Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa
File:                     748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa (raw, json)
Hash identifier:          7PK8M3eOpvFOm2nreXUUpRgi2vvaesRZnEtmacLLCYE=
Subject key identifier:   1B:A8:CE:E7:4B:89:E3:DF:2E:A1:55:CC:21:BC:A4:7F:CB:87:D5:1F
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F43285848696063329AE0DD19217357B0
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     11260
IP address blocks:        2607:a000::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:63:32:9a:e0:dd:19:21:73:57:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=e80d4f2d-2a9c-4587-9d51-d82555d7f0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:a8:bd:53:f1:02:4f:d3:e8:6d:72:06:c1:
                    88:3b:2e:73:d5:34:d1:cc:e5:96:47:cf:59:fc:f9:
                    0d:5d:8e:4a:2e:d2:ed:5c:63:50:92:9a:70:11:7f:
                    7f:58:8c:2d:32:61:82:e3:ae:62:9e:9b:26:7c:ac:
                    91:bf:74:e3:c8:22:80:93:c3:f3:fa:78:b0:2b:64:
                    b0:36:46:a7:19:f9:1c:6a:fe:b5:22:23:f6:9d:aa:
                    0f:43:87:37:0b:da:cb:69:32:90:07:d8:c2:cf:62:
                    20:b2:e0:5f:32:87:a3:28:ea:a5:4d:27:ed:f3:a5:
                    2d:c2:9f:03:b2:5b:e7:cc:31:1d:c1:4e:3f:0c:59:
                    8e:4c:4b:e8:9e:23:06:9e:59:6a:d9:7f:cc:50:68:
                    02:72:1c:2b:65:77:11:7c:1f:71:51:8d:a8:69:5a:
                    a6:14:5d:06:31:59:8f:67:66:62:e5:f3:bf:63:31:
                    fe:69:08:41:69:8d:12:c3:3c:85:db:dc:ed:b3:8d:
                    47:ec:1f:fa:21:9b:87:0c:d4:f3:05:cf:9d:1e:a0:
                    b9:db:0d:66:2f:25:ba:c5:19:a7:40:1d:40:e3:2a:
                    d4:20:27:62:de:b5:fd:7c:b7:d3:a7:35:f2:71:82:
                    41:86:8f:56:d4:dc:5a:32:e2:e0:6f:cc:15:91:ad:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A8:CE:E7:4B:89:E3:DF:2E:A1:55:CC:21:BC:A4:7F:CB:87:D5:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b8:87:0e:c4:7b:4b:c0:5a:4c:cb:e1:9c:ed:79:fd:e0:1c:
         b9:5e:df:10:6b:4d:86:bb:06:58:c4:6c:4c:c1:1b:55:f1:bb:
         5a:66:e2:35:fb:a0:c5:c4:77:70:50:dd:bc:d4:5c:a9:fc:f6:
         7f:1c:86:55:77:38:91:9e:41:e9:c4:27:c9:c7:56:63:a4:21:
         45:22:0b:b1:f4:b1:7d:7a:e4:e8:e6:56:f2:66:a6:68:5e:c6:
         4c:f4:ea:c0:39:b4:25:05:f5:90:98:0b:52:52:cf:15:96:60:
         f4:e1:d6:d9:fc:f4:42:f1:81:65:7e:76:71:59:79:37:fb:3e:
         b4:38:ec:d7:e7:4c:78:1f:d6:16:56:7c:11:63:9c:cc:cc:74:
         44:7e:a0:41:60:0b:94:41:b3:da:55:64:b9:9f:f5:a5:a7:6a:
         44:72:e6:d7:41:e3:6f:36:3f:74:27:b9:9e:ad:b3:fd:a2:6a:
         01:1c:09:cd:12:b8:73:c1:53:f4:d5:e4:1b:8c:e2:fc:28:c8:
         09:c8:5a:18:da:59:a9:52:83:74:c9:8f:b2:7a:39:1a:f8:b5:
         4e:d8:0a:9f:22:e8:6e:52:fc:d2:6a:7e:6f:a7:85:e5:cf:48:
         ea:4e:13:c4:66:bc:d4:61:16:22:e1:f4:6a:6c:0f:80:bc:57:
         49:06:5c:71
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhpYGMymuDdGSFzV7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmZiMTg5NjgtN2FhNS00MWU1LTk2YjYtYzQ1YzI1YTU2
NmU4MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ZTgwZDRmMmQtMmE5Yy00NTg3LTlkNTEtZDgyNTU1ZDdmMGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVeovVPxAk/T6G1yBsGIOy5z1TTRzOWWR89Z
/PkNXY5KLtLtXGNQkppwEX9/WIwtMmGC465inpsmfKyRv3TjyCKAk8Pz+niwK2Sw
NkanGfkcav61IiP2naoPQ4c3C9rLaTKQB9jCz2IgsuBfMoejKOqlTSft86Utwp8D
slvnzDEdwU4/DFmOTEvoniMGnllq2X/MUGgCchwrZXcRfB9xUY2oaVqmFF0GMVmP
Z2Zi5fO/YzH+aQhBaY0SwzyF29zts41H7B/6IZuHDNTzBc+dHqC52w1mLyW6xRmn
QB1A4yrUICdi3rX9fLfTpzXycYJBho9W1NxaMuLgb8wVka20UwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBuozudLiePfLqFVzCG8pH/Lh9UfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmIx
ODk2OC03YWE1LTQxZTUtOTZiNi1jNDVjMjVhNTY2ZTgvNzQ4ZDEwOWItNDlmMS0z
OGVmLTljYTUtY2M5ZDI0YzhmZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmZiMTg5NjgtN2FhNS00MWU1LTk2
YjYtYzQ1YzI1YTU2NmU4LzZmYjE4OTY4LTdhYTUtNDFlNS05NmI2LWM0NWMyNWE1
NjZlOC5jcmwwHwYDVR0jBBgwFoAUxp+s6nB94FGrxRuCOU0OczqioQMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmIxODk2OC03YWE1LTQxZTUtOTZiNi1jNDVj
MjVhNTY2ZTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgegADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAmuIcOxHtLwFpMy+Gc7Xn94By5Xt8Qa02GuwZYxGxMwRtV8btaZuI1
+6DFxHdwUN281Fyp/PZ/HIZVdziRnkHpxCfJx1ZjpCFFIgux9LF9euTo5lbyZqZo
XsZM9OrAObQlBfWQmAtSUs8VlmD04dbZ/PRC8YFlfnZxWXk3+z60OOzX50x4H9YW
VnwRY5zMzHREfqBBYAuUQbPaVWS5n/Wlp2pEcubXQeNvNj90J7merbP9omoBHAnN
ErhzwVP01eQbjOL8KMgJyFoY2lmpUoN0yY+yejka+LVO2AqfIuhuUvzSan5vp4Xl
z0jqThPEZrzUYRYi4fRqbA+AvFdJBlxx
-----END CERTIFICATE-----