Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa
File:                     52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa (raw, json)
Hash identifier:          FLpFBLQQvyI4eyVkU9e1u7XeSonl9zmbjmR5brA8m80=
Subject key identifier:   53:74:19:4D:CC:32:B3:39:B9:D1:AA:8A:36:2A:8E:06:F8:18:81:8B
Certificate issuer:       /CN=c634bf2d-3875-4079-9788-431e36d8743a
Certificate serial:       010D0C9F4328584827C54A35DF0393C1A3064180
Authority key identifier: 8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     400718
IP address blocks:        2620:73:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:4a:35:df:03:93:c1:a3:06:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c634bf2d-3875-4079-9788-431e36d8743a
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=f213146d-4474-4836-8fd7-b225ec4ae483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:00:5d:98:d6:52:32:26:ce:42:4b:82:0c:8a:
                    07:3c:72:89:0b:1e:21:c4:ba:18:8f:80:36:29:86:
                    b4:d9:a3:c5:24:04:cd:fc:a8:31:7d:02:5a:14:1b:
                    47:b3:e4:59:fb:83:78:dd:5e:9f:48:32:f4:fb:de:
                    2d:fb:8e:4b:6f:d0:15:32:7f:e0:12:6e:cb:54:16:
                    41:28:9b:3c:f7:69:e7:84:60:2d:c3:a2:b7:cb:a3:
                    d7:93:92:24:e4:f4:3c:98:6b:6d:a8:c5:5b:12:ab:
                    18:58:d0:e5:39:cd:4d:3b:89:84:d6:68:f3:46:35:
                    e7:70:f8:c9:74:ac:38:8c:d0:4f:71:ab:f0:68:a0:
                    8d:b4:36:ce:e6:12:33:00:fd:03:13:f4:df:40:a1:
                    7b:0c:49:57:9a:b8:de:19:82:d7:ba:0e:79:5c:77:
                    1b:87:b6:42:d7:99:fd:c7:34:4c:ea:2b:4b:11:c9:
                    ad:54:6f:51:ab:de:35:36:64:65:54:fb:86:9b:43:
                    bd:59:d7:d8:2a:a2:cc:39:bd:17:a3:b7:c4:b9:18:
                    00:06:66:f0:d1:75:82:53:d0:2d:f0:84:5b:3f:e0:
                    49:85:c8:7e:ff:36:60:57:6b:56:cb:a7:f5:1b:3d:
                    d0:43:7c:4e:b0:97:56:f4:ce:97:84:e5:d3:4f:04:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:74:19:4D:CC:32:B3:39:B9:D1:AA:8A:36:2A:8E:06:F8:18:81:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl

            X509v3 Authority Key Identifier:
                keyid:8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:73:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:48:f7:2e:ea:20:d4:48:e7:18:25:a2:5c:8e:7c:4c:18:
         66:58:eb:12:5e:c7:0d:08:00:84:dd:32:38:59:aa:74:5e:07:
         23:5a:ef:b6:47:2c:70:01:7e:1d:9c:4d:dc:9e:e1:83:8b:62:
         3e:fd:8c:bf:09:ac:13:9b:47:1c:ce:23:61:e3:f6:7f:f5:2a:
         05:9a:6e:55:93:e4:3e:5b:cc:82:7a:1f:64:ba:6e:6a:ec:7e:
         5b:3b:33:2a:8e:9f:31:8f:17:55:de:c2:fe:00:88:ed:a7:d2:
         98:fb:52:35:19:dd:15:08:f0:a6:77:9e:62:f3:ab:2e:b1:5d:
         94:13:f1:c3:a4:61:b5:d5:89:3b:b1:c2:a6:77:a2:97:94:b6:
         e8:43:af:18:39:60:16:24:21:3b:3a:e6:72:47:ba:94:6d:fe:
         4f:53:af:1c:fe:1f:98:7d:93:7d:7a:36:c6:70:d7:ed:e0:28:
         33:54:64:c2:c8:56:29:d8:d1:a9:cf:6e:91:92:65:6a:db:68:
         69:03:17:04:a9:b7:9e:85:3f:68:bf:f4:ce:3f:45:99:44:de:
         4d:67:41:75:53:ac:b4:58:bd:f3:cf:d9:ac:8d:d7:64:ef:39:
         85:7f:87:0b:e5:14:79:5c:96:1c:ee:87:4a:a5:b3:5e:bf:91:
         4a:6e:93:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgnxUo13wOTwaMGQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYzNGJmMmQtMzg3NS00MDc5LTk3ODgtNDMxZTM2ZDg3
NDNhMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZjIxMzE0NmQtNDQ3NC00ODM2LThmZDctYjIyNWVjNGFlNDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQBdmNZSMibOQkuCDIoHPHKJCx4hxLoYj4A2
KYa02aPFJATN/KgxfQJaFBtHs+RZ+4N43V6fSDL0+94t+45Lb9AVMn/gEm7LVBZB
KJs892nnhGAtw6K3y6PXk5Ik5PQ8mGttqMVbEqsYWNDlOc1NO4mE1mjzRjXncPjJ
dKw4jNBPcavwaKCNtDbO5hIzAP0DE/TfQKF7DElXmrjeGYLXug55XHcbh7ZC15n9
xzRM6itLEcmtVG9Rq941NmRlVPuGm0O9WdfYKqLMOb0Xo7fEuRgABmbw0XWCU9At
8IRbP+BJhch+/zZgV2tWy6f1Gz3QQ3xOsJdW9M6XhOXTTwQ0rwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFN0GU3MMrM5udGqijYqjgb4GIGLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNjM0
YmYyZC0zODc1LTQwNzktOTc4OC00MzFlMzZkODc0M2EvNTJmNjFjZWEtMDU5YS0z
Yjk3LThiMWEtZTRiOWJjYzc3MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzYzNGJmMmQtMzg3NS00MDc5LTk3
ODgtNDMxZTM2ZDg3NDNhL2M2MzRiZjJkLTM4NzUtNDA3OS05Nzg4LTQzMWUzNmQ4
NzQzYS5jcmwwHwYDVR0jBBgwFoAUjznnANhpkhCHgv+7RhaeZJqG1cIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNjM0YmYyZC0zODc1LTQwNzktOTc4OC00MzFl
MzZkODc0M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAcyAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE95SPcu6iDUSOcYJaJcjnxMGGZY6xJexw0IAITdMjhZqnReByNa
77ZHLHABfh2cTdye4YOLYj79jL8JrBObRxzOI2Hj9n/1KgWablWT5D5bzIJ6H2S6
bmrsfls7MyqOnzGPF1Xewv4AiO2n0pj7UjUZ3RUI8KZ3nmLzqy6xXZQT8cOkYbXV
iTuxwqZ3opeUtuhDrxg5YBYkITs65nJHupRt/k9Trxz+H5h9k316NsZw1+3gKDNU
ZMLIVinY0anPbpGSZWrbaGkDFwSpt56FP2i/9M4/RZlE3k1nQXVTrLRYvfPP2ayN
12TvOYV/hwvlFHlclhzuh0qls16/kUpukzo=
-----END CERTIFICATE-----