Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa
File:                     86d17516-6609-38bc-b9c5-1de3645b206a.roa (raw, json)
Hash identifier:          V9jKcYvxOdSWJxOWAL42sCHn28PsADnGBQQtWze+4AA=
Subject key identifier:   8B:5A:B7:6A:16:A4:26:73:41:B8:20:2D:A5:65:C2:8A:51:A8:86:1F
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858480EA5109D5E5F3A1430E3BA80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     20253
IP address blocks:        2606:bc40:202::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:10:9d:5e:5f:3a:14:30:e3:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=0e50e6b7-31f5-45cd-8c01-1edf84e3c131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:3f:11:2d:87:65:10:c3:6d:de:1e:e6:f4:
                    6f:6c:f8:6f:cc:5c:66:41:62:47:6a:34:e2:36:17:
                    bb:ed:58:83:e7:27:d3:30:1d:e3:21:e5:2b:6b:43:
                    3b:94:17:e2:c0:26:c0:8b:9d:ef:16:9d:f4:57:75:
                    2b:18:9d:96:44:75:85:68:59:55:14:38:4e:3d:93:
                    b8:5e:0f:28:af:9b:d0:f9:a6:95:54:6b:b1:b1:08:
                    c9:e2:ec:e9:fe:91:80:b8:11:dd:65:90:88:52:48:
                    87:0a:b9:f1:4a:50:f6:66:9a:48:df:4b:1c:2c:6f:
                    1d:3b:4f:64:53:d8:3d:d0:31:52:7a:88:13:9b:db:
                    26:6f:7a:9d:e0:19:3e:80:42:c6:dd:12:65:7a:50:
                    3d:0d:2a:c7:c5:1a:59:a1:7b:26:57:30:b6:df:f9:
                    7c:1a:4d:11:c8:ae:9f:29:d5:fc:89:84:b0:22:a6:
                    ea:aa:2b:d3:3d:e6:73:c5:0b:68:03:99:84:88:43:
                    20:8b:ac:32:80:11:30:f2:6e:2f:72:05:ba:ce:61:
                    d5:cb:9c:14:f7:09:36:cb:f0:c4:d2:74:d2:92:2b:
                    d0:82:bb:96:62:99:3d:70:f8:9d:a8:3f:24:3c:5c:
                    f7:7a:c0:96:c8:11:67:6b:83:6a:8a:56:42:43:21:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5A:B7:6A:16:A4:26:73:41:B8:20:2D:A5:65:C2:8A:51:A8:86:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:73:d8:aa:df:93:ce:d0:75:a8:9f:e2:cc:f4:ba:c1:61:5f:
         a7:69:63:9e:a5:4c:5d:3f:d0:71:cb:5a:7b:6a:83:04:e8:3f:
         0b:8b:a1:8a:03:46:4b:9e:7d:3b:68:35:31:7d:73:74:31:cf:
         5c:34:58:ca:b9:5f:b6:14:25:d3:00:26:2d:72:2f:e6:a1:60:
         47:08:42:66:d1:16:ac:9a:7e:78:63:f7:84:fa:47:a4:7c:9d:
         7c:4d:bc:db:86:e7:b7:bd:cb:0b:95:df:8f:8d:d5:06:78:76:
         22:90:d5:1d:99:d4:06:92:c3:6b:00:ca:2a:59:fe:ad:2e:31:
         7e:fe:68:cc:65:40:11:3c:71:96:c3:2d:c3:76:72:7a:f6:13:
         d6:7d:60:f5:d1:b5:8d:c9:30:4f:dd:09:43:37:c3:17:f8:46:
         69:ce:c7:50:67:25:9f:5a:fb:a2:76:ce:8d:5f:12:de:e2:23:
         a0:b7:59:90:bc:94:dc:b4:aa:01:6d:06:c7:f9:ac:f3:ee:b6:
         df:ce:36:cf:b7:a5:85:1c:ca:54:6a:4f:2e:50:c1:17:cf:5e:
         06:64:9e:a3:0a:78:c3:81:9b:7d:a8:d5:bb:ac:cc:d3:98:8d:
         e7:b7:81:81:38:58:e5:ba:44:3e:da:eb:2b:45:65:ec:9f:c6:
         b8:35:ed:cd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgOpRCdXl86FDDjuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
MGU1MGU2YjctMzFmNS00NWNkLThjMDEtMWVkZjg0ZTNjMTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA200/ES2HZRDDbd4e5vRvbPhvzFxmQWJHajTi
Nhe77ViD5yfTMB3jIeUra0M7lBfiwCbAi53vFp30V3UrGJ2WRHWFaFlVFDhOPZO4
Xg8or5vQ+aaVVGuxsQjJ4uzp/pGAuBHdZZCIUkiHCrnxSlD2ZppI30scLG8dO09k
U9g90DFSeogTm9smb3qd4Bk+gELG3RJlelA9DSrHxRpZoXsmVzC23/l8Gk0RyK6f
KdX8iYSwIqbqqivTPeZzxQtoA5mEiEMgi6wygBEw8m4vcgW6zmHVy5wU9wk2y/DE
0nTSkivQgruWYpk9cPidqD8kPFz3esCWyBFna4NqilZCQyFq/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFItat2oWpCZzQbggLaVlwopRqIYfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvODZkMTc1MTYtNjYwOS0z
OGJjLWI5YzUtMWRlMzY0NWIyMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAIC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKZz2Krfk87Qdaif4sz0usFhX6dpY56lTF0/0HHLWntqgwToPwuL
oYoDRkuefTtoNTF9c3Qxz1w0WMq5X7YUJdMAJi1yL+ahYEcIQmbRFqyafnhj94T6
R6R8nXxNvNuG57e9ywuV34+N1QZ4diKQ1R2Z1AaSw2sAyipZ/q0uMX7+aMxlQBE8
cZbDLcN2cnr2E9Z9YPXRtY3JME/dCUM3wxf4RmnOx1BnJZ9a+6J2zo1fEt7iI6C3
WZC8lNy0qgFtBsf5rPPutt/ONs+3pYUcylRqTy5QwRfPXgZknqMKeMOBm32o1bus
zNOYjee3gYE4WOW6RD7a6ytFZeyfxrg17c0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:51 2025 by rpki-client