Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/40ae5e84-384c-333f-9c53-a1037447f21a.roa
File:                     40ae5e84-384c-333f-9c53-a1037447f21a.roa (raw, json)
Hash identifier:          xIJNqmXwRHukcDNQbtjR5/4a2/DBeAln40fcXEHFwgw=
Subject key identifier:   8E:18:E3:1E:9B:65:07:52:E2:28:4F:36:F9:51:85:E4:0F:AA:F1:B4
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584832F0270774C5AE7F4FAF33FC
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/40ae5e84-384c-333f-9c53-a1037447f21a.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     19181
IP address blocks:        2607:6002:700::/40 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:27:07:74:c5:ae:7f:4f:af:33:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=20dd2569-06a5-44d8-a584-cc7b201158d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:d2:e2:95:0b:ad:01:e9:97:fc:fc:c6:43:
                    4c:93:ef:e9:73:76:cf:cc:5e:28:f1:ab:4a:8c:ba:
                    fe:b9:86:06:9b:55:d8:8e:e0:cb:b1:96:e9:fd:98:
                    63:68:53:03:c3:af:26:d7:d4:ea:1e:d3:84:04:82:
                    ce:2a:5f:59:c8:93:3c:21:84:b1:97:60:66:b9:25:
                    83:63:a8:0a:fd:0c:a3:ba:f4:26:1d:c0:78:f2:3d:
                    cc:0c:c6:32:fa:38:47:41:27:eb:55:9d:81:27:5e:
                    f5:69:19:e1:66:0e:48:c2:4b:6b:de:f3:40:ed:4d:
                    9e:ab:2d:44:1f:9c:f9:d7:4f:4c:05:d4:5c:b1:c8:
                    47:df:f4:95:ee:b8:e9:34:9f:4b:7a:e2:12:00:dc:
                    45:2f:46:46:cf:22:7b:d5:b4:10:80:de:1b:1e:53:
                    a7:51:1d:eb:32:dc:a8:9d:32:c6:95:66:49:b2:3a:
                    9c:f5:b3:4f:48:68:1e:52:2c:a0:5e:9f:44:21:34:
                    4c:33:3a:69:6f:ae:1d:bf:fa:64:17:9c:aa:a0:e7:
                    8a:b4:59:b9:9d:f8:bd:6a:eb:ef:07:38:b3:2d:77:
                    52:97:e1:c7:c9:a3:96:2f:eb:d1:2a:b8:21:be:ef:
                    81:01:5b:99:1c:ec:c4:74:71:f9:18:d4:c1:97:2e:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:18:E3:1E:9B:65:07:52:E2:28:4F:36:F9:51:85:E4:0F:AA:F1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/40ae5e84-384c-333f-9c53-a1037447f21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f3:69:fc:f3:b3:d6:2c:a0:17:1d:c6:35:c4:c7:c7:ed:d1:
         36:f0:ec:b5:78:63:83:73:00:a2:84:11:1a:d3:96:83:5f:db:
         31:9e:09:34:a1:71:11:73:89:d9:61:47:8f:b2:3a:1d:5e:67:
         e7:c4:cd:12:90:26:6a:2e:bd:76:6f:e3:f6:2b:66:8e:ae:26:
         cd:b3:f3:b9:6e:8a:05:a0:03:af:08:0f:66:aa:f9:4a:18:34:
         cd:86:13:e0:c6:d5:fb:1e:f6:30:07:0f:3c:35:5f:57:a4:cf:
         de:1c:30:95:d5:06:0c:9e:c9:0a:6d:88:04:13:33:4e:59:a0:
         18:eb:db:16:eb:b3:6b:f3:b4:ed:48:e4:ef:8e:a3:d5:ac:28:
         cb:c7:56:cd:44:85:5c:e5:fa:75:b1:2f:f4:66:f8:16:f9:f8:
         7c:c5:0b:92:71:bb:45:c2:35:94:b9:99:05:22:72:66:37:2a:
         39:2a:56:5f:56:b5:aa:2b:fd:a2:7d:f3:dd:35:36:1c:94:46:
         8f:ea:dc:af:36:61:ac:e0:9f:b8:f9:42:34:cc:76:0d:13:7f:
         c2:84:39:c9:6d:25:82:d9:25:84:d6:58:b7:d6:2f:79:62:dd:
         ed:a1:04:28:e2:91:b2:d8:0f:1b:84:a3:d7:6b:fa:b4:dd:3b:
         ff:81:22:d6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgy8CcHdMWuf0+vM/wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MjBkZDI1NjktMDZhNS00NGQ4LWE1ODQtY2M3YjIwMTE1OGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DfS4pULrQHpl/z8xkNMk+/pc3bPzF4o8atK
jLr+uYYGm1XYjuDLsZbp/ZhjaFMDw68m19TqHtOEBILOKl9ZyJM8IYSxl2BmuSWD
Y6gK/QyjuvQmHcB48j3MDMYy+jhHQSfrVZ2BJ171aRnhZg5Iwktr3vNA7U2eqy1E
H5z5109MBdRcschH3/SV7rjpNJ9LeuISANxFL0ZGzyJ71bQQgN4bHlOnUR3rMtyo
nTLGlWZJsjqc9bNPSGgeUiygXp9EITRMMzppb64dv/pkF5yqoOeKtFm5nfi9auvv
BzizLXdSl+HHyaOWL+vRKrghvu+BAVuZHOzEdHH5GNTBly7ypwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI4Y4x6bZQdS4ihPNvlRheQPqvG0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNDBhZTVlODQtMzg0Yy0z
MzNmLTljNTMtYTEwMzc0NDdmMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAgcw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcvNp/POz1iygFx3GNcTHx+3RNvDstXhjg3MAooQRGtOWg1/bMZ4J
NKFxEXOJ2WFHj7I6HV5n58TNEpAmai69dm/j9itmjq4mzbPzuW6KBaADrwgPZqr5
Shg0zYYT4MbV+x72MAcPPDVfV6TP3hwwldUGDJ7JCm2IBBMzTlmgGOvbFuuza/O0
7Ujk746j1awoy8dWzUSFXOX6dbEv9Gb4Fvn4fMULknG7RcI1lLmZBSJyZjcqOSpW
X1a1qiv9on3z3TU2HJRGj+rcrzZhrOCfuPlCNMx2DRN/woQ5yW0lgtklhNZYt9Yv
eWLd7aEEKOKRstgPG4Sj12v6tN07/4Ei1g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:47 2025 by rpki-client