Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/795e0c3f-f507-3caa-b791-f5977b2fb632.roa
File:                     795e0c3f-f507-3caa-b791-f5977b2fb632.roa (raw, json)
Hash identifier:          WhXkH+//1HhNSmDA+GZtDuCSkxfa06UD7DdRxAMV/Qw=
Subject key identifier:   64:9A:E7:0B:B9:47:90:BB:5E:33:9C:EC:53:D0:52:31:2A:13:9F:2B
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285848388556E3B442F562B089EF40
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/795e0c3f-f507-3caa-b791-f5977b2fb632.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     31898
IP address blocks:        2602:fdaa:a0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:56:e3:b4:42:f5:62:b0:89:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=5f3ad521-e782-4759-97d2-d8bdbf98041f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:22:80:d9:cc:7b:64:85:cf:41:02:1f:07:f7:
                    ee:d1:f9:e9:40:16:ed:d8:b8:44:c0:75:65:20:8e:
                    e1:43:52:70:4c:f7:92:ba:77:56:06:6f:52:b4:af:
                    53:d2:64:c9:57:cf:ca:df:91:c3:56:79:82:6e:bc:
                    5f:bf:de:aa:ca:d2:60:3b:e5:e5:f5:22:e5:30:b3:
                    94:6d:11:5e:8b:8b:94:90:25:72:e6:5f:63:bf:28:
                    f9:d8:88:3b:65:f7:8c:24:52:c5:af:21:e4:96:4d:
                    46:8f:6d:d8:c6:59:0a:5a:94:cd:f7:52:42:83:a8:
                    40:6e:3f:06:da:25:49:23:9a:b3:58:f4:9c:e5:1e:
                    ec:bf:cb:56:5a:5a:32:4c:8c:04:89:fd:bf:e7:0f:
                    33:00:0f:a2:49:f2:ca:e5:de:bc:53:30:bb:0c:14:
                    01:0b:21:d4:1f:ab:d7:c1:ce:88:78:3f:ed:73:db:
                    65:83:3b:b5:57:81:de:18:f5:3a:db:0f:9c:68:b7:
                    0e:09:f9:b1:81:be:2e:e4:db:36:ae:76:37:11:b7:
                    ef:1a:fb:08:bc:87:c5:47:51:13:b6:92:50:b8:19:
                    11:76:ca:6a:3c:d3:ea:22:53:d2:5c:97:95:e4:d3:
                    9f:2f:3c:a6:67:c7:87:5b:7c:71:2c:17:e9:14:a0:
                    f3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9A:E7:0B:B9:47:90:BB:5E:33:9C:EC:53:D0:52:31:2A:13:9F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/795e0c3f-f507-3caa-b791-f5977b2fb632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:af:66:ea:77:41:e9:84:23:c5:07:07:89:0a:bf:55:e8:3a:
         af:71:57:e1:9f:01:94:da:d0:e4:d4:46:db:7c:d5:e9:6e:26:
         0f:e8:bf:de:6c:40:c0:0c:af:77:eb:50:e9:f3:05:ec:30:ed:
         53:97:68:d9:77:2c:3f:12:8b:3e:45:8f:52:74:2f:2a:c4:6e:
         64:9a:e4:ac:40:1c:82:27:10:b8:90:34:40:1e:48:2d:84:c1:
         9f:d3:e3:1e:8c:95:36:a3:91:33:ec:3e:4a:96:3e:4d:b7:01:
         c8:97:d1:58:96:a7:7f:e7:c9:34:52:06:81:f5:f9:b2:99:e8:
         c9:d2:e3:bf:88:b2:08:2e:f1:07:f3:7b:c4:60:86:d8:6b:c8:
         d3:c6:d8:25:8b:b0:75:f3:72:6f:aa:a5:26:93:4b:f7:8e:cb:
         22:35:bc:aa:84:fc:45:5c:3b:77:fe:d3:a2:35:2e:55:d2:b8:
         ed:2c:1d:c0:24:d1:80:27:57:df:2f:a9:4e:de:af:93:76:23:
         1f:87:92:4e:ba:46:af:6b:94:e4:65:3c:2f:65:f8:b4:4b:98:
         88:00:74:06:c1:f1:c7:aa:07:46:4b:fd:8a:fc:4c:97:c9:6c:
         53:18:36:94:2a:6e:da:c6:8e:1e:50:e4:b2:c2:26:09:94:1f:
         63:75:b2:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg4hVbjtEL1YrCJ70AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx
ZDQxMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NWYzYWQ1MjEtZTc4Mi00NzU5LTk3ZDItZDhiZGJmOTgwNDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCKA2cx7ZIXPQQIfB/fu0fnpQBbt2LhEwHVl
II7hQ1JwTPeSundWBm9StK9T0mTJV8/K35HDVnmCbrxfv96qytJgO+Xl9SLlMLOU
bRFei4uUkCVy5l9jvyj52Ig7ZfeMJFLFryHklk1Gj23YxlkKWpTN91JCg6hAbj8G
2iVJI5qzWPSc5R7sv8tWWloyTIwEif2/5w8zAA+iSfLK5d68UzC7DBQBCyHUH6vX
wc6IeD/tc9tlgzu1V4HeGPU62w+caLcOCfmxgb4u5Ns2rnY3EbfvGvsIvIfFR1ET
tpJQuBkRdspqPNPqIlPSXJeV5NOfLzymZ8eHW3xxLBfpFKDztwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGSa5wu5R5C7XjOc7FPQUjEqE58rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2
ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvNzk1ZTBjM2YtZjUwNy0z
Y2FhLWI3OTEtZjU5NzdiMmZiNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2
NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj
MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl
OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgCg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJOvZup3QemEI8UHB4kKv1XoOq9xV+GfAZTa0OTURtt81eluJg/o
v95sQMAMr3frUOnzBeww7VOXaNl3LD8Siz5Fj1J0LyrEbmSa5KxAHIInELiQNEAe
SC2EwZ/T4x6MlTajkTPsPkqWPk23AciX0ViWp3/nyTRSBoH1+bKZ6MnS47+Isggu
8Qfze8RghthryNPG2CWLsHXzcm+qpSaTS/eOyyI1vKqE/EVcO3f+06I1LlXSuO0s
HcAk0YAnV98vqU7er5N2Ix+Hkk66Rq9rlORlPC9l+LRLmIgAdAbB8ceqB0ZL/Yr8
TJfJbFMYNpQqbtrGjh5Q5LLCJgmUH2N1skw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:47:59 2025 by rpki-client