Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/7d953117-b801-39c8-bdc0-8c591fbe9cf8.roa
File:                     7d953117-b801-39c8-bdc0-8c591fbe9cf8.roa (raw, json)
Hash identifier:          ZoP2UbQknZFR3tcRlb9L3/L33QA7F9rBcOVmlggi0Vk=
Subject key identifier:   03:DE:76:2C:5A:60:A0:76:1C:AB:81:91:2D:DE:71:98:71:4B:EE:41
Certificate issuer:       /CN=eb3726d7-0f8c-4949-99b6-eecda94a0675
Certificate serial:       010D0C9F4328584813962AC656CE56A14D7065B0
Authority key identifier: 9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/7d953117-b801-39c8-bdc0-8c591fbe9cf8.roa
Signing time:             Mon 02 Dec 2024 20:29:49 +0000
ROA not before:           Mon 02 Dec 2024 20:29:49 +0000
ROA not after:            Sun 02 Mar 2025 20:29:49 +0000
asID:                     194
IP address blocks:        2620:117:20f1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:13:96:2a:c6:56:ce:56:a1:4d:70:65:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3726d7-0f8c-4949-99b6-eecda94a0675
        Validity
            Not Before: Dec  2 20:29:49 2024 GMT
            Not After : Mar  2 20:29:49 2025 GMT
        Subject: CN=c600ab6b-b1c8-4107-b446-19c70a829d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:56:43:16:70:b1:5e:c8:b5:19:2f:3f:ca:b3:
                    e6:61:6e:77:fc:3a:ad:20:6e:44:e8:47:7d:90:f3:
                    0c:12:a6:75:de:f4:f6:b3:82:82:c1:95:90:67:99:
                    6d:18:bb:a3:69:25:a6:0a:17:44:45:28:e2:6e:93:
                    ae:37:05:8b:9c:1b:90:e4:02:e9:89:88:8b:c3:c0:
                    a3:21:10:cf:2a:fc:ee:c5:ac:7b:11:9e:45:f5:7d:
                    3d:9f:5e:c5:86:93:1c:a1:7f:76:e5:68:d9:a9:86:
                    db:e7:5b:fc:99:2e:96:0e:67:4b:15:76:d7:03:11:
                    ce:a2:86:5a:46:6a:15:ac:a2:7b:15:3f:a8:ac:6f:
                    3b:ad:52:e8:8b:eb:30:7a:74:c0:3f:06:d6:d9:80:
                    8f:07:b8:ae:63:ff:85:e3:20:0e:0d:c5:0a:84:f5:
                    b7:e0:81:1d:5a:5e:b5:fc:7c:b6:de:f6:b3:ea:84:
                    6c:9a:b8:47:c2:6f:ca:b2:e0:7e:1e:66:d0:e9:23:
                    ca:40:3d:e8:5e:e5:4f:10:07:9d:ca:4e:22:c2:f4:
                    79:c9:f5:33:43:64:a8:bc:03:6a:6c:1f:34:7f:c4:
                    ab:15:a5:d6:57:72:13:26:6a:a0:15:a7:9a:d1:d1:
                    f8:6c:74:c8:da:4b:b9:06:78:79:b2:83:23:73:3a:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DE:76:2C:5A:60:A0:76:1C:AB:81:91:2D:DE:71:98:71:4B:EE:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/7d953117-b801-39c8-bdc0-8c591fbe9cf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.crl

            X509v3 Authority Key Identifier:
                keyid:9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:20f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:61:3a:17:03:a0:a2:57:3d:50:5c:30:04:d7:1a:07:2f:1d:
         8b:47:ff:5b:d3:c2:0f:69:10:4e:fa:4c:7e:f0:22:b0:4e:ff:
         f7:1f:80:f9:1c:74:45:fa:87:d3:63:71:25:e2:5d:b0:6b:b7:
         dc:f4:1d:dd:dd:b2:21:4f:45:d1:5e:43:ed:53:fd:ef:f5:6d:
         20:67:1f:2c:9a:f7:d8:10:44:06:3b:1f:20:0a:91:74:32:a2:
         ee:e4:65:99:05:73:84:0e:b0:f3:8a:a0:f6:95:b5:38:c9:ec:
         9a:bb:69:4f:3a:43:f2:89:32:fb:89:b2:f0:ca:56:93:fc:58:
         12:dc:2b:28:ed:2f:db:7b:21:92:1a:f4:40:42:b5:9f:50:5d:
         c0:5f:29:91:1f:a0:01:04:06:9c:43:0f:be:b5:12:6d:94:cf:
         c7:97:e6:a1:2b:68:0f:02:e3:0f:64:98:05:f2:19:d5:97:26:
         3a:82:6e:a3:0c:af:45:e9:d9:11:ec:cf:52:ba:61:d5:29:66:
         83:b8:06:b2:a2:65:bd:32:7e:2d:0a:a2:d8:6e:9f:e4:33:cb:
         c6:26:82:c4:58:78:8d:69:96:cf:bc:49:4b:98:bd:a8:2f:31:
         29:2d:20:f2:d1:74:30:b1:9d:36:32:da:21:a0:83:84:b1:96:
         de:c1:99:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgTlirGVs5WoU1wZbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIzNzI2ZDctMGY4Yy00OTQ5LTk5YjYtZWVjZGE5NGEw
Njc1MB4XDTI0MTIwMjIwMjk0OVoXDTI1MDMwMjIwMjk0OVowLzEtMCsGA1UEAxMk
YzYwMGFiNmItYjFjOC00MTA3LWI0NDYtMTljNzBhODI5ZDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1ZDFnCxXsi1GS8/yrPmYW53/DqtIG5E6Ed9
kPMMEqZ13vT2s4KCwZWQZ5ltGLujaSWmChdERSjibpOuNwWLnBuQ5ALpiYiLw8Cj
IRDPKvzuxax7EZ5F9X09n17FhpMcoX925WjZqYbb51v8mS6WDmdLFXbXAxHOooZa
RmoVrKJ7FT+orG87rVLoi+swenTAPwbW2YCPB7iuY/+F4yAODcUKhPW34IEdWl61
/Hy23vaz6oRsmrhHwm/KsuB+HmbQ6SPKQD3oXuVPEAedyk4iwvR5yfUzQ2SovANq
bB80f8SrFaXWV3ITJmqgFaea0dH4bHTI2ku5Bnh5soMjczrpNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAPedixaYKB2HKuBkS3ecZhxS+5BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYjM3
MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNkYTk0YTA2NzUvN2Q5NTMxMTctYjgwMS0z
OWM4LWJkYzAtOGM1OTFmYmU5Y2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWIzNzI2ZDctMGY4Yy00OTQ5LTk5
YjYtZWVjZGE5NGEwNjc1L2ViMzcyNmQ3LTBmOGMtNDk0OS05OWI2LWVlY2RhOTRh
MDY3NS5jcmwwHwYDVR0jBBgwFoAUnvCNRKemJvSpF4Fe6iZX/NgAieEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lYjM3MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNk
YTk0YTA2NzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFyDx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACthOhcDoKJXPVBcMATXGgcvHYtH/1vTwg9pEE76TH7wIrBO//cf
gPkcdEX6h9NjcSXiXbBrt9z0Hd3dsiFPRdFeQ+1T/e/1bSBnHyya99gQRAY7HyAK
kXQyou7kZZkFc4QOsPOKoPaVtTjJ7Jq7aU86Q/KJMvuJsvDKVpP8WBLcKyjtL9t7
IZIa9EBCtZ9QXcBfKZEfoAEEBpxDD761Em2Uz8eX5qEraA8C4w9kmAXyGdWXJjqC
bqMMr0Xp2RHsz1K6YdUpZoO4BrKiZb0yfi0Kothun+Qzy8YmgsRYeI1pls+8SUuY
vagvMSktIPLRdDCxnTYy2iGgg4Sxlt7BmcQ=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:19:05 2025 by rpki-client