Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa
File:                     76b42bc4-57ac-394d-ba88-7d614145118a.roa (raw, json)
Hash identifier:          xHUgJKp5kozqek2NTTYqtFiRlbTuTt1NTVbG8xsuy+8=
Subject key identifier:   B0:C8:77:07:D4:0A:2E:72:20:BE:E6:DC:50:27:AD:98:36:4B:9C:A5
Certificate issuer:       /CN=add35f11-0294-4be9-94b7-49cac2bcb001
Certificate serial:       010D0C9F432858483F801D73367673518EC121AD
Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     212149
IP address blocks:        2602:fbf5::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:1d:73:36:76:73:51:8e:c1:21:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=12d3b45c-62fc-4e43-a098-88d5c9389851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:bc:59:3b:13:04:a2:2c:c0:08:04:fb:18:
                    b5:3a:20:1e:ce:c9:52:00:5f:23:41:c9:f4:42:d4:
                    fb:5c:d6:37:e6:c3:4f:37:bf:ad:07:f7:c4:1b:5d:
                    12:20:0a:61:59:11:3e:73:9d:b3:a8:b5:5d:42:c2:
                    5f:24:a1:10:b8:86:36:12:3a:78:a6:e2:a9:43:51:
                    51:77:63:7b:a5:b1:ae:3d:7a:5b:f4:71:66:db:c3:
                    d4:dc:0b:ba:3f:05:c8:5e:7e:a8:f0:7a:0e:5a:d3:
                    bb:c3:ae:c7:c3:98:03:87:ff:79:bc:ed:90:87:87:
                    61:6a:45:30:47:58:37:b5:e0:11:2f:89:da:2b:b2:
                    a6:41:bc:5c:b8:a1:70:5d:60:3a:73:bf:aa:4d:d5:
                    ed:7e:09:34:68:30:96:8a:38:3f:09:95:64:f5:e9:
                    5c:5c:9d:cd:7f:b4:ca:8a:28:f7:90:b7:15:94:42:
                    b0:92:24:39:48:93:b8:3b:b7:64:fb:bb:d7:2c:cb:
                    6a:e6:42:36:b3:aa:35:65:bf:af:6f:53:8f:6c:bc:
                    01:22:76:ec:87:dd:24:d5:cd:b6:a9:75:17:15:8b:
                    2a:d9:24:4d:06:04:82:80:f3:36:ad:5d:36:18:2c:
                    86:7a:7d:aa:07:e4:b8:c7:b3:a4:37:40:35:e6:62:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C8:77:07:D4:0A:2E:72:20:BE:E6:DC:50:27:AD:98:36:4B:9C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:83:79:a8:10:1a:23:2f:dd:06:42:7b:db:13:84:4e:d0:
         05:80:a6:af:59:12:a1:e0:1f:36:8e:c0:55:64:e5:b0:d0:af:
         cf:84:44:c1:17:0d:f8:85:53:60:41:0e:81:ea:b9:51:7e:64:
         d7:d0:8c:b5:53:94:ee:73:1c:7e:07:6a:2f:50:8a:cd:30:1f:
         44:50:15:a0:82:38:21:23:3a:0e:da:4a:c0:94:aa:08:8f:82:
         a2:e0:3b:af:d3:c5:e2:7e:2c:2b:f5:23:ea:bf:7c:bb:fe:5a:
         9e:74:c9:58:ae:fc:30:52:53:5c:2c:98:36:e1:b4:23:37:6e:
         b7:78:e7:10:a9:b6:fe:42:f7:37:6d:2b:5e:b9:8b:b5:47:fe:
         34:d4:fa:42:d2:52:7c:0d:0c:73:19:c2:b6:79:45:96:96:b8:
         88:39:dd:62:2d:ad:56:3b:6b:60:af:17:ea:6a:c5:a6:64:ce:
         fc:ea:c0:13:5d:2a:43:cc:6e:b8:f4:19:8c:f1:28:2e:3b:95:
         14:93:39:12:c2:a3:7e:14:2f:96:e7:45:20:97:61:96:31:11:
         7b:4c:bf:2d:13:80:82:a2:52:05:a8:f0:ed:4d:9a:72:db:76:
         19:2b:2c:ad:e4:1e:ae:0d:d9:43:6c:50:72:cb:b9:d4:52:57:
         8b:e1:f1:28
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEg/gB1zNnZzUY7BIa0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi
MDAxMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
MTJkM2I0NWMtNjJmYy00ZTQzLWEwOTgtODhkNWM5Mzg5ODUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsu8WTsTBKIswAgE+xi1OiAezslSAF8jQcn0
QtT7XNY35sNPN7+tB/fEG10SIAphWRE+c52zqLVdQsJfJKEQuIY2Ejp4puKpQ1FR
d2N7pbGuPXpb9HFm28PU3Au6PwXIXn6o8HoOWtO7w67Hw5gDh/95vO2Qh4dhakUw
R1g3teARL4naK7KmQbxcuKFwXWA6c7+qTdXtfgk0aDCWijg/CZVk9elcXJ3Nf7TK
iij3kLcVlEKwkiQ5SJO4O7dk+7vXLMtq5kI2s6o1Zb+vb1OPbLwBInbsh90k1c22
qXUXFYsq2SRNBgSCgPM2rV02GCyGen2qB+S4x7OkN0A15mLPeQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLDIdwfUCi5yIL7m3FAnrZg2S5ylMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz
NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzZiNDJiYzQtNTdhYy0z
OTRkLWJhODgtN2Q2MTQxNDUxMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0
YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj
YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh
YzJiY2IwMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL79QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKMWDeagQGiMv3QZCe9sThE7QBYCmr1kSoeAfNo7AVWTlsNCvz4RE
wRcN+IVTYEEOgeq5UX5k19CMtVOU7nMcfgdqL1CKzTAfRFAVoII4ISM6DtpKwJSq
CI+CouA7r9PF4n4sK/Uj6r98u/5annTJWK78MFJTXCyYNuG0Izdut3jnEKm2/kL3
N20rXrmLtUf+NNT6QtJSfA0McxnCtnlFlpa4iDndYi2tVjtrYK8X6mrFpmTO/OrA
E10qQ8xuuPQZjPEoLjuVFJM5EsKjfhQvludFIJdhljERe0y/LROAgqJSBajw7U2a
ctt2GSssreQerg3ZQ2xQcsu51FJXi+HxKA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:49 2025 by rpki-client