Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa
File:                     9c5e49fc-a177-3465-bd18-2f3d04e61638.roa (raw, json)
Hash identifier:          5xxwgRxPPkOKleoBvcVfx86WGEY01dmqUD+gDXXHTx0=
Subject key identifier:   5F:72:10:97:AD:5B:0B:21:51:DE:3D:E0:93:B7:0A:32:7A:F8:78:0C
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F432858483F803E1DAD748868CF1823C0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     16839
IP address blocks:        2606:3600:5520::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:3e:1d:ad:74:88:68:cf:18:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=6202875f-e53d-4e89-b47e-f30486e1731e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:e5:a6:8a:17:57:b6:af:4e:eb:6f:29:c2:
                    74:ed:18:a2:27:33:52:9a:be:1a:41:d4:47:dc:1e:
                    8f:b1:c0:47:cb:d5:39:e8:63:5b:3e:44:ff:a5:d7:
                    ed:da:3b:f8:61:d1:0d:e8:28:8c:ca:0c:97:88:bd:
                    63:41:8d:fe:2d:01:fa:df:cd:e3:49:d8:54:b0:f8:
                    e0:79:0c:51:d8:97:92:6b:f4:7a:68:3f:44:fa:07:
                    21:39:bf:04:15:ed:1c:77:42:80:50:b3:77:c0:4c:
                    6b:d3:5d:9e:47:a5:49:55:f0:79:14:c4:40:fc:20:
                    f9:5f:bd:16:33:ef:1d:37:e1:61:7c:f8:b2:91:f7:
                    76:29:96:bc:49:11:41:e5:e7:ea:d3:b1:4f:f5:91:
                    29:7d:8d:22:94:cb:10:5e:58:24:4b:fe:cc:b5:ac:
                    83:7b:0a:a0:16:20:b6:3f:30:da:8f:b5:e0:81:cb:
                    15:10:90:43:84:31:33:7f:56:79:41:a5:bf:f9:56:
                    88:ef:ea:f7:6b:dd:13:9c:2b:82:64:c1:c7:dc:cc:
                    30:12:99:14:e6:ae:59:40:a0:ec:a9:33:d4:b8:76:
                    b6:87:35:9c:75:43:63:a3:fd:ef:87:ee:64:b4:51:
                    f4:49:c6:f2:38:13:1d:3f:95:a1:a5:59:47:6c:c2:
                    5d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:72:10:97:AD:5B:0B:21:51:DE:3D:E0:93:B7:0A:32:7A:F8:78:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:5520::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:29:7e:10:4c:2f:60:fa:38:76:8c:1f:4f:5a:5d:54:2a:
         10:8a:e1:b1:88:4c:1f:11:20:74:1c:f6:51:d1:73:6b:4b:fc:
         93:45:ef:d2:af:da:f0:49:54:a7:a5:5f:d2:56:6c:c0:9a:af:
         9e:f4:39:71:3e:89:20:6f:49:db:f2:0c:27:9b:76:27:15:16:
         7b:92:0b:d1:b3:ea:86:bb:d1:26:3c:b9:2b:5f:31:91:b7:85:
         56:57:b1:23:ee:dc:5d:bf:7d:ad:ab:5f:32:47:36:ef:82:c5:
         50:7d:fb:ea:85:2b:de:ba:9b:d0:a5:39:2f:e1:43:f1:3c:27:
         fc:18:80:88:5f:f6:b4:1d:59:92:ba:0a:14:9a:a0:1d:6f:6c:
         81:1e:bb:54:be:16:8c:94:36:fe:7b:70:0f:97:07:d5:a9:df:
         e9:d5:60:c4:d2:44:0c:c1:fe:e0:24:b9:32:1b:68:be:ef:5c:
         94:2b:76:63:fc:63:1d:d6:ba:a6:31:3f:3e:2d:d2:91:64:ef:
         58:2c:79:87:5e:54:88:6e:e3:5a:c9:f8:43:6f:29:eb:a0:3c:
         2e:d3:4f:82:bf:8d:6f:be:df:86:40:c7:8f:ae:89:af:af:b1:
         51:de:9e:d5:39:c9:cd:2e:c2:ae:c1:2d:31:c9:9c:56:6c:ae:
         1f:43:44:4a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg/gD4drXSIaM8YI8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
NjIwMjg3NWYtZTUzZC00ZTg5LWI0N2UtZjMwNDg2ZTE3MzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJjlpooXV7avTutvKcJ07RiiJzNSmr4aQdRH
3B6PscBHy9U56GNbPkT/pdft2jv4YdEN6CiMygyXiL1jQY3+LQH6383jSdhUsPjg
eQxR2JeSa/R6aD9E+gchOb8EFe0cd0KAULN3wExr012eR6VJVfB5FMRA/CD5X70W
M+8dN+FhfPiykfd2KZa8SRFB5efq07FP9ZEpfY0ilMsQXlgkS/7MtayDewqgFiC2
PzDaj7XggcsVEJBDhDEzf1Z5QaW/+VaI7+r3a90TnCuCZMHH3MwwEpkU5q5ZQKDs
qTPUuHa2hzWcdUNjo/3vh+5ktFH0ScbyOBMdP5WhpVlHbMJdkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF9yEJetWwshUd494JO3CjJ6+HgMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOWM1ZTQ5ZmMtYTE3Ny0z
NDY1LWJkMTgtMmYzZDA0ZTYxNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AFUg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJlOKX4QTC9g+jh2jB9PWl1UKhCK4bGITB8RIHQc9lHRc2tL/JNF
79Kv2vBJVKelX9JWbMCar570OXE+iSBvSdvyDCebdicVFnuSC9Gz6oa70SY8uStf
MZG3hVZXsSPu3F2/fa2rXzJHNu+CxVB9++qFK966m9ClOS/hQ/E8J/wYgIhf9rQd
WZK6ChSaoB1vbIEeu1S+FoyUNv57cA+XB9Wp3+nVYMTSRAzB/uAkuTIbaL7vXJQr
dmP8Yx3WuqYxPz4t0pFk71gseYdeVIhu41rJ+ENvKeugPC7TT4K/jW++34ZAx4+u
ia+vsVHentU5yc0uwq7BLTHJnFZsrh9DREo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:36 2025 by rpki-client