Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa
File:                     b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa (raw, json)
Hash identifier:          TiUA+hZTNbOKjLvAnMAlVyrwL/Jz9NHZtDAXqoKdjLw=
Subject key identifier:   BA:FA:AE:55:BC:3B:1C:EC:8C:A4:C7:BF:6C:E9:C9:34:C9:31:73:E1
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285848222FD953DCAEF8845890C0C0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     39618
IP address blocks:        2602:fd92:a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:d9:53:dc:ae:f8:84:58:90:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=ee9e8a21-502d-4804-85be-0e1500afcb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:a3:83:a7:d9:a1:9e:4f:45:c4:8c:67:04:
                    cb:6a:25:df:12:94:86:10:f6:4b:81:9e:a3:10:bb:
                    ca:a1:c3:a6:8e:e1:fb:d2:23:6d:72:eb:99:4a:11:
                    8c:86:7d:fe:dc:ef:79:1f:63:d9:42:56:84:7a:ed:
                    9e:62:03:06:24:fa:e4:e6:5a:b7:c3:06:58:82:ca:
                    d1:92:ca:71:60:22:9f:bf:fb:af:de:e1:23:8d:0a:
                    98:af:21:66:0f:13:d5:d0:c7:91:64:43:54:01:99:
                    5e:b2:ab:9d:51:df:aa:7a:bf:89:ca:4a:e2:dc:92:
                    83:69:6b:2c:d0:d2:52:2c:c9:b8:59:9d:c3:7a:bd:
                    83:4d:e8:15:6c:f1:ab:bb:1e:20:0a:34:d8:8c:d3:
                    ed:a7:4b:e1:f0:87:b9:8e:d8:62:05:b8:cf:36:63:
                    32:99:3c:ab:3b:5f:13:20:e8:3c:61:d7:b0:01:25:
                    76:05:dc:5d:44:85:cc:5b:26:68:a7:fb:d0:81:0c:
                    af:a7:e0:df:43:04:55:91:ba:35:2e:d0:a7:7f:e2:
                    e3:80:ec:5f:e4:9e:e5:ca:5c:6f:bc:f3:bb:4e:04:
                    15:a9:8e:d9:55:b6:d1:93:d6:c3:d3:1c:a4:3c:24:
                    7e:d2:aa:e7:1c:cc:ca:bb:db:bd:f8:86:ef:49:c2:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FA:AE:55:BC:3B:1C:EC:8C:A4:C7:BF:6C:E9:C9:34:C9:31:73:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/b8fd8cac-f337-3458-a1f3-7f6a78f636f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:fe:c2:08:b0:8d:f9:e1:29:56:fb:a1:bd:00:11:11:66:
         b9:70:ba:0c:86:f2:6b:dc:c4:08:bd:19:b7:2e:bd:63:b5:97:
         bf:f9:16:4e:ca:81:97:9b:0d:f3:b2:95:1e:c2:7c:ce:db:74:
         a6:d3:52:0c:0d:da:45:bb:15:68:35:be:77:2a:0f:11:e0:c1:
         96:b0:dc:ee:62:ac:87:95:54:f4:1a:7b:ce:49:2e:6f:c1:14:
         1d:c0:42:2a:79:84:2d:6b:63:24:ca:2c:bf:03:ef:75:db:1e:
         e7:b8:b9:5b:68:b6:17:5b:9c:0b:c5:d5:d4:ba:75:24:27:fc:
         31:09:4c:10:fa:b8:eb:93:f2:56:8d:8b:6a:dc:46:09:d0:79:
         e2:71:73:c4:b3:36:94:b0:08:97:94:fc:c0:24:92:3a:19:b2:
         2d:8d:dd:88:60:28:1c:aa:a7:63:7d:66:1e:76:af:59:fc:45:
         85:02:0f:0e:05:41:ff:82:6b:ba:fe:46:5d:b5:b3:e5:d3:a2:
         88:fe:e7:6b:37:f5:5e:62:66:00:0a:4f:f0:48:4f:f9:d3:50:
         7e:c9:57:0c:d0:46:01:6b:3f:66:aa:96:05:e6:e3:35:b0:6d:
         00:88:e2:55:78:21:87:ac:45:fa:28:ba:2a:d2:c2:2a:79:42:
         53:61:31:39
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgiL9lT3K74hFiQwMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
ZWU5ZThhMjEtNTAyZC00ODA0LTg1YmUtMGUxNTAwYWZjYjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRujg6fZoZ5PRcSMZwTLaiXfEpSGEPZLgZ6j
ELvKocOmjuH70iNtcuuZShGMhn3+3O95H2PZQlaEeu2eYgMGJPrk5lq3wwZYgsrR
kspxYCKfv/uv3uEjjQqYryFmDxPV0MeRZENUAZlesqudUd+qer+Jykri3JKDaWss
0NJSLMm4WZ3Der2DTegVbPGrux4gCjTYjNPtp0vh8Ie5jthiBbjPNmMymTyrO18T
IOg8YdewASV2BdxdRIXMWyZop/vQgQyvp+DfQwRVkbo1LtCnf+LjgOxf5J7lylxv
vPO7TgQVqY7ZVbbRk9bD0xykPCR+0qrnHMzKu9u9+IbvScLl3wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLr6rlW8OxzsjKTHv2zpyTTJMXPhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvYjhmZDhjYWMtZjMzNy0z
NDU4LWExZjMtN2Y2YTc4ZjYzNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9kgow
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVPX+wgiwjfnhKVb7ob0AERFmuXC6DIbya9zECL0Zty69Y7WXv/kW
TsqBl5sN87KVHsJ8ztt0ptNSDA3aRbsVaDW+dyoPEeDBlrDc7mKsh5VU9Bp7zkku
b8EUHcBCKnmELWtjJMosvwPvddse57i5W2i2F1ucC8XV1Lp1JCf8MQlMEPq465Py
Vo2LatxGCdB54nFzxLM2lLAIl5T8wCSSOhmyLY3diGAoHKqnY31mHnavWfxFhQIP
DgVB/4Jruv5GXbWz5dOiiP7nazf1XmJmAApP8EhP+dNQfslXDNBGAWs/ZqqWBebj
NbBtAIjiVXghh6xF+ii6KtLCKnlCU2ExOQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:56 2025 by rpki-client