Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/244759fc-1226-3aff-bfda-56910d5709ee.roa
File:                     244759fc-1226-3aff-bfda-56910d5709ee.roa (raw, json)
Hash identifier:          slnX8fslqpEuK61LKUN41XU2QbfbN0K1FIbPtT3JlpE=
Subject key identifier:   1A:4B:9A:42:6F:A1:45:DD:E8:18:3B:44:12:8F:C6:D4:95:24:24:29
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584834556785DA2E64DB2C4B2980
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/244759fc-1226-3aff-bfda-56910d5709ee.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     399139
IP address blocks:        2602:fea7:d00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:67:85:da:2e:64:db:2c:4b:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=338c769a-c6b5-4e98-aa6e-f3279a184a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a7:9f:5b:e7:29:bc:53:2b:53:9b:7c:cb:7c:
                    70:e2:3e:dd:29:eb:de:20:87:8c:bc:c8:4d:99:07:
                    82:06:dc:f4:1d:56:77:ac:11:29:02:29:36:6d:c3:
                    18:f7:e8:93:43:87:a6:57:16:ce:59:41:a2:bb:4d:
                    32:5a:44:78:93:75:71:4c:a2:46:44:c1:a8:80:a7:
                    c5:5e:c8:50:7e:c6:f6:31:c8:15:35:73:23:c6:01:
                    71:0c:0d:71:a7:d5:90:86:01:8c:33:15:ef:4b:96:
                    8f:98:5d:b8:bc:8c:57:80:15:5c:57:18:e9:ec:f4:
                    9d:c6:29:3d:9e:e8:59:5c:49:2e:bc:e4:e9:45:f5:
                    ac:fc:fe:44:34:ff:a6:a4:5c:80:80:c5:12:d0:08:
                    1b:1e:40:17:32:ca:ed:9f:1e:6f:f7:c6:d7:c3:85:
                    d8:2c:9d:35:5a:92:d5:83:2e:cc:dd:5b:0b:2b:de:
                    fb:59:91:e1:0b:dc:e8:14:74:cc:4c:4c:4d:48:26:
                    85:b2:20:be:ff:7f:2e:c9:86:a4:45:62:c1:d5:cf:
                    56:cb:92:0c:b6:c6:7d:38:e0:c3:88:d6:c2:db:bb:
                    f8:5e:6f:7c:ef:53:f8:8f:6f:6d:fa:af:81:42:7f:
                    d8:95:13:f8:73:a5:d7:dc:73:49:e6:b9:62:80:2f:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4B:9A:42:6F:A1:45:DD:E8:18:3B:44:12:8F:C6:D4:95:24:24:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/244759fc-1226-3aff-bfda-56910d5709ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f3:d9:7a:10:7e:59:d7:e5:54:77:d1:15:bd:e4:f6:44:b2:
         79:b9:55:e4:87:ed:21:a4:80:3b:f9:03:88:91:3f:a6:30:d9:
         e6:52:ba:55:6c:43:b2:68:3d:3c:03:83:97:18:66:60:a8:70:
         3b:8a:27:55:40:e7:c9:8e:49:e6:b4:8e:95:8f:9d:2e:d1:40:
         64:8b:7a:72:b0:34:ea:c1:5b:00:81:22:50:3e:d7:89:c4:1f:
         b0:78:a2:48:ea:8d:69:f1:1a:84:27:8c:e0:62:3b:33:3c:21:
         fd:b7:da:32:f9:1f:3f:ec:26:36:16:6b:0a:c3:66:af:5f:fa:
         86:6c:47:70:f8:28:94:3f:bf:f8:59:77:6e:6b:61:31:ef:73:
         aa:1c:dc:c9:82:b3:bf:3c:99:3e:6b:80:9f:57:7f:00:41:e9:
         a1:e9:3a:bc:9d:5b:1f:3c:32:7e:ce:d4:87:3f:96:da:aa:c0:
         f8:3f:94:76:bb:bb:1e:be:cf:0b:27:83:51:84:a4:ed:b1:41:
         48:91:c3:b0:ec:e0:41:68:68:3a:ba:c5:31:dd:52:91:4d:33:
         48:e3:9c:36:ce:13:ef:8a:e5:5f:38:5f:2f:b6:01:c4:c3:12:
         32:ee:e1:b1:3b:06:14:a2:a1:a7:f9:da:de:76:5d:1e:c0:2c:
         ac:e3:3f:e8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEg0VWeF2i5k2yxLKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5YWM5ZjctZWY0Zi00ZjU2LWJlYzItMjFjOWEyYjI1
YzExMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
MzM4Yzc2OWEtYzZiNS00ZTk4LWFhNmUtZjMyNzlhMTg0YTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKefW+cpvFMrU5t8y3xw4j7dKeveIIeMvMhN
mQeCBtz0HVZ3rBEpAik2bcMY9+iTQ4emVxbOWUGiu00yWkR4k3VxTKJGRMGogKfF
XshQfsb2McgVNXMjxgFxDA1xp9WQhgGMMxXvS5aPmF24vIxXgBVcVxjp7PSdxik9
nuhZXEkuvOTpRfWs/P5ENP+mpFyAgMUS0AgbHkAXMsrtnx5v98bXw4XYLJ01WpLV
gy7M3VsLK977WZHhC9zoFHTMTExNSCaFsiC+/38uyYakRWLB1c9Wy5IMtsZ9OODD
iNbC27v4Xm9871P4j29t+q+BQn/YlRP4c6XX3HNJ5rligC8WdwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBpLmkJvoUXd6Bg7RBKPxtSVJCQpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlh
YzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5YTJiMjVjMTEvMjQ0NzU5ZmMtMTIyNi0z
YWZmLWJmZGEtNTY5MTBkNTcwOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5YWM5ZjctZWY0Zi00ZjU2LWJl
YzItMjFjOWEyYjI1YzExLzZkOWFjOWY3LWVmNGYtNGY1Ni1iZWMyLTIxYzlhMmIy
NWMxMS5jcmwwHwYDVR0jBBgwFoAUHHn5hkuePscm3W7MmE2ro4PenJgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlhYzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5
YTJiMjVjMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+pw0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOfPZehB+WdflVHfRFb3k9kSyeblV5IftIaSAO/kDiJE/pjDZ5lK6
VWxDsmg9PAODlxhmYKhwO4onVUDnyY5J5rSOlY+dLtFAZIt6crA06sFbAIEiUD7X
icQfsHiiSOqNafEahCeM4GI7Mzwh/bfaMvkfP+wmNhZrCsNmr1/6hmxHcPgolD+/
+Fl3bmthMe9zqhzcyYKzvzyZPmuAn1d/AEHpoek6vJ1bHzwyfs7Uhz+W2qrA+D+U
dru7Hr7PCyeDUYSk7bFBSJHDsOzgQWhoOrrFMd1SkU0zSOOcNs4T74rlXzhfL7YB
xMMSMu7hsTsGFKKhp/na3nZdHsAsrOM/6A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:15:01 2025 by rpki-client