Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4c18c32c-4fa7-379d-9727-30aca7836cff.roa
File:                     4c18c32c-4fa7-379d-9727-30aca7836cff.roa (raw, json)
Hash identifier:          zSuZDYqMFgp2M0XiBFfPT13+SIkWFkZpWe27VtrrgoY=
Subject key identifier:   40:23:47:A5:30:05:25:1A:01:3E:1F:96:8D:7C:EA:7B:0C:E5:B8:FF
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584855D596480C58CB6F2F10A200
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4c18c32c-4fa7-379d-9727-30aca7836cff.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1061::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:96:48:0c:58:cb:6f:2f:10:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=c60ef8b0-191d-483c-861e-46f9efa79d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:75:9b:e6:24:d0:d4:7e:44:f8:23:c8:1c:
                    a3:49:ea:47:8e:78:74:f0:dc:c2:2c:01:39:66:97:
                    1f:6a:66:e2:7b:8b:4f:ad:02:2d:0d:15:92:78:ff:
                    33:da:fb:97:be:7e:4d:4e:d9:cc:c9:26:15:42:5b:
                    58:f2:e8:86:fd:36:75:ae:81:9e:83:66:93:1e:56:
                    d0:8d:d2:74:1c:74:d2:38:5e:9c:e5:1b:ca:6e:74:
                    89:03:1a:db:30:99:7e:96:db:95:c3:b6:81:1c:4d:
                    04:79:26:e1:5d:b2:48:68:d5:06:06:11:a5:b5:68:
                    ed:50:26:1a:b4:e6:a0:48:f3:2f:a4:25:e3:5c:f7:
                    21:7d:65:e1:e5:b2:f9:6e:a9:9d:26:bc:84:c9:a2:
                    0d:74:df:97:25:7e:68:24:04:1d:76:84:b6:ee:72:
                    b7:94:3b:4b:93:85:7a:37:dc:df:72:18:dc:36:58:
                    f8:03:d0:26:90:61:ed:9d:0d:dd:82:c9:06:a2:4c:
                    64:a3:b1:23:b9:bb:eb:f2:f8:f2:d7:17:3a:d4:94:
                    7b:98:91:dd:d0:07:aa:eb:d6:22:1e:86:36:c5:78:
                    5b:c4:bb:4d:d3:37:8b:62:5d:cc:18:ff:b7:da:b7:
                    c3:68:72:4d:31:8c:23:c4:32:c8:45:42:ae:4f:bc:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:23:47:A5:30:05:25:1A:01:3E:1F:96:8D:7C:EA:7B:0C:E5:B8:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4c18c32c-4fa7-379d-9727-30aca7836cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1061::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ce:d3:83:a0:0f:da:71:a4:ab:0e:88:c9:9a:1a:be:9e:99:
         0b:c7:cc:c7:ed:d5:7e:56:4d:48:94:07:be:30:65:4e:85:47:
         4e:fe:b5:f0:4d:67:f3:ec:5b:03:b8:bf:ba:46:27:d8:f0:6b:
         a0:30:36:71:b0:99:37:19:24:b2:cf:74:2b:29:09:a3:b8:e6:
         cb:35:5a:ad:63:7e:1e:56:db:5a:53:90:2a:ba:a8:62:88:ff:
         e2:c7:88:37:a5:c9:39:0f:6e:de:e4:fa:7a:87:fe:58:fe:57:
         60:7d:a4:bd:01:9e:ea:37:ad:ed:88:71:f0:a8:3e:9e:d3:86:
         9f:fe:4e:49:ae:8a:0b:8a:36:c1:b0:2a:2d:72:db:8b:06:d5:
         88:60:3c:50:8b:bd:2f:9f:58:ab:39:20:bc:bd:8c:c3:46:fa:
         3c:ed:49:2f:8e:26:0f:0d:d8:ea:91:e7:60:06:7f:09:e0:20:
         a7:e8:08:33:53:3d:65:2c:b4:25:71:f9:b8:fc:98:69:49:71:
         f0:7b:a4:a0:af:a5:16:ef:2a:d8:e0:35:4e:30:f8:9c:ed:11:
         06:b8:f1:e3:2f:f6:19:70:55:e6:fa:af:e4:f3:44:cf:9f:51:
         78:29:9c:a4:3c:fc:48:e0:01:0f:e0:43:9c:c6:ff:6f:24:02:
         95:0d:a8:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhV1ZZIDFjLby8QogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
YzYwZWY4YjAtMTkxZC00ODNjLTg2MWUtNDZmOWVmYTc5ZDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgZ1m+Yk0NR+RPgjyByjSepHjnh08NzCLAE5
Zpcfambie4tPrQItDRWSeP8z2vuXvn5NTtnMySYVQltY8uiG/TZ1roGeg2aTHlbQ
jdJ0HHTSOF6c5RvKbnSJAxrbMJl+ltuVw7aBHE0EeSbhXbJIaNUGBhGltWjtUCYa
tOagSPMvpCXjXPchfWXh5bL5bqmdJryEyaINdN+XJX5oJAQddoS27nK3lDtLk4V6
N9zfchjcNlj4A9AmkGHtnQ3dgskGokxko7Ejubvr8vjy1xc61JR7mJHd0Aeq69Yi
HoY2xXhbxLtN0zeLYl3MGP+32rfDaHJNMYwjxDLIRUKuT7zDQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEAjR6UwBSUaAT4flo186nsM5bj/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNGMxOGMzMmMtNGZhNy0z
NzlkLTk3MjctMzBhY2E3ODM2Y2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAALO04OgD9pxpKsOiMmaGr6emQvHzMft1X5WTUiUB74wZU6FR07+
tfBNZ/PsWwO4v7pGJ9jwa6AwNnGwmTcZJLLPdCspCaO45ss1Wq1jfh5W21pTkCq6
qGKI/+LHiDelyTkPbt7k+nqH/lj+V2B9pL0Bnuo3re2IcfCoPp7Thp/+TkmuiguK
NsGwKi1y24sG1YhgPFCLvS+fWKs5ILy9jMNG+jztSS+OJg8N2OqR52AGfwngIKfo
CDNTPWUstCVx+bj8mGlJcfB7pKCvpRbvKtjgNU4w+JztEQa48eMv9hlwVeb6r+Tz
RM+fUXgpnKQ8/EjgAQ/gQ5zG/28kApUNqEI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:26 2025 by rpki-client