Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa
File:                     1255431b-ba35-3116-8414-34269d9fe49d.roa (raw, json)
Hash identifier:          ubWICPWjh9gUZit3OQyiYUjj+0bEPGcuv7UJIbWLMDc=
Subject key identifier:   FE:47:EB:E4:4F:76:CB:A9:9A:94:8A:23:36:DE:3E:93:F1:53:F6:3E
Certificate issuer:       /CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07
Certificate serial:       010D0C9F432858487325A88A0703C7C9FFC49280
Authority key identifier: E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        2602:819:f000::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:a8:8a:07:03:c7:c9:ff:c4:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=81186156-2b76-4247-9786-948ab6e1256d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:96:8c:0a:f7:0b:fc:b7:c1:21:f4:f8:56:fd:
                    16:02:4a:e0:33:96:54:a9:ec:2d:bc:88:8d:b9:1e:
                    7b:f5:24:23:a6:0f:96:43:1d:77:72:cf:cd:94:a2:
                    47:fc:33:a5:a0:d6:7c:ee:35:07:3f:97:2d:73:6b:
                    7f:ae:e4:eb:27:70:86:0b:44:60:12:3d:af:62:93:
                    aa:bf:45:86:26:e7:9b:02:9a:19:18:62:19:2b:17:
                    c0:ce:8c:6a:aa:74:01:0f:47:a8:b7:57:50:e5:aa:
                    a2:18:1b:ad:bd:bc:55:df:8d:09:65:4c:51:c0:1e:
                    db:5b:6c:12:51:0b:6e:a5:de:ad:31:17:3b:86:54:
                    31:4c:2b:d7:06:ad:60:c2:3c:cd:0c:91:bb:84:ec:
                    f4:18:ae:3f:5e:2c:e0:c8:74:c1:99:e3:c9:0d:32:
                    52:8c:9e:99:bb:cf:31:5d:dd:c1:47:2c:bc:79:ec:
                    13:41:da:52:0a:bd:15:42:2a:29:bf:b8:43:8a:13:
                    93:fe:43:70:2a:ce:ac:e9:f4:ea:33:69:84:8a:89:
                    29:33:7c:91:05:83:39:6e:f0:3e:f4:ec:93:2e:ee:
                    27:a0:ae:0f:83:41:86:3e:39:0a:72:4a:b5:41:c1:
                    3f:eb:6c:3e:81:ac:1c:a5:c0:5a:09:6d:7f:20:0e:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:47:EB:E4:4F:76:CB:A9:9A:94:8A:23:36:DE:3E:93:F1:53:F6:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.crl

            X509v3 Authority Key Identifier:
                keyid:E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:f000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:dc:df:8e:c3:45:a1:19:17:4c:12:0f:b5:02:a2:12:73:db:
         80:ff:cf:54:84:b4:81:c6:03:88:3f:b7:a8:5b:39:42:3d:68:
         98:f4:34:da:f6:b5:31:99:7b:bb:40:df:5e:a7:e6:22:f6:b0:
         6f:55:49:bd:b5:5b:0c:d3:00:97:1e:78:45:48:2b:7d:d4:a6:
         28:fc:24:ba:d8:56:63:c0:14:93:7c:63:98:49:95:28:16:a4:
         e6:ad:7d:19:7d:21:df:98:bd:1f:dd:7a:b1:9d:c6:61:ac:b4:
         d7:93:e1:d4:60:d3:6f:65:3f:87:ff:a8:9a:23:2c:2f:e0:e9:
         72:7c:b2:7a:f2:a8:62:62:c0:10:0f:45:5d:d5:fd:24:e7:2c:
         6f:29:11:e1:b2:85:95:61:a5:b3:99:f7:fa:e8:84:90:8d:85:
         b2:39:a5:43:b4:5e:13:1f:43:19:98:5e:27:87:36:ad:33:6b:
         47:0f:39:85:7f:1a:c7:00:ca:d6:9f:50:17:48:4f:cf:ec:ea:
         24:05:8d:01:3c:37:02:04:78:87:7b:1a:29:0f:15:f2:63:d5:
         48:e4:fa:a4:56:35:96:c2:83:af:53:ea:12:a2:62:63:b1:80:
         b2:34:d9:d8:1e:fe:35:85:9a:e6:1d:f7:00:46:b9:1c:ce:c1:
         9f:a6:9e:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhzJaiKBwPHyf/EkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmVmMzdkOWUtNGYwYS00MTdjLWJiOGQtYTAzM2UxYjcy
ZTA3MB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
ODExODYxNTYtMmI3Ni00MjQ3LTk3ODYtOTQ4YWI2ZTEyNTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJaMCvcL/LfBIfT4Vv0WAkrgM5ZUqewtvIiN
uR579SQjpg+WQx13cs/NlKJH/DOloNZ87jUHP5ctc2t/ruTrJ3CGC0RgEj2vYpOq
v0WGJuebApoZGGIZKxfAzoxqqnQBD0eot1dQ5aqiGButvbxV340JZUxRwB7bW2wS
UQtupd6tMRc7hlQxTCvXBq1gwjzNDJG7hOz0GK4/XizgyHTBmePJDTJSjJ6Zu88x
Xd3BRyy8eewTQdpSCr0VQiopv7hDihOT/kNwKs6s6fTqM2mEiokpM3yRBYM5bvA+
9OyTLu4noK4Pg0GGPjkKckq1QcE/62w+gawcpcBaCW1/IA7beQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP5H6+RPdsupmpSKIzbePpPxU/Y+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mZWYz
N2Q5ZS00ZjBhLTQxN2MtYmI4ZC1hMDMzZTFiNzJlMDcvMTI1NTQzMWItYmEzNS0z
MTE2LTg0MTQtMzQyNjlkOWZlNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmVmMzdkOWUtNGYwYS00MTdjLWJi
OGQtYTAzM2UxYjcyZTA3L2ZlZjM3ZDllLTRmMGEtNDE3Yy1iYjhkLWEwMzNlMWI3
MmUwNy5jcmwwHwYDVR0jBBgwFoAU59j31rxzq7Znl02eZKNC0wBbFXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mZWYzN2Q5ZS00ZjBhLTQxN2MtYmI4ZC1hMDMz
ZTFiNzJlMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIIGfAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIvc347DRaEZF0wSD7UCohJz24D/z1SEtIHGA4g/t6hbOUI9aJj0
NNr2tTGZe7tA316n5iL2sG9VSb21WwzTAJceeEVIK33Upij8JLrYVmPAFJN8Y5hJ
lSgWpOatfRl9Id+YvR/derGdxmGstNeT4dRg029lP4f/qJojLC/g6XJ8snryqGJi
wBAPRV3V/STnLG8pEeGyhZVhpbOZ9/rohJCNhbI5pUO0XhMfQxmYXieHNq0za0cP
OYV/GscAytafUBdIT8/s6iQFjQE8NwIEeId7GikPFfJj1Ujk+qRWNZbCg69T6hKi
YmOxgLI02dge/jWFmuYd9wBGuRzOwZ+mnhU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:51 2025 by rpki-client