84:75:d4:96:1a:
                    49:a8:d1:ce:4e:4b:68:f0:68:a6:14:de:41:10:35:
                    fc:53:0c:4f:2a:69:9a:43:66:c6:b0:4b:21:93:bb:
                    e4:d8:30:b5:aa:d9:df:28:87:aa:be:3c:4d:43:9d:
                    4b:8a:a1:37:ab:58:2a:91:03:5c:90:27:bc:29:4f:
                    28:6e:05:14:62:36:97:6b:b1:1d:b7:9a:68:9a:57:
                    5b:4f:6f:95:76:71:e2:3f:62:e4:ae:3f:f3:f4:44:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D1:E9:75:3F:31:6D:26:A2:DA:BB:18:0B:CE:1F:07:F9:60:12:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/166a3d4c-a665-3eea-8418-ff9896cd0a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c3:3b:6e:8d:f4:b1:7c:95:47:60:fe:e0:7f:87:09:b4:c6:
         dc:d8:ea:82:9e:35:ba:e4:35:8b:69:75:5d:ea:4d:61:0f:06:
         af:b6:6b:14:a0:8e:4d:41:53:cd:80:65:7c:84:0e:fd:76:ac:
         26:05:0c:1b:e1:98:4e:e1:85:e6:61:63:71:6b:a3:d2:0e:c8:
         d2:59:3a:d4:a2:18:ff:05:18:5b:8a:16:be:02:99:47:59:a6:
         eb:d5:e4:40:42:17:0c:d3:ed:51:49:ad:a3:0a:1d:38:e5:9d:
         a7:27:ad:30:09:97:8b:b7:c6:ae:17:17:e5:72:cc:46:74:82:
         33:3d:53:6d:c6:41:61:b9:51:ee:ce:7b:99:18:1b:f7:5b:2b:
         a1:5c:e9:39:7d:44:96:98:be:f4:bc:ea:ed:79:82:14:dc:c4:
         67:bb:84:5a:ca:1d:6a:85:64:76:4d:e5:be:ea:40:34:76:22:
         59:08:b9:0c:1d:72:a1:fa:8b:17:e4:1e:e5:fc:54:11:91:e5:
         9e:28:4a:a6:a4:6d:ac:38:9a:c5:51:98:8c:f7:7c:a8:14:24:
         f0:96:58:09:aa:f9:6c:88:b3:0f:8e:00:62:19:36:3b:27:76:
         34:ae:5b:f2:23:9c:a0:21:61:25:44:f4:87:6c:51:55:4f:a8:
         34:78:45:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg7UAqpHwetyQ2AT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
MDY0ZTI4ZmMtNGQ0Yy00ZDU5LTkwYTYtN2M0ODQ0MTY5YTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkxxIuNMPa6mM9PNsx+dnyYlsyVhxiWo9DB6
2AKumozPG0FZHQyaDf4G06CAdrJ4KKBeuhheJsQrJ2u+ndz/aU49zD8wAuD4+ec0
ukzt72F8yEim70ammYCDXgigqkKV5fJ3llSO99TAqJlOxlgRUlHJN1P1PoYvHPdb
3PDQ5+Th0hVOOSO1aRyDjEiLwYcOQRJZyOF9svQb38NBiwLchHXUlhpJqNHOTkto
8GimFN5BEDX8UwxPKmmaQ2bGsEshk7vk2DC1qtnfKIeqvjxNQ51LiqE3q1gqkQNc
kCe8KU8obgUUYjaXa7Edt5pomldbT2+VdnHiP2Lkrj/z9ES34wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDbR6XU/MW0motq7GAvOHwf5YBIaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMTY2YTNkNGMtYTY2NS0z
ZWVhLTg0MTgtZmY5ODk2Y2QwYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACDDO26N9LF8lUdg/uB/hwm0xtzY6oKeNbrkNYtpdV3qTWEPBq+2
axSgjk1BU82AZXyEDv12rCYFDBvhmE7hheZhY3Fro9IOyNJZOtSiGP8FGFuKFr4C
mUdZpuvV5EBCFwzT7VFJraMKHTjlnacnrTAJl4u3xq4XF+VyzEZ0gjM9U23GQWG5
Ue7Oe5kYG/dbK6Fc6Tl9RJaYvvS86u15ghTcxGe7hFrKHWqFZHZN5b7qQDR2IlkI
uQwdcqH6ixfkHuX8VBGR5Z4oSqakbaw4msVRmIz3fKgUJPCWWAmq+WyIsw+OAGIZ
NjsndjSuW/IjnKAhYSVE9IdsUVVPqDR4RbE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:31 2025 by rpki-client