Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffafd7fb-27a0-329b-9f3c-d20e61946f63.roa
File:                     ffafd7fb-27a0-329b-9f3c-d20e61946f63.roa (raw, json)
Hash identifier:          o/u3FLKxYvm8LXEIKMWa67SHS/at0OIWAcmnDaTduLM=
Subject key identifier:   5A:6E:DE:E2:D5:07:1E:56:52:16:FC:A3:46:79:B6:FB:20:37:83:4B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858485F9AD93C7225D59A6FBE3BC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffafd7fb-27a0-329b-9f3c-d20e61946f63.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     22773
IP address blocks:        2001:57a:7304::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:d9:3c:72:25:d5:9a:6f:be:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=28607050-9ae8-4083-8dea-0636295b321c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:e2:87:37:a5:78:44:ac:d3:41:b3:76:65:
                    f6:fb:1b:c8:d8:ee:0c:23:e6:2e:87:b7:a8:a3:21:
                    27:ac:d0:55:84:f2:8a:0e:bd:28:81:45:25:0f:5f:
                    0e:4b:92:dc:3d:62:f7:47:6d:27:9b:60:3a:ec:f6:
                    c8:a6:fc:f3:ae:54:97:b9:8d:a5:f0:64:7a:e8:59:
                    78:13:b8:74:dd:8f:a5:db:37:e9:56:ca:05:4e:4e:
                    8a:5c:e6:38:46:fe:99:42:e9:81:4f:18:33:15:74:
                    8a:c6:e8:a0:0e:cd:49:a2:e3:b0:9f:b2:31:a6:a1:
                    39:67:ab:80:23:af:34:a9:3d:c2:46:9c:c7:78:bb:
                    76:30:1e:57:66:5e:d0:a0:94:6f:15:29:ca:f2:f2:
                    7d:dc:f4:28:8b:c7:5b:4f:34:98:a6:5a:11:73:c2:
                    49:9f:80:74:56:8a:6f:95:4a:aa:8b:c2:91:eb:83:
                    cb:3d:42:f0:b6:e7:4d:f5:9a:1c:fc:f7:5d:1e:43:
                    c9:be:6e:06:3a:b2:87:cb:28:63:0f:81:f6:02:70:
                    e8:1a:7a:4f:ad:cf:3c:36:01:69:79:d7:af:7e:50:
                    8b:4a:95:9f:90:1f:67:c3:cf:1a:7a:38:8a:71:62:
                    2b:ee:b1:71:97:7d:36:09:95:20:bd:19:76:61:f2:
                    83:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6E:DE:E2:D5:07:1E:56:52:16:FC:A3:46:79:B6:FB:20:37:83:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffafd7fb-27a0-329b-9f3c-d20e61946f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:57a:7304::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d6:44:bb:b2:46:2e:56:39:d2:00:72:7d:6c:96:51:85:6d:
         eb:08:cd:d3:30:dc:96:8c:69:2d:57:af:29:f0:5e:7a:92:77:
         99:b9:d6:fd:b2:5f:77:08:52:9f:2b:10:43:10:c5:e5:53:49:
         5b:de:86:34:8a:eb:a5:b7:86:c3:4a:d8:35:e8:77:e5:b8:28:
         07:7c:35:5a:64:1e:40:20:ee:32:3b:ed:76:53:9b:ba:bc:8b:
         0c:7f:92:62:43:fd:78:c9:36:45:ba:6d:36:91:d1:c3:56:89:
         a9:ce:87:de:0d:cd:dd:ba:d0:db:07:d4:1c:3e:70:18:59:b7:
         7b:16:37:8e:b2:08:62:b5:db:10:d1:0a:c3:79:9c:2d:24:03:
         a9:78:8c:11:7b:7b:de:47:a7:a3:5d:ce:28:c5:d4:bf:99:da:
         72:5b:99:9b:16:f7:9d:d8:cf:c8:7a:ab:a3:3d:1e:70:a8:ba:
         28:68:db:f8:58:36:3d:41:a8:55:1b:59:b7:2c:a4:b8:b7:e5:
         b8:c9:4a:6c:42:0a:21:c5:00:37:be:ea:b5:fc:52:3d:8e:db:
         02:05:d9:7b:c7:d4:c9:ae:24:6b:fb:65:93:60:40:ab:b2:04:
         9f:c0:c8:33:91:5f:96:c7:0e:d9:67:e8:4b:f5:54:e0:75:3d:
         3e:0f:6e:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmtk8ciXVmm++O8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
Mjg2MDcwNTAtOWFlOC00MDgzLThkZWEtMDYzNjI5NWIzMjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6LihzeleESs00GzdmX2+xvI2O4MI+Yuh7eo
oyEnrNBVhPKKDr0ogUUlD18OS5LcPWL3R20nm2A67PbIpvzzrlSXuY2l8GR66Fl4
E7h03Y+l2zfpVsoFTk6KXOY4Rv6ZQumBTxgzFXSKxuigDs1JouOwn7IxpqE5Z6uA
I680qT3CRpzHeLt2MB5XZl7QoJRvFSnK8vJ93PQoi8dbTzSYploRc8JJn4B0Vopv
lUqqi8KR64PLPULwtudN9Zoc/PddHkPJvm4GOrKHyyhjD4H2AnDoGnpPrc88NgFp
edevflCLSpWfkB9nw88aejiKcWIr7rFxl302CZUgvRl2YfKDqwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFpu3uLVBx5WUhb8o0Z5tvsgN4NLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmZhZmQ3ZmItMjdhMC0z
MjliLTlmM2MtZDIwZTYxOTQ2ZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFenME
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACXWRLuyRi5WOdIAcn1sllGFbesIzdMw3JaMaS1XrynwXnqSd5m5
1v2yX3cIUp8rEEMQxeVTSVvehjSK66W3hsNK2DXod+W4KAd8NVpkHkAg7jI77XZT
m7q8iwx/kmJD/XjJNkW6bTaR0cNWianOh94Nzd260NsH1Bw+cBhZt3sWN46yCGK1
2xDRCsN5nC0kA6l4jBF7e95Hp6NdzijF1L+Z2nJbmZsW953Yz8h6q6M9HnCouiho
2/hYNj1BqFUbWbcspLi35bjJSmxCCiHFADe+6rX8Uj2O2wIF2XvH1MmuJGv7ZZNg
QKuyBJ/AyDORX5bHDtln6Ev1VOB1PT4Pbu0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:56:02 2025 by rpki-client