Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa
File:                     424f26c4-887b-3d46-80f1-25fad32f836b.roa (raw, json)
Hash identifier:          zZ0N+++i9KHM/QZ3mbSuT9sP6VmxmCHKo5N3haXroGU=
Subject key identifier:   96:47:E6:B1:E2:55:9C:01:58:75:A0:F5:E8:5E:17:63:A2:E7:E6:F4
Certificate issuer:       /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
Certificate serial:       010D0C9F43285848159FF8278FBD420B78FF1580
Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     397181
IP address blocks:        2604:c840::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f8:27:8f:bd:42:0b:78:ff:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=2796ff96-ac1a-4723-9834-006530f428cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a8:90:a6:88:c2:9c:d2:0b:23:72:0e:bb:90:
                    73:ce:69:23:1a:0d:b2:06:8c:e4:31:4f:3c:87:72:
                    c4:d3:2f:b0:f0:68:53:14:33:b2:80:b0:8b:33:8c:
                    88:c2:c9:5d:17:0b:70:45:46:11:6a:77:0c:54:6f:
                    7c:1b:31:5f:34:63:5b:89:42:c8:d1:2f:70:ca:6f:
                    4e:a3:ba:f5:81:90:67:57:30:12:7d:a5:20:01:06:
                    93:69:cd:99:45:5b:2e:4c:0f:c0:0c:95:5e:0e:15:
                    1b:24:a1:da:94:8d:65:e7:5b:54:ea:8f:81:bd:56:
                    92:77:53:be:78:23:4a:06:75:fd:09:dd:a5:c0:4f:
                    b0:01:a9:5c:b0:89:63:fd:8d:93:de:c2:c9:f4:75:
                    1d:89:78:66:44:43:71:3e:17:90:10:1d:8d:3d:ec:
                    3c:2f:76:bc:78:37:bf:9c:24:05:83:f3:18:40:a8:
                    f5:21:c7:22:52:e6:c3:bd:a3:49:e1:2b:81:9f:d0:
                    2e:53:6a:f9:6e:a5:76:eb:de:dc:9f:17:ad:d0:41:
                    fa:0e:7c:89:e9:5d:db:e1:bd:74:f5:88:2e:f1:ae:
                    c0:a9:96:d4:14:a4:90:7d:a8:5c:bf:81:2b:bc:a3:
                    57:bc:76:d9:b6:c3:53:4a:17:dd:07:11:3f:3d:04:
                    8d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:47:E6:B1:E2:55:9C:01:58:75:A0:F5:E8:5E:17:63:A2:E7:E6:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl

            X509v3 Authority Key Identifier:
                keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:42:1b:e9:d1:02:8d:46:61:30:0f:dc:2b:60:32:2f:95:bf:
         4c:f0:eb:20:89:37:7c:40:87:1f:56:af:43:63:5e:eb:31:31:
         67:a0:09:f1:f2:40:1e:7c:98:b2:5c:dd:da:b5:88:fb:77:3b:
         51:36:05:4d:99:80:2d:ae:99:46:a1:c8:b0:d7:7d:6c:65:d9:
         d6:87:29:84:1d:60:15:35:19:f1:7a:b4:60:36:4d:a0:bc:0d:
         2b:32:bc:9d:c2:8e:d9:3d:f8:5a:03:9d:ec:4b:c5:85:12:b8:
         dd:ed:30:c0:d4:05:39:1b:b6:73:b8:c8:f4:8f:bc:63:87:07:
         4f:1f:8b:f0:45:34:55:ee:91:3b:71:71:c6:6f:29:3d:30:e8:
         4f:2a:13:3a:49:3e:a9:c6:44:a3:98:b1:27:7b:34:fe:25:89:
         fe:1b:8a:35:28:de:9e:cd:84:e3:d6:12:60:36:76:46:19:d7:
         16:74:6c:63:33:1c:1d:8f:a4:ab:45:7c:14:6f:02:51:7c:02:
         8b:40:9c:87:49:58:3d:e6:2a:27:63:e1:06:95:af:25:3e:eb:
         19:35:2f:ba:79:f8:47:71:b4:91:ad:e7:51:5c:e6:cc:7a:91:
         3d:f3:7f:aa:75:5e:4f:dd:94:96:1f:8b:07:5e:74:18:7e:13:
         27:79:a1:ee
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgVn/gnj71CC3j/FYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk
NmFiMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
Mjc5NmZmOTYtYWMxYS00NzIzLTk4MzQtMDA2NTMwZjQyOGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6iQpojCnNILI3IOu5BzzmkjGg2yBozkMU88
h3LE0y+w8GhTFDOygLCLM4yIwsldFwtwRUYRancMVG98GzFfNGNbiULI0S9wym9O
o7r1gZBnVzASfaUgAQaTac2ZRVsuTA/ADJVeDhUbJKHalI1l51tU6o+BvVaSd1O+
eCNKBnX9Cd2lwE+wAalcsIlj/Y2T3sLJ9HUdiXhmRENxPheQEB2NPew8L3a8eDe/
nCQFg/MYQKj1IcciUubDvaNJ4SuBn9AuU2r5bqV2697cnxet0EH6DnyJ6V3b4b10
9Ygu8a7AqZbUFKSQfahcv4ErvKNXvHbZtsNTShfdBxE/PQSNEQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJZH5rHiVZwBWHWg9eheF2Oi5+b0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3
ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvNDI0ZjI2YzQtODg3Yi0z
ZDQ2LTgwZjEtMjVmYWQzMmY4MzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk
MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi
ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx
MzU4YmQ2YWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTIQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBxQhvp0QKNRmEwD9wrYDIvlb9M8OsgiTd8QIcfVq9DY17rMTFnoAnx
8kAefJiyXN3atYj7dztRNgVNmYAtrplGociw131sZdnWhymEHWAVNRnxerRgNk2g
vA0rMrydwo7ZPfhaA53sS8WFErjd7TDA1AU5G7ZzuMj0j7xjhwdPH4vwRTRV7pE7
cXHGbyk9MOhPKhM6ST6pxkSjmLEnezT+JYn+G4o1KN6ezYTj1hJgNnZGGdcWdGxj
Mxwdj6SrRXwUbwJRfAKLQJyHSVg95ionY+EGla8lPusZNS+6efhHcbSRredRXObM
epE983+qdV5P3ZSWH4sHXnQYfhMneaHu
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:09 2025 by rpki-client