Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa
File:                     e81ede32-402d-39a2-ac55-2465ea2716a5.roa (raw, json)
Hash identifier:          CJbZDPdj/WuVEpfHtpUmQXM3H0DoIcB9MQ04UDOLnPs=
Subject key identifier:   7C:48:4B:01:B4:D9:B8:CF:FD:FF:AD:40:81:26:B6:AE:6D:8F:70:76
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F1553E66B13B3C77A370DA00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        2604:cb00:400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:3e:66:b1:3b:3c:77:a3:70:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=443a30fa-0cd1-4379-bd3c-364b3c0de9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:a3:ec:90:71:4c:17:e5:8b:79:82:74:bd:
                    16:f3:3d:19:28:49:de:4a:9c:09:96:4c:86:9f:33:
                    5c:d5:f4:34:0c:42:2b:99:3a:2e:62:42:9f:f9:0f:
                    15:3c:2c:ca:af:2c:17:7c:1f:4b:ea:66:b8:62:07:
                    49:86:01:3a:b9:2b:de:ff:24:c2:f9:5a:b4:e8:be:
                    2c:18:d5:64:ca:57:1a:78:84:02:3d:62:e9:ed:36:
                    a1:66:1b:bd:59:eb:e9:06:9e:c1:ad:4a:27:59:d0:
                    29:5b:14:17:84:1f:42:91:03:db:5a:18:a0:96:e9:
                    9d:c7:93:f6:f5:13:10:07:25:23:2c:fa:d0:dd:31:
                    b8:5b:2f:5e:c9:cf:4c:a1:1e:65:7a:06:ad:0f:d3:
                    1c:85:85:63:0f:89:d3:4c:7d:37:7b:65:d6:c2:65:
                    55:da:10:f7:35:5c:6a:a1:16:61:86:64:c9:88:24:
                    b1:4b:e6:3c:3c:aa:a0:64:c8:91:d3:32:c7:b7:eb:
                    c8:38:9b:22:8b:d1:55:80:66:f2:1e:97:55:c2:25:
                    c6:b9:75:fa:c8:f9:7a:0e:a1:da:2d:38:9c:21:46:
                    4f:a8:49:00:52:ab:53:ad:3a:62:e9:52:90:4e:77:
                    43:61:68:39:68:b4:70:e8:95:89:85:53:be:a2:04:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:48:4B:01:B4:D9:B8:CF:FD:FF:AD:40:81:26:B6:AE:6D:8F:70:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:10:1d:4b:ee:86:8a:3b:de:c4:94:0b:d8:ec:1e:bf:f2:c7:
         85:f9:23:ad:80:d1:17:95:e1:f2:3c:06:35:7b:c9:6b:52:1e:
         1e:e1:69:a9:92:5d:58:a8:af:74:e6:ef:a9:26:af:f7:eb:7d:
         7e:15:96:c6:9b:e3:e3:0b:fc:5d:b7:91:ab:f7:64:7d:ed:18:
         48:f2:bc:62:08:0c:07:c8:77:fc:98:e6:d4:8b:9e:5b:07:ea:
         b2:67:62:6b:f0:79:73:9e:7c:4e:e6:cc:80:6d:73:37:4b:36:
         e2:ba:a6:ac:47:d9:17:0f:30:b6:6b:a7:39:f7:be:e3:3e:ba:
         55:98:80:08:a9:95:f3:04:f2:23:df:aa:a8:dc:c7:d1:d1:66:
         1e:8b:64:ef:5e:7d:7c:53:7b:55:67:c2:83:cc:96:ae:c6:1e:
         bd:23:4b:a6:aa:9e:67:85:65:8e:cb:46:f6:b9:72:81:f8:65:
         7f:5c:63:7b:2f:79:1b:7f:d8:0c:b7:4f:98:01:1c:15:8f:22:
         3e:19:69:b4:6d:65:2b:a8:7d:b6:78:6a:27:62:42:6c:8e:41:
         8b:5c:61:4a:a0:97:f7:29:54:33:b9:84:86:fe:1b:01:f0:87:
         38:37:d1:79:71:a0:8e:15:6b:9f:73:2f:fc:cd:d8:0b:f2:bd:
         3a:98:c8:17
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfxVT5msTs8d6Nw2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
NDQzYTMwZmEtMGNkMS00Mzc5LWJkM2MtMzY0YjNjMGRlOWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWGj7JBxTBfli3mCdL0W8z0ZKEneSpwJlkyG
nzNc1fQ0DEIrmTouYkKf+Q8VPCzKrywXfB9L6ma4YgdJhgE6uSve/yTC+Vq06L4s
GNVkylcaeIQCPWLp7TahZhu9WevpBp7BrUonWdApWxQXhB9CkQPbWhiglumdx5P2
9RMQByUjLPrQ3TG4Wy9eyc9MoR5legatD9MchYVjD4nTTH03e2XWwmVV2hD3NVxq
oRZhhmTJiCSxS+Y8PKqgZMiR0zLHt+vIOJsii9FVgGbyHpdVwiXGuXX6yPl6DqHa
LTicIUZPqEkAUqtTrTpi6VKQTndDYWg5aLRw6JWJhVO+ogQLRQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHxISwG02bjP/f+tQIEmtq5tj3B2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgxZWRlMzItNDAyZC0z
OWEyLWFjNTUtMjQ2NWVhMjcxNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcxAdS+6GijvexJQL2Owev/LHhfkjrYDRF5Xh8jwGNXvJa1IeHuFp
qZJdWKivdObvqSav9+t9fhWWxpvj4wv8XbeRq/dkfe0YSPK8YggMB8h3/Jjm1Iue
Wwfqsmdia/B5c558TubMgG1zN0s24rqmrEfZFw8wtmunOfe+4z66VZiACKmV8wTy
I9+qqNzH0dFmHotk7159fFN7VWfCg8yWrsYevSNLpqqeZ4VljstG9rlygfhlf1xj
ey95G3/YDLdPmAEcFY8iPhlptG1lK6h9tnhqJ2JCbI5Bi1xhSqCX9ylUM7mEhv4b
AfCHODfReXGgjhVrn3Mv/M3YC/K9OpjIFw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:46:16 2025 by rpki-client