Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5700b398-f8d0-35b4-aa99-6f508bd680aa.roa
File:                     5700b398-f8d0-35b4-aa99-6f508bd680aa.roa (raw, json)
Hash identifier:          3zMsw8/j1w5xXo04P2TRD60wfm8kkHdtzvwDRe4agfE=
Subject key identifier:   B7:67:52:A5:22:63:AA:EB:D2:FE:28:AD:CA:DD:46:C9:44:36:52:11
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF97213712A57451323E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5700b398-f8d0-35b4-aa99-6f508bd680aa.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:80ea::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:97:21:37:12:a5:74:51:32:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=11ce3a43-3ca9-4072-a9c4-04dd26ac910c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:7a:c2:8e:65:ca:e3:b8:63:1d:f0:ab:2c:
                    bc:fc:cd:be:f2:c6:06:9d:10:23:10:d5:88:dd:1c:
                    be:7b:b5:eb:a6:10:d1:8f:04:bc:9e:b4:07:bc:5d:
                    c2:f8:49:f3:56:d4:aa:23:e2:68:72:ea:31:cd:36:
                    c0:be:1b:a9:90:d8:a0:6b:04:ab:6f:48:a3:a7:e3:
                    43:05:28:47:7e:d6:ff:7e:8c:8f:62:a3:8c:76:d1:
                    2e:6b:95:ac:05:6c:93:f3:66:b3:47:23:b0:b9:7d:
                    17:d0:1b:f6:cf:5c:2b:97:eb:87:47:ee:53:e6:37:
                    06:a4:82:d4:52:d1:58:0d:c8:8e:a7:01:18:7c:ad:
                    53:7f:fa:8d:db:6a:be:a9:f6:60:ab:35:72:12:b8:
                    ec:43:f6:bf:74:a4:e1:1b:b1:40:ae:ee:73:8e:fb:
                    39:1c:56:a2:11:d4:4f:47:5c:59:07:6d:46:83:61:
                    ca:f4:65:f8:48:fa:f2:b6:54:05:97:3e:90:dc:a8:
                    58:6e:55:ff:05:b1:95:2b:e4:49:23:02:49:a1:16:
                    31:03:8e:74:14:bf:ed:80:e4:34:b5:84:5d:be:04:
                    78:da:4d:58:0e:c8:88:ca:04:f9:23:e9:1b:32:13:
                    15:c0:74:dd:17:19:f9:f6:57:dd:72:05:60:5b:b4:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:67:52:A5:22:63:AA:EB:D2:FE:28:AD:CA:DD:46:C9:44:36:52:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5700b398-f8d0-35b4-aa99-6f508bd680aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80ea::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:df:b0:7b:6e:25:5c:97:c0:fe:63:92:2a:eb:2e:36:49:
         47:dc:e6:3c:50:ef:cd:a2:8c:b3:a5:db:d8:45:4d:82:49:75:
         9d:02:d3:29:f3:d6:6b:f5:5f:75:86:03:39:23:67:13:df:18:
         a7:de:bf:f8:cf:ce:d6:38:f9:d3:be:83:a0:07:21:c7:39:75:
         e6:7c:d4:b6:ed:b1:a3:0d:ca:cd:42:9a:0e:7e:ce:b7:4d:41:
         6a:a6:89:09:a5:c4:b9:e0:88:b9:46:89:6a:3b:79:99:72:1b:
         d0:33:2a:5d:93:d6:cd:3b:92:b0:73:a8:02:cf:ea:9e:e1:7c:
         aa:af:f9:d5:e9:a6:a3:ea:d3:ce:90:71:82:2f:dd:de:89:9b:
         bc:1e:0d:9c:c4:35:b8:62:e3:46:f0:15:49:b5:a9:fd:77:4a:
         50:f4:53:a1:08:bf:c1:83:4c:89:f1:ef:2a:ca:84:b8:72:0a:
         ea:04:ab:00:16:76:10:9a:f9:a5:59:2e:94:4b:19:07:59:0b:
         e4:a9:95:b1:d2:7b:25:93:06:e7:a8:3e:36:cc:9c:10:0a:87:
         a0:dc:fe:be:0d:89:ed:36:5f:87:fc:bd:6c:33:31:b4:d9:a4:
         61:0f:36:d3:9b:ea:bd:59:f3:dc:00:b7:fd:bc:ff:58:95:61:
         83:e4:43:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgAr5chNxKldFEyPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
MTFjZTNhNDMtM2NhOS00MDcyLWE5YzQtMDRkZDI2YWM5MTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYN6wo5lyuO4Yx3wqyy8/M2+8sYGnRAjENWI
3Ry+e7XrphDRjwS8nrQHvF3C+EnzVtSqI+JocuoxzTbAvhupkNigawSrb0ijp+ND
BShHftb/foyPYqOMdtEua5WsBWyT82azRyOwuX0X0Bv2z1wrl+uHR+5T5jcGpILU
UtFYDciOpwEYfK1Tf/qN22q+qfZgqzVyErjsQ/a/dKThG7FAru5zjvs5HFaiEdRP
R1xZB21Gg2HK9GX4SPrytlQFlz6Q3KhYblX/BbGVK+RJIwJJoRYxA450FL/tgOQ0
tYRdvgR42k1YDsiIygT5I+kbMhMVwHTdFxn59lfdcgVgW7SYAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLdnUqUiY6rr0v4orcrdRslENlIRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTcwMGIzOTgtZjhkMC0z
NWI0LWFhOTktNmY1MDhiZDY4MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYDq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADnl37B7biVcl8D+Y5Iq6y42SUfc5jxQ782ijLOl29hFTYJJdZ0C
0ynz1mv1X3WGAzkjZxPfGKfev/jPztY4+dO+g6AHIcc5deZ81LbtsaMNys1Cmg5+
zrdNQWqmiQmlxLngiLlGiWo7eZlyG9AzKl2T1s07krBzqALP6p7hfKqv+dXppqPq
086QcYIv3d6Jm7weDZzENbhi40bwFUm1qf13SlD0U6EIv8GDTInx7yrKhLhyCuoE
qwAWdhCa+aVZLpRLGQdZC+SplbHSeyWTBueoPjbMnBAKh6Dc/r4Nie02X4f8vWwz
MbTZpGEPNtOb6r1Z89wAt/28/1iVYYPkQ0Q=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:10 2025 by rpki-client