Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/606eaf22-49d7-3b2f-8b55-bea54ec3f0a7.roa
File:                     606eaf22-49d7-3b2f-8b55-bea54ec3f0a7.roa (raw, json)
Hash identifier:          HhpEGLNbIzjsaBhYiAWZn3/rV8jhG7i4eMWr1/KFW6I=
Subject key identifier:   21:E9:2F:B8:07:BE:63:01:A6:24:2F:A5:A6:FA:01:E3:E7:C0:DD:3B
Certificate issuer:       /CN=481fd97a-d501-4297-871e-0024fbe50fc6
Certificate serial:       010D0C9F43285847FC7F99C8609AD70A5AD32A80
Authority key identifier: E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/606eaf22-49d7-3b2f-8b55-bea54ec3f0a7.roa
Signing time:             Sun 24 Nov 2024 14:00:39 +0000
ROA not before:           Sun 24 Nov 2024 14:00:39 +0000
ROA not after:            Sat 22 Feb 2025 14:00:39 +0000
asID:                     35866
IP address blocks:        2602:f9ff::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fc:7f:99:c8:60:9a:d7:0a:5a:d3:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481fd97a-d501-4297-871e-0024fbe50fc6
        Validity
            Not Before: Nov 24 14:00:39 2024 GMT
            Not After : Feb 22 14:00:39 2025 GMT
        Subject: CN=8ec9aa64-794e-4616-9cf7-f5b829191222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:26:26:1e:07:44:96:56:30:32:4d:6f:4c:
                    25:e0:e9:82:72:ba:94:07:f6:f7:0c:b5:06:f4:86:
                    cb:83:de:8b:81:aa:20:af:94:c5:dd:ae:07:87:d9:
                    dd:53:3c:bf:56:7d:89:12:25:28:d4:62:aa:8b:bd:
                    da:21:29:fd:91:a4:0a:c6:99:6d:8c:1a:52:3b:a9:
                    ef:17:71:06:ac:59:bb:48:87:f6:96:3e:c1:cd:5f:
                    c9:fe:a7:ea:e0:75:1d:6d:7f:97:36:d4:90:06:74:
                    cd:d8:88:54:2a:f8:fd:00:ae:92:f3:05:12:d9:aa:
                    88:9d:3b:4b:b9:4a:fe:ee:4b:ac:bd:43:7f:ff:1f:
                    da:d5:d9:e2:3e:e5:84:69:b7:06:ff:01:e5:f4:c3:
                    45:af:d4:4c:fe:26:85:71:5e:8c:02:a5:a4:04:7a:
                    e8:ef:5a:ef:5e:12:cd:ae:00:e9:3b:a1:74:38:8a:
                    32:5d:b5:ac:cb:08:2e:fc:19:b8:64:ba:44:b4:eb:
                    2b:79:c0:37:49:40:e7:ad:72:3a:15:84:7a:5a:eb:
                    96:35:04:14:7c:ff:1d:4e:73:58:82:cf:7f:13:c2:
                    9e:48:a9:d7:8c:a0:da:c0:bf:c8:b8:e2:99:47:60:
                    ef:92:d5:7d:4a:00:f9:3e:75:8b:31:89:0d:6c:bd:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:2F:B8:07:BE:63:01:A6:24:2F:A5:A6:FA:01:E3:E7:C0:DD:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/606eaf22-49d7-3b2f-8b55-bea54ec3f0a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl

            X509v3 Authority Key Identifier:
                keyid:E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ff::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:e8:35:7f:f4:ea:98:83:51:fb:1a:e8:84:58:5c:37:e4:
         3d:16:a3:9a:84:36:1f:1f:e5:e4:e9:5e:bf:b9:6e:6e:72:dc:
         e4:77:35:2d:c3:28:7a:07:d6:e8:a9:9d:5a:4a:ec:cd:58:7f:
         75:b9:88:3a:b9:88:fb:93:e1:48:7d:67:d5:79:9c:89:fb:22:
         52:5b:0e:28:72:31:2d:8f:35:0b:62:c8:2b:7a:d3:26:82:e6:
         7f:84:af:b7:a3:5d:e0:e5:bd:e4:7f:78:c5:5f:3b:2d:6a:a4:
         3a:a3:0a:f3:8c:35:73:e7:47:e6:f5:e7:37:f5:02:91:a4:97:
         68:a3:20:78:e4:d5:3e:49:69:e7:0d:8e:1d:ef:6f:b6:09:d5:
         08:85:0b:4c:53:37:d0:3a:44:32:77:9b:58:87:ba:e4:84:50:
         ee:c4:5b:f0:d4:2d:85:6d:e3:01:76:3a:56:7c:11:bb:11:34:
         ae:20:4b:0e:13:37:12:f5:76:a5:23:03:aa:99:6e:31:7e:58:
         2a:27:69:d3:4a:61:27:ef:29:9f:b2:9c:ae:1f:5d:5f:2d:49:
         7b:bc:5e:dc:a5:5b:dc:2a:77:2b:16:2a:9c:81:7b:79:e4:7f:
         a4:88:40:96:52:cb:d2:85:3e:c7:91:10:c7:0a:1e:31:27:5d:
         e7:ba:63:ac
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEf8f5nIYJrXClrTKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDgxZmQ5N2EtZDUwMS00Mjk3LTg3MWUtMDAyNGZiZTUw
ZmM2MB4XDTI0MTEyNDE0MDAzOVoXDTI1MDIyMjE0MDAzOVowLzEtMCsGA1UEAxMk
OGVjOWFhNjQtNzk0ZS00NjE2LTljZjctZjViODI5MTkxMjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNImJh4HRJZWMDJNb0wl4OmCcrqUB/b3DLUG
9IbLg96Lgaogr5TF3a4Hh9ndUzy/Vn2JEiUo1GKqi73aISn9kaQKxpltjBpSO6nv
F3EGrFm7SIf2lj7BzV/J/qfq4HUdbX+XNtSQBnTN2IhUKvj9AK6S8wUS2aqInTtL
uUr+7kusvUN//x/a1dniPuWEabcG/wHl9MNFr9RM/iaFcV6MAqWkBHro71rvXhLN
rgDpO6F0OIoyXbWsywgu/Bm4ZLpEtOsrecA3SUDnrXI6FYR6WuuWNQQUfP8dTnNY
gs9/E8KeSKnXjKDawL/IuOKZR2DvktV9SgD5PnWLMYkNbL1/YwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCHpL7gHvmMBpiQvpab6AePnwN07MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODFm
ZDk3YS1kNTAxLTQyOTctODcxZS0wMDI0ZmJlNTBmYzYvNjA2ZWFmMjItNDlkNy0z
YjJmLThiNTUtYmVhNTRlYzNmMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDgxZmQ5N2EtZDUwMS00Mjk3LTg3
MWUtMDAyNGZiZTUwZmM2LzQ4MWZkOTdhLWQ1MDEtNDI5Ny04NzFlLTAwMjRmYmU1
MGZjNi5jcmwwHwYDVR0jBBgwFoAU4H/Ea/sb8xfc3el0UXeyEUjLHxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ODFmZDk3YS1kNTAxLTQyOTctODcxZS0wMDI0
ZmJlNTBmYzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5/wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFW3oNX/06piDUfsa6IRYXDfkPRajmoQ2Hx/l5Olev7lubnLc5Hc1
LcMoegfW6KmdWkrszVh/dbmIOrmI+5PhSH1n1XmcifsiUlsOKHIxLY81C2LIK3rT
JoLmf4Svt6Nd4OW95H94xV87LWqkOqMK84w1c+dH5vXnN/UCkaSXaKMgeOTVPklp
5w2OHe9vtgnVCIULTFM30DpEMnebWIe65IRQ7sRb8NQthW3jAXY6VnwRuxE0riBL
DhM3EvV2pSMDqpluMX5YKidp00phJ+8pn7Kcrh9dXy1Je7xe3KVb3Cp3KxYqnIF7
eeR/pIhAllLL0oU+x5EQxwoeMSdd57pjrA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:27 2025 by rpki-client