Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa
File:                     22b6363d-3f5d-3d91-9652-31215bc9d783.roa (raw, json)
Hash identifier:          ToE/hX9rrzrt9vYlWX8xSemoIymgxBbQsfdaIp+aq18=
Subject key identifier:   7D:E2:7D:EB:E9:39:D1:50:46:63:9B:E3:C4:E5:77:D4:85:0C:73:AA
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584845158950F6C83E9FB4364DA0
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     397270
IP address blocks:        2602:fea7:100::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:89:50:f6:c8:3e:9f:b4:36:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=3c27ed5e-4a50-45fe-bf79-1b0b1c06b4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:30:cf:79:bb:28:1f:8f:c3:06:f9:2f:92:
                    50:a0:8b:2b:fd:8e:e7:8f:a0:4d:8d:78:6d:7a:fd:
                    2d:29:75:89:1d:ae:8c:28:73:7c:39:c1:fd:d8:ad:
                    b0:b4:84:ad:da:6e:5a:d7:9b:f8:67:c7:cc:0c:a4:
                    76:52:f5:2b:03:20:56:41:c3:c8:8e:46:fc:19:1d:
                    6c:6b:c9:41:38:97:95:d6:5c:07:24:11:0f:e6:a6:
                    2f:40:12:3d:43:bc:37:be:a5:63:34:03:35:68:36:
                    d3:48:76:17:47:ad:42:30:3d:df:2b:9c:5c:b9:4e:
                    5c:9b:80:c8:9b:be:3e:ec:85:ba:ed:b6:6a:52:1a:
                    f6:f9:9b:46:51:3e:58:b3:da:5f:3d:99:1c:cb:3d:
                    76:03:e0:0e:66:15:28:6d:38:aa:24:58:a1:5a:bf:
                    ee:d6:ee:35:0e:53:eb:52:90:e1:78:90:68:9b:91:
                    21:57:d7:12:32:62:76:fc:77:25:f4:09:ff:40:fb:
                    a3:a5:cc:61:3e:78:16:ea:0e:cd:0e:8f:15:3e:50:
                    0d:e5:7c:4d:c9:ed:0c:01:fc:88:c4:c8:c5:66:43:
                    ad:91:53:c1:98:23:36:9c:b4:51:9d:38:22:99:09:
                    47:ca:52:99:79:bb:5a:f7:21:ce:24:4f:14:40:bb:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E2:7D:EB:E9:39:D1:50:46:63:9B:E3:C4:E5:77:D4:85:0C:73:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:05:4e:80:2a:2b:15:47:19:d8:43:a7:79:47:eb:d9:48:26:
         0c:c6:5c:3a:6f:08:d0:6a:83:73:94:8d:30:38:95:b6:9d:34:
         c4:1c:72:5b:55:88:0c:0e:dc:a3:a3:c8:3d:76:1a:48:63:ed:
         27:eb:be:d1:6b:8a:90:4e:a1:48:79:e1:f3:55:84:af:28:fb:
         b0:b8:f2:a8:2d:5d:48:5a:b9:be:2e:5c:5a:f2:cc:e4:d6:58:
         f7:83:02:83:3b:26:9b:62:21:fd:02:69:4f:50:61:05:be:76:
         2f:23:4d:fe:42:16:a3:2b:72:4a:60:9f:4d:f7:a7:27:e3:1b:
         f5:87:04:61:aa:bd:e9:f7:c8:f2:54:47:2e:1c:e3:58:59:70:
         54:e9:10:93:e7:e2:e0:c0:75:dc:12:a4:8d:2d:52:5f:b6:f1:
         d2:7f:3f:6b:d9:b6:0f:56:28:db:de:ee:4b:4e:58:e2:c2:0a:
         06:97:09:dc:95:db:19:fa:e8:0a:46:23:9a:66:b8:c8:83:b5:
         c7:38:cd:f9:64:0c:8b:d7:0a:7a:a5:21:42:39:da:c6:d9:b7:
         b2:5c:b8:2c:d7:4a:3a:48:f0:47:1e:3d:a7:a9:fe:0d:80:f9:
         ab:d3:46:49:06:13:5b:f6:16:b9:8a:06:e7:22:54:42:64:58:
         49:a6:8b:c2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhFFYlQ9sg+n7Q2TaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5YWM5ZjctZWY0Zi00ZjU2LWJlYzItMjFjOWEyYjI1
YzExMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
M2MyN2VkNWUtNGE1MC00NWZlLWJmNzktMWIwYjFjMDZiNGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Awz3m7KB+Pwwb5L5JQoIsr/Y7nj6BNjXht
ev0tKXWJHa6MKHN8OcH92K2wtISt2m5a15v4Z8fMDKR2UvUrAyBWQcPIjkb8GR1s
a8lBOJeV1lwHJBEP5qYvQBI9Q7w3vqVjNAM1aDbTSHYXR61CMD3fK5xcuU5cm4DI
m74+7IW67bZqUhr2+ZtGUT5Ys9pfPZkcyz12A+AOZhUobTiqJFihWr/u1u41DlPr
UpDheJBom5EhV9cSMmJ2/Hcl9An/QPujpcxhPngW6g7NDo8VPlAN5XxNye0MAfyI
xMjFZkOtkVPBmCM2nLRRnTgimQlHylKZebta9yHOJE8UQLuz2QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH3ifevpOdFQRmOb48Tld9SFDHOqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlh
YzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5YTJiMjVjMTEvMjJiNjM2M2QtM2Y1ZC0z
ZDkxLTk2NTItMzEyMTViYzlkNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5YWM5ZjctZWY0Zi00ZjU2LWJl
YzItMjFjOWEyYjI1YzExLzZkOWFjOWY3LWVmNGYtNGY1Ni1iZWMyLTIxYzlhMmIy
NWMxMS5jcmwwHwYDVR0jBBgwFoAUHHn5hkuePscm3W7MmE2ro4PenJgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlhYzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5
YTJiMjVjMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+pwEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcwVOgCorFUcZ2EOneUfr2UgmDMZcOm8I0GqDc5SNMDiVtp00xBxy
W1WIDA7co6PIPXYaSGPtJ+u+0WuKkE6hSHnh81WEryj7sLjyqC1dSFq5vi5cWvLM
5NZY94MCgzsmm2Ih/QJpT1BhBb52LyNN/kIWoytySmCfTfenJ+Mb9YcEYaq96ffI
8lRHLhzjWFlwVOkQk+fi4MB13BKkjS1SX7bx0n8/a9m2D1Yo297uS05Y4sIKBpcJ
3JXbGfroCkYjmma4yIO1xzjN+WQMi9cKeqUhQjnaxtm3sly4LNdKOkjwRx49p6n+
DYD5q9NGSQYTW/YWuYoG5yJUQmRYSaaLwg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:43:58 2025 by rpki-client