Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8abbc458-ce27-3e72-9fd4-abe96d99c5d7.roa
File:                     8abbc458-ce27-3e72-9fd4-abe96d99c5d7.roa (raw, json)
Hash identifier:          efsO7/Sllr0UzTC0TiCqdgBSI2MbQxyPCG12mu0nYPk=
Subject key identifier:   E0:DC:FB:C6:83:4F:51:B4:16:0B:A9:D6:5A:96:28:12:78:6B:8B:7A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFC0886054A39922806800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8abbc458-ce27-3e72-9fd4-abe96d99c5d7.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8016::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c0:88:60:54:a3:99:22:80:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=d0d7993b-c5bc-4f1d-ace9-df116a11aac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:b4:bc:5d:73:a2:4c:7f:f3:1b:c4:f0:6a:
                    10:a8:c1:76:13:7c:41:b2:73:22:fd:47:06:92:2e:
                    4f:52:bb:b1:3a:bf:ec:83:f1:02:a8:82:1d:2e:be:
                    74:1a:70:bb:8f:86:5b:fc:d3:44:6f:9c:72:b4:40:
                    21:3a:dd:a9:70:2b:1f:2f:b7:6a:1b:ee:22:f2:41:
                    be:16:63:c7:7a:ff:98:99:8e:b6:88:9c:c5:1b:26:
                    a9:66:29:f6:7f:7e:50:ea:18:7e:a5:30:41:64:43:
                    e7:9f:09:e1:5f:18:28:46:29:95:cf:3e:f6:bb:22:
                    5c:21:d9:13:c9:5a:92:03:b7:13:17:db:77:64:79:
                    7b:15:ad:e2:66:ae:40:e6:02:3b:8f:f7:2a:b6:a1:
                    f6:fc:5f:4f:ad:a9:0c:49:a1:60:05:9e:da:24:3c:
                    26:4a:fa:21:d6:98:c4:10:44:17:77:2f:b2:dd:3b:
                    0e:c2:ba:31:a4:53:79:af:6a:e8:3e:e2:da:3c:5e:
                    4c:87:fa:d9:db:60:af:f3:d4:fe:31:fb:68:6d:2f:
                    66:39:f6:29:0c:99:56:a3:d8:a4:3c:7a:8f:85:25:
                    cc:0a:61:73:5a:85:43:98:21:a4:de:80:e8:1e:9e:
                    09:0c:d7:90:76:36:85:fc:2b:0c:e1:27:14:08:8f:
                    e8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DC:FB:C6:83:4F:51:B4:16:0B:A9:D6:5A:96:28:12:78:6B:8B:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8abbc458-ce27-3e72-9fd4-abe96d99c5d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8016::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:4f:65:1b:93:59:e2:8a:fa:1a:d3:09:14:e3:83:46:2d:fb:
         de:b2:61:73:f1:ad:0f:0a:a8:9e:2a:0c:26:2d:73:d0:24:83:
         b9:3c:31:7a:ce:78:91:8a:9b:a6:dd:1d:ef:dd:a6:04:90:79:
         48:1c:ce:26:0f:f7:2a:34:f4:fe:77:f0:d1:ba:4a:06:18:46:
         c9:b7:b8:d0:42:70:49:65:72:cd:ce:cb:50:f1:23:40:e2:2a:
         46:82:fb:73:f7:f5:66:4c:58:92:34:e0:9b:8c:f7:6a:a4:db:
         dc:16:63:46:cc:c5:ce:d9:36:bf:6b:7e:e1:8e:c7:aa:91:4f:
         00:73:88:08:76:00:f3:32:41:4e:2a:89:71:01:5a:6d:b7:39:
         28:4d:a9:07:27:5f:6e:2f:eb:66:c7:dc:2e:10:46:33:a2:4b:
         c0:6e:c9:1b:7f:c7:ec:17:5b:9d:07:e8:93:69:26:0c:e6:11:
         1e:14:4a:bb:e1:67:cb:cf:2a:66:45:98:dc:7e:e4:c6:bc:d1:
         ad:c8:57:35:3b:42:ad:3e:a1:db:df:8f:52:d2:f6:03:4a:e2:
         1f:6a:44:6f:d9:fc:cf:ff:fd:20:6b:4d:58:6a:3d:98:17:ab:
         58:80:ea:90:47:c7:63:03:15:c8:87:a7:f7:bd:c4:5d:c6:ed:
         b0:21:e6:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgAr8CIYFSjmSKAaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
ZDBkNzk5M2ItYzViYy00ZjFkLWFjZTktZGYxMTZhMTFhYWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC+0vF1zokx/8xvE8GoQqMF2E3xBsnMi/UcG
ki5PUruxOr/sg/ECqIIdLr50GnC7j4Zb/NNEb5xytEAhOt2pcCsfL7dqG+4i8kG+
FmPHev+YmY62iJzFGyapZin2f35Q6hh+pTBBZEPnnwnhXxgoRimVzz72uyJcIdkT
yVqSA7cTF9t3ZHl7Fa3iZq5A5gI7j/cqtqH2/F9PrakMSaFgBZ7aJDwmSvoh1pjE
EEQXdy+y3TsOwroxpFN5r2roPuLaPF5Mh/rZ22Cv89T+MftobS9mOfYpDJlWo9ik
PHqPhSXMCmFzWoVDmCGk3oDoHp4JDNeQdjaF/CsM4ScUCI/oEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFODc+8aDT1G0Fgup1lqWKBJ4a4t6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGFiYmM0NTgtY2UyNy0z
ZTcyLTlmZDQtYWJlOTZkOTljNWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAENPZRuTWeKK+hrTCRTjg0Yt+96yYXPxrQ8KqJ4qDCYtc9Akg7k8
MXrOeJGKm6bdHe/dpgSQeUgcziYP9yo09P538NG6SgYYRsm3uNBCcEllcs3Oy1Dx
I0DiKkaC+3P39WZMWJI04JuM92qk29wWY0bMxc7ZNr9rfuGOx6qRTwBziAh2APMy
QU4qiXEBWm23OShNqQcnX24v62bH3C4QRjOiS8BuyRt/x+wXW50H6JNpJgzmER4U
SrvhZ8vPKmZFmNx+5Ma80a3IVzU7Qq0+odvfj1LS9gNK4h9qRG/Z/M///SBrTVhq
PZgXq1iA6pBHx2MDFciHp/e9xF3G7bAh5io=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:50 2025 by rpki-client