Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa
File:                     c4518de9-d056-34ce-80de-4fe9f545eb73.roa (raw, json)
Hash identifier:          i9rEVkiuSAyNPSRprpToFuAXQkkg0pLyQnKo8HrQQOI=
Subject key identifier:   F8:EA:14:48:4A:99:90:07:6C:55:73:AC:BC:68:D7:0B:73:88:64:D7
Certificate issuer:       /CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
Certificate serial:       010D0C9F4328584819CFDEA5FE3E6379412ADC4C
Authority key identifier: 51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     3152
IP address blocks:        2620:6a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:de:a5:fe:3e:63:79:41:2a:dc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=fe298fe6-53a0-462c-ac32-75e394e19c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:da:ce:a0:42:98:9f:e1:37:ff:8f:cd:f7:
                    04:f7:e1:45:2c:3f:ff:a5:5b:be:89:36:fe:d2:74:
                    45:42:5d:06:7e:2c:e1:6e:a3:60:97:20:f9:1a:8c:
                    f8:f2:f5:da:3f:e9:7c:2b:17:f8:67:32:4a:3f:1f:
                    57:ad:8b:1e:9d:48:2e:58:04:da:e4:bf:61:b0:fe:
                    b1:2a:34:ad:fd:0f:00:db:4b:9b:cf:9c:ae:52:93:
                    93:65:bc:f9:d5:9c:27:b5:70:ad:95:26:7a:51:2f:
                    0f:fc:33:d1:e7:b1:e3:dc:61:63:2c:d2:da:93:11:
                    43:af:7e:30:15:5d:c9:c1:79:77:f4:3e:10:c9:fa:
                    79:e2:7d:c7:c9:6e:eb:23:60:be:57:dd:1b:b0:d2:
                    1d:d0:38:e4:dd:12:97:69:ef:d3:20:89:ba:00:68:
                    36:ab:cb:6c:64:1c:d7:9b:03:8f:5b:d4:78:29:02:
                    2a:b2:44:60:93:84:e5:d3:79:3e:00:43:bf:30:fe:
                    da:bc:8b:e7:76:31:64:0e:72:fc:c5:e9:ec:9f:f4:
                    73:1f:28:9c:63:c2:0e:66:d1:15:f5:39:b6:4c:16:
                    95:3e:ba:e8:0b:0c:ec:b0:f5:12:c3:27:be:4a:ac:
                    15:fc:a8:5d:7b:6c:18:ca:02:6b:88:d3:76:40:5f:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:14:48:4A:99:90:07:6C:55:73:AC:BC:68:D7:0B:73:88:64:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl

            X509v3 Authority Key Identifier:
                keyid:51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ae:a4:d9:23:3f:3f:5b:ba:3f:45:ab:53:c7:99:34:ae:e3:
         64:d9:87:4c:17:ad:b6:88:15:e9:70:26:2d:fd:07:07:50:85:
         f9:ce:35:bd:2d:76:68:f9:cd:7f:5a:99:1b:db:7a:ca:7b:68:
         dc:da:ff:9d:d0:41:47:25:60:5b:e6:b0:27:a0:c0:2b:81:d1:
         14:35:9c:41:94:69:75:bc:25:ec:0a:a2:c3:5a:ee:6f:50:03:
         ea:5d:22:dc:08:e8:de:a8:ed:2e:f2:87:5e:d7:60:19:c6:d0:
         41:70:80:ab:94:b3:93:2e:a2:1d:4d:8e:5b:b0:0c:26:1a:80:
         df:ce:b8:ad:cb:9e:35:f4:02:37:a0:17:25:9b:4f:e7:54:45:
         b5:54:07:09:e8:e1:0d:f2:13:af:99:97:ae:c3:0a:34:4a:e6:
         60:99:3e:41:2c:54:75:39:2d:3f:46:78:e5:fe:69:59:5b:0b:
         f5:83:d4:87:bc:1c:3f:33:99:c5:83:d0:e9:d8:45:4c:96:f9:
         43:41:2f:d4:4b:21:89:f0:36:63:08:85:05:ef:17:5a:d3:1b:
         21:1b:87:9d:25:a4:5b:64:7c:91:4f:e6:0e:d9:43:8d:cf:7a:
         4f:3a:af:10:f4:a8:ab:31:59:73:95:be:cd:a8:46:8b:d1:3a:
         8f:ff:a0:f3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz96l/j5jeUEq3EwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1MmFiMDQtYzEzYy00ZGRkLWEzZGYtZmNiYmJiNzk1
MTA0MB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZmUyOThmZTYtNTNhMC00NjJjLWFjMzItNzVlMzk0ZTE5YzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomPazqBCmJ/hN/+PzfcE9+FFLD//pVu+iTb+
0nRFQl0GfizhbqNglyD5Goz48vXaP+l8Kxf4ZzJKPx9XrYsenUguWATa5L9hsP6x
KjSt/Q8A20ubz5yuUpOTZbz51ZwntXCtlSZ6US8P/DPR57Hj3GFjLNLakxFDr34w
FV3JwXl39D4Qyfp54n3HyW7rI2C+V90bsNId0Djk3RKXae/TIIm6AGg2q8tsZBzX
mwOPW9R4KQIqskRgk4Tl03k+AEO/MP7avIvndjFkDnL8xensn/RzHyicY8IOZtEV
9Tm2TBaVPrroCwzssPUSwye+SqwV/Khde2wYygJriNN2QF/LkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPjqFEhKmZAHbFVzrLxo1wtziGTXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzUy
YWIwNC1jMTNjLTRkZGQtYTNkZi1mY2JiYmI3OTUxMDQvYzQ1MThkZTktZDA1Ni0z
NGNlLTgwZGUtNGZlOWY1NDVlYjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGM1MmFiMDQtYzEzYy00ZGRkLWEz
ZGYtZmNiYmJiNzk1MTA0LzRjNTJhYjA0LWMxM2MtNGRkZC1hM2RmLWZjYmJiYjc5
NTEwNC5jcmwwHwYDVR0jBBgwFoAUUZZWQF/nRRYYEI+bdmSgakRpOrQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzUyYWIwNC1jMTNjLTRkZGQtYTNkZi1mY2Ji
YmI3OTUxMDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAagAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJCupNkjPz9buj9Fq1PHmTSu42TZh0wXrbaIFelwJi39BwdQhfnO
Nb0tdmj5zX9amRvbesp7aNza/53QQUclYFvmsCegwCuB0RQ1nEGUaXW8JewKosNa
7m9QA+pdItwI6N6o7S7yh17XYBnG0EFwgKuUs5Muoh1NjluwDCYagN/OuK3LnjX0
AjegFyWbT+dURbVUBwno4Q3yE6+Zl67DCjRK5mCZPkEsVHU5LT9GeOX+aVlbC/WD
1Ie8HD8zmcWD0OnYRUyW+UNBL9RLIYnwNmMIhQXvF1rTGyEbh50lpFtkfJFP5g7Z
Q43Pek86rxD0qKsxWXOVvs2oRovROo//oPM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:35 2025 by rpki-client