Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/16d0c577-bf2f-3261-80ac-c7ca5f476093.roa
File:                     16d0c577-bf2f-3261-80ac-c7ca5f476093.roa (raw, json)
Hash identifier:          WuEnD9bktIo0UfMQ0gL3DLEuZggu2M/i3Y7vidrCTew=
Subject key identifier:   1C:C9:9E:1B:E1:A6:A1:D9:DB:9D:78:80:17:C2:5A:85:CA:8F:A9:50
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858480EA513E960C4D4E66454E500
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/16d0c577-bf2f-3261-80ac-c7ca5f476093.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     9009
IP address blocks:        2607:740:58::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:13:e9:60:c4:d4:e6:64:54:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=dadb57d3-c883-4a61-9446-029a21b01a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:98:55:02:93:cf:00:b5:75:16:23:e0:89:
                    22:de:d8:1e:4e:b4:74:8e:28:25:28:3f:34:c3:30:
                    c9:e3:c1:db:07:d1:71:e8:eb:d8:e0:c0:77:07:10:
                    18:dd:a6:34:b4:04:dc:05:4e:49:8a:d8:02:fb:29:
                    51:41:20:eb:60:65:b2:04:e9:a6:a2:b1:80:96:51:
                    f2:ba:bb:61:c9:a4:67:d6:81:e3:05:cf:e7:e4:83:
                    e5:08:8a:e5:c0:69:e4:2c:32:7e:f7:75:e3:fa:64:
                    ad:fa:93:7b:ed:4c:e9:52:f0:de:80:71:79:e1:da:
                    ae:9e:99:e1:3a:3d:89:7c:81:06:5d:e2:e9:99:77:
                    a7:53:53:1b:2c:c7:2d:8a:ea:6e:2d:9c:84:a3:f5:
                    c7:29:b6:dc:18:79:55:56:43:4e:d8:c0:a6:03:51:
                    f7:aa:e7:57:5f:83:87:ec:2b:ea:97:de:9d:20:89:
                    f5:7f:ce:3a:8f:0d:97:5d:7c:c3:b8:be:e4:1d:2a:
                    75:f5:41:26:d2:b5:f5:d5:d1:c0:0d:4e:d5:9f:8f:
                    76:e3:3e:e9:a2:16:ce:ad:55:fd:68:e8:fc:d9:97:
                    45:5e:09:74:0c:82:c1:95:4e:73:ff:01:46:13:98:
                    a7:ec:57:42:a3:b8:74:e6:cc:71:42:3c:6c:d6:59:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C9:9E:1B:E1:A6:A1:D9:DB:9D:78:80:17:C2:5A:85:CA:8F:A9:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/16d0c577-bf2f-3261-80ac-c7ca5f476093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:19:f9:24:de:d9:be:73:1e:b4:56:1d:bd:a4:f8:ab:67:88:
         25:16:88:1e:e1:80:7b:57:5e:87:64:85:0c:ad:c5:b3:fb:a1:
         b8:8e:73:86:f5:cd:14:8f:d4:04:30:8e:84:bb:e4:7d:d8:3d:
         81:cc:61:b9:bf:65:92:10:c2:77:a6:24:af:bc:a8:ac:59:0a:
         ee:a2:5e:67:8f:86:cc:f6:79:3a:85:b5:af:4f:e8:be:9c:be:
         8a:a9:0e:11:8e:0e:0d:3a:83:1f:d7:be:a7:67:12:65:3b:19:
         ee:fc:4a:29:cd:62:a7:5d:b3:bb:8b:bc:68:ef:29:99:4f:64:
         66:77:cc:59:3c:ef:f7:91:b6:5d:13:f7:6c:c5:90:05:2a:57:
         0f:f5:37:2e:21:35:4c:7a:ac:f7:3c:22:a9:e1:d5:7a:0c:10:
         f2:41:48:b2:ab:0c:4c:f4:04:f2:47:08:bb:26:3a:19:ce:52:
         99:77:cb:08:5f:62:c6:ac:72:3f:7f:bc:dd:ba:70:bf:0d:ef:
         fc:6e:a4:fb:c0:50:eb:8d:9a:2b:34:25:65:26:a2:00:db:8e:
         0f:be:b1:9a:30:e8:fd:a3:3c:a0:47:ba:45:a9:40:8e:bd:db:
         82:dc:bf:84:46:57:ef:da:50:f1:e2:dd:29:54:0a:cf:aa:04:
         89:e9:6e:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgOpRPpYMTU5mRU5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
ZGFkYjU3ZDMtYzg4My00YTYxLTk0NDYtMDI5YTIxYjAxYTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kKYVQKTzwC1dRYj4Iki3tgeTrR0jiglKD80
wzDJ48HbB9Fx6OvY4MB3BxAY3aY0tATcBU5JitgC+ylRQSDrYGWyBOmmorGAllHy
urthyaRn1oHjBc/n5IPlCIrlwGnkLDJ+93Xj+mSt+pN77UzpUvDegHF54dqunpnh
Oj2JfIEGXeLpmXenU1MbLMctiupuLZyEo/XHKbbcGHlVVkNO2MCmA1H3qudXX4OH
7Cvql96dIIn1f846jw2XXXzDuL7kHSp19UEm0rX11dHADU7Vn4924z7pohbOrVX9
aOj82ZdFXgl0DILBlU5z/wFGE5in7FdCo7h05sxxQjxs1lmdFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBzJnhvhpqHZ2514gBfCWoXKj6lQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMTZkMGM1NzctYmYyZi0z
MjYxLTgwYWMtYzdjYTVmNDc2MDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHkZ+STe2b5zHrRWHb2k+KtniCUWiB7hgHtXXodkhQytxbP7obiO
c4b1zRSP1AQwjoS75H3YPYHMYbm/ZZIQwnemJK+8qKxZCu6iXmePhsz2eTqFta9P
6L6cvoqpDhGODg06gx/XvqdnEmU7Ge78SinNYqdds7uLvGjvKZlPZGZ3zFk87/eR
tl0T92zFkAUqVw/1Ny4hNUx6rPc8Iqnh1XoMEPJBSLKrDEz0BPJHCLsmOhnOUpl3
ywhfYsascj9/vN26cL8N7/xupPvAUOuNmis0JWUmogDbjg++sZow6P2jPKBHukWp
QI6924Lcv4RGV+/aUPHi3SlUCs+qBInpbn4=
-----END CERTIFICATE-----
Generated at Mon May 12 01:04:41 2025 by rpki-client