Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa
File:                     dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa (raw, json)
Hash identifier:          r2PrUCTn9QnMnilUCHXeGnqpKXDX1qP5wE8EikK1bCM=
Subject key identifier:   84:B2:9D:25:BF:62:2F:30:E1:01:48:D7:71:D9:F4:F0:DB:C0:4A:16
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F432858482EBFFB67076194D42DDB5FE0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     211584
IP address blocks:        2602:fd92:e00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:fb:67:07:61:94:d4:2d:db:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=ea1360e7-1abf-4838-a856-c3517bb8a8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:68:d5:1d:d3:d3:90:0c:fd:8d:ae:61:f3:
                    92:f7:5d:b9:ba:d3:22:83:ad:19:9b:59:6c:0f:35:
                    fa:e0:ef:76:76:94:d7:d0:66:d5:03:9a:b0:04:5d:
                    0f:bd:c5:22:10:2d:72:e4:16:6f:76:a2:c3:2f:af:
                    9e:20:44:3c:78:bd:b9:ae:f1:4c:7b:bb:8b:04:42:
                    69:f9:f6:a6:31:88:5d:3c:17:91:08:1a:8b:be:07:
                    55:b6:12:cc:f3:cd:6a:27:8c:66:08:6e:18:f9:97:
                    62:f1:14:66:e2:39:5d:f3:72:e2:80:1d:c5:d7:c5:
                    be:eb:99:91:5d:a8:93:c8:83:a1:8f:50:4b:b7:41:
                    64:ae:bf:54:6e:f3:d3:5b:88:39:21:ef:11:7e:1a:
                    22:8d:fa:23:27:db:2c:7d:1c:fe:9b:72:82:a5:75:
                    e1:cc:d3:bb:29:83:9c:08:c8:41:e9:27:0b:d3:33:
                    2d:54:ed:70:22:71:db:37:6e:34:06:16:c3:d9:cc:
                    3d:37:62:cd:ac:38:d0:2a:7d:42:6f:ce:3b:a7:2a:
                    e4:d6:1e:65:a0:72:0a:b8:ac:6a:5a:90:4d:92:ba:
                    3e:05:5a:e0:c3:c1:07:93:c8:10:65:69:c7:de:7e:
                    32:bc:b6:22:79:12:e7:8b:41:db:b5:13:1d:2d:eb:
                    06:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B2:9D:25:BF:62:2F:30:E1:01:48:D7:71:D9:F4:F0:DB:C0:4A:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:99:55:d2:8f:03:af:4a:6e:4a:04:b2:0f:06:9c:33:61:5c:
         a0:42:fd:62:cd:28:1b:19:d5:2c:58:6c:63:37:26:10:7a:a4:
         83:f2:67:95:79:fa:8a:c7:03:45:7a:3d:96:2e:be:cf:4d:f6:
         18:f5:ea:f2:89:16:a9:39:57:97:f1:bb:e9:9a:46:b6:ad:60:
         38:28:09:58:db:53:b6:11:1d:bb:e8:8e:27:b2:a3:11:2c:3d:
         48:f6:65:74:53:6c:ef:43:2a:85:bc:43:50:55:e7:21:0d:ff:
         b5:b0:4a:c3:0c:59:68:d9:a8:52:c4:f9:6a:8d:bb:f3:9b:e0:
         82:76:09:65:01:ab:9a:84:05:d3:27:6e:6d:e1:cf:c2:9f:dc:
         ba:ec:3c:8b:97:85:c4:66:83:d1:e8:13:0a:53:94:71:b6:6d:
         c2:78:5d:0c:e6:1e:1f:ff:39:2d:70:8e:2d:79:e1:d8:95:2c:
         8e:ac:44:67:4b:1e:85:dd:67:af:ae:49:e1:b4:8d:80:c4:62:
         75:08:b0:1a:24:be:0a:d6:af:65:e5:f9:ea:45:0f:e0:84:4d:
         f4:4b:c2:54:15:6e:63:92:df:a6:2b:44:ca:0c:7c:a5:9e:6e:
         f2:92:47:da:70:57:4a:5b:a7:7b:16:0c:a9:85:3c:22:2c:62:
         91:9e:dd:ad
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEguv/tnB2GU1C3bX+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
ZWExMzYwZTctMWFiZi00ODM4LWE4NTYtYzM1MTdiYjhhOGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vRo1R3T05AM/Y2uYfOS9125utMig60Zm1ls
DzX64O92dpTX0GbVA5qwBF0PvcUiEC1y5BZvdqLDL6+eIEQ8eL25rvFMe7uLBEJp
+famMYhdPBeRCBqLvgdVthLM881qJ4xmCG4Y+Zdi8RRm4jld83LigB3F18W+65mR
XaiTyIOhj1BLt0Fkrr9UbvPTW4g5Ie8RfhoijfojJ9ssfRz+m3KCpXXhzNO7KYOc
CMhB6ScL0zMtVO1wInHbN240BhbD2cw9N2LNrDjQKn1Cb847pyrk1h5loHIKuKxq
WpBNkro+BVrgw8EHk8gQZWnH3n4yvLYieRLni0HbtRMdLesGEwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFISynSW/Yi8w4QFI13HZ9PDbwEoWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvZGQzYWU0NWQtYTc2YS0z
NWY1LTg0YjctMDY4NzEzNjZiMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9kg4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAuplV0o8Dr0puSgSyDwacM2FcoEL9Ys0oGxnVLFhsYzcmEHqkg/Jn
lXn6iscDRXo9li6+z032GPXq8okWqTlXl/G76ZpGtq1gOCgJWNtTthEdu+iOJ7Kj
ESw9SPZldFNs70MqhbxDUFXnIQ3/tbBKwwxZaNmoUsT5ao2785vggnYJZQGrmoQF
0ydubeHPwp/cuuw8i5eFxGaD0egTClOUcbZtwnhdDOYeH/85LXCOLXnh2JUsjqxE
Z0sehd1nr65J4bSNgMRidQiwGiS+CtavZeX56kUP4IRN9EvCVBVuY5LfpitEygx8
pZ5u8pJH2nBXSlunexYMqYU8IixikZ7drQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:28:14 2025 by rpki-client