Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa
File:                     2e58d574-11fd-3248-8d46-82d8c4d93007.roa (raw, json)
Hash identifier:          +XT3ZJxV2va8Jrsz+JrfRPymBQL8qLLU34XMAOCJuW8=
Subject key identifier:   4A:61:F6:09:82:46:02:48:88:BB:15:23:D8:AE:90:94:AD:3A:A4:B4
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F432858487E50630D104B694FB7DF9780
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     396026
IP address blocks:        2607:fc30:100::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:63:0d:10:4b:69:4f:b7:df:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=a2b78bb8-28e6-4ec9-b6c5-acc37e0d000a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:15:c3:df:82:0c:88:67:c4:74:66:c4:d7:
                    ea:5d:4a:54:43:0e:72:b3:c8:23:19:44:47:99:ff:
                    c7:a5:d7:aa:f5:41:75:03:9f:30:4e:b8:72:0e:cc:
                    ee:2f:49:49:a4:da:06:73:41:ed:5d:69:ed:41:32:
                    9a:f9:ac:95:d1:1f:2c:08:3b:bd:9c:46:16:1f:78:
                    29:e2:42:0a:fc:f6:7b:02:d6:e4:42:a9:90:61:5d:
                    ef:83:e4:86:d5:57:b0:d3:61:31:87:ad:71:35:bb:
                    53:4a:01:af:fc:5f:01:b2:f9:a3:44:6d:cb:d5:f5:
                    15:2a:0a:6b:4a:ae:3b:1b:20:f4:ab:a2:6c:94:63:
                    af:09:85:7d:14:0f:aa:da:2b:4a:11:c8:da:51:88:
                    d3:3b:30:f9:4b:20:9c:34:3e:fb:1b:37:06:98:f8:
                    f5:3c:30:37:b8:37:81:b4:61:ef:d1:67:9b:3e:14:
                    a8:d9:de:03:ae:0a:29:6f:4f:1d:36:13:dc:f5:fa:
                    68:1e:29:4e:2f:e4:65:bf:32:e2:6e:50:4f:25:34:
                    c5:2b:61:5e:39:e0:cc:a1:21:f3:1d:c3:32:2a:15:
                    04:9e:fa:f6:27:e1:80:0a:c7:01:7b:0d:54:7f:7a:
                    92:c8:30:a8:7a:d7:a0:c3:99:96:2c:c1:4b:f6:1a:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:61:F6:09:82:46:02:48:88:BB:15:23:D8:AE:90:94:AD:3A:A4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:78:06:3f:b4:03:05:35:62:70:67:ca:fb:ec:cf:8f:3e:06:
         3c:28:5c:3d:6b:d3:98:cf:27:c3:06:7e:22:31:32:4e:f5:b0:
         c7:83:f9:9b:0c:04:03:c6:32:79:ed:67:ca:11:fd:39:83:75:
         39:d1:e0:7b:88:96:85:14:a3:fd:32:38:e5:b6:11:4e:48:3f:
         7e:e7:e7:ed:ad:28:45:1a:3a:c2:95:ab:fd:3c:5e:99:ff:bd:
         e1:30:cb:77:be:ff:37:2f:e6:3c:62:12:5c:5f:75:e2:f8:b9:
         a0:f7:2f:26:a8:1c:57:49:86:93:25:09:8b:49:f8:13:d7:3f:
         db:a4:8a:64:12:b2:04:d2:03:a4:97:f8:38:9b:fc:ec:1b:80:
         30:bc:55:29:77:69:fa:63:5a:19:68:5a:c8:df:46:44:5f:6b:
         38:72:da:f4:33:c9:dd:c0:de:43:e5:63:e7:d2:63:b3:46:4e:
         f6:a3:dc:ec:91:9f:92:27:f5:d3:5b:73:9b:ce:69:4a:91:79:
         da:69:61:1e:48:28:fe:a6:38:15:f9:a6:92:d2:92:81:d1:62:
         43:5f:cb:03:99:c2:af:d5:09:d5:31:c3:ab:9e:c7:69:2c:30:
         1e:cf:85:a0:77:a7:5f:cd:d4:b2:a7:99:b4:fa:4a:e2:1c:04:
         55:02:29:af
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEh+UGMNEEtpT7ffl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2
NDdhMB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk
YTJiNzhiYjgtMjhlNi00ZWM5LWI2YzUtYWNjMzdlMGQwMDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3EVw9+CDIhnxHRmxNfqXUpUQw5ys8gjGURH
mf/Hpdeq9UF1A58wTrhyDszuL0lJpNoGc0HtXWntQTKa+ayV0R8sCDu9nEYWH3gp
4kIK/PZ7AtbkQqmQYV3vg+SG1Vew02Exh61xNbtTSgGv/F8BsvmjRG3L1fUVKgpr
Sq47GyD0q6JslGOvCYV9FA+q2itKEcjaUYjTOzD5SyCcND77GzcGmPj1PDA3uDeB
tGHv0WebPhSo2d4Drgopb08dNhPc9fpoHilOL+RlvzLiblBPJTTFK2FeOeDMoSHz
HcMyKhUEnvr2J+GACscBew1Uf3qSyDCoetegw5mWLMFL9hqz/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEph9gmCRgJIiLsVI9iukJStOqS0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj
NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMmU1OGQ1NzQtMTFmZC0z
MjQ4LThkNDYtODJkOGM0ZDkzMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0
YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0
NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5
MWEzNDY0N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf8MAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASHgGP7QDBTVicGfK++zPjz4GPChcPWvTmM8nwwZ+IjEyTvWwx4P5
mwwEA8Yyee1nyhH9OYN1OdHge4iWhRSj/TI45bYRTkg/fufn7a0oRRo6wpWr/Txe
mf+94TDLd77/Ny/mPGISXF914vi5oPcvJqgcV0mGkyUJi0n4E9c/26SKZBKyBNID
pJf4OJv87BuAMLxVKXdp+mNaGWhayN9GRF9rOHLa9DPJ3cDeQ+Vj59Jjs0ZO9qPc
7JGfkif101tzm85pSpF52mlhHkgo/qY4FfmmktKSgdFiQ1/LA5nCr9UJ1THDq57H
aSwwHs+FoHenX83UsqeZtPpK4hwEVQIprw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:11:08 2025 by rpki-client