Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa
File:                     9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa (raw, json)
Hash identifier:          roIb7muC5tGaYKDlVrK9dHkKx699X99TsiBK0tGILIg=
Subject key identifier:   E2:23:D2:89:FB:17:90:E2:96:72:08:4C:B8:65:C1:32:89:85:FB:B0
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F43285848222FE73330870F5712107D80
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        2620:113:8060::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:e7:33:30:87:0f:57:12:10:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=74ac4b73-14ce-42fb-8ef6-a266fd006c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:24:ef:65:6b:4d:4f:fa:93:2c:7e:e3:a5:
                    51:e7:3b:45:1a:a4:fb:a6:07:15:25:6d:c2:62:81:
                    2a:c9:3f:ff:91:49:a3:2a:ba:1a:21:79:65:3b:40:
                    a3:96:74:95:98:8c:84:ff:53:dd:e3:6f:83:b4:a6:
                    d3:0a:f1:33:ea:ee:13:23:9d:44:b6:3a:cc:f3:18:
                    57:c3:a9:9e:d7:15:db:32:93:a4:39:5a:86:14:e0:
                    38:9b:a6:86:81:77:76:90:17:a8:f5:ed:42:83:d6:
                    65:4e:c8:22:23:97:7f:1e:de:93:c3:99:32:de:99:
                    84:67:6e:74:73:7b:3d:fe:d4:5a:70:8f:31:49:ef:
                    5b:7d:52:34:78:c8:79:4b:07:a1:89:3c:95:57:c6:
                    48:3b:43:e3:66:0a:cf:a8:1f:31:24:e2:78:19:ca:
                    4c:34:b9:a1:61:74:cc:35:93:f2:77:fe:91:9f:19:
                    98:05:3f:0d:1f:ae:40:77:97:9d:ae:09:a0:7a:2b:
                    db:a8:15:01:e7:a5:3a:69:11:98:73:8d:83:f3:2b:
                    b4:74:11:45:68:04:84:ec:93:71:8f:c8:be:2a:f1:
                    95:4c:1c:9c:c5:ec:f5:69:db:1e:7e:0c:42:e3:ca:
                    24:a3:06:01:37:33:52:03:ea:1b:3a:d3:4b:7a:81:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:23:D2:89:FB:17:90:E2:96:72:08:4C:B8:65:C1:32:89:85:FB:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:8060::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b0:62:a1:34:7b:16:98:3d:8d:05:2c:5b:a7:bd:b2:ae:90:
         0e:bc:21:1b:1a:47:51:2c:60:bf:4a:ed:31:4d:81:4e:d0:55:
         c3:0b:62:98:32:eb:65:e7:30:55:6e:58:d7:87:aa:b7:0a:42:
         aa:26:20:81:a3:4e:79:e1:90:28:80:6c:d5:31:8f:0c:b4:5b:
         60:49:67:5c:60:74:93:2b:6c:a3:c3:e8:8f:c8:5b:fc:09:aa:
         97:a9:6e:4f:03:70:b7:16:ce:75:f2:d7:fe:7c:1e:e8:48:da:
         28:42:80:a4:df:db:08:d6:ab:7c:b5:dc:2c:83:7c:ec:01:c1:
         f9:90:70:c0:ae:6f:90:6b:f7:fc:d1:48:b1:74:43:10:5a:45:
         9a:f8:cb:52:f8:e2:b4:ca:a7:be:dc:0c:8b:85:69:a3:bb:2b:
         bf:b9:dd:d8:28:b3:4f:6c:d1:3a:ea:21:d2:c2:2f:b5:61:b2:
         e8:c1:27:ed:2f:fb:3b:f1:cd:18:34:d4:c6:f4:82:35:63:66:
         09:40:b6:54:f8:80:91:bf:07:64:bc:eb:a4:cb:bb:1e:df:22:
         ef:7b:ac:9f:6a:5d:b3:3e:55:9d:da:44:ac:5a:65:26:1c:63:
         a3:e5:f6:ef:28:0d:01:28:b4:6b:a2:dc:70:37:a0:70:41:be:
         c1:3f:41:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgiL+czMIcPVxIQfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA0NmE4MDAtYzM3OS00YzNiLWI3MDItZmIxNzEyYjRj
NWM5MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
NzRhYzRiNzMtMTRjZS00MmZiLThlZjYtYTI2NmZkMDA2YzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgAk72VrTU/6kyx+46VR5ztFGqT7pgcVJW3C
YoEqyT//kUmjKroaIXllO0CjlnSVmIyE/1Pd42+DtKbTCvEz6u4TI51EtjrM8xhX
w6me1xXbMpOkOVqGFOA4m6aGgXd2kBeo9e1Cg9ZlTsgiI5d/Ht6Tw5ky3pmEZ250
c3s9/tRacI8xSe9bfVI0eMh5SwehiTyVV8ZIO0PjZgrPqB8xJOJ4GcpMNLmhYXTM
NZPyd/6RnxmYBT8NH65Ad5edrgmgeivbqBUB56U6aRGYc42D8yu0dBFFaASE7JNx
j8i+KvGVTBycxez1adsefgxC48okowYBNzNSA+obOtNLeoFdRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOIj0on7F5DilnIITLhlwTKJhfuwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDQ2
YTgwMC1jMzc5LTRjM2ItYjcwMi1mYjE3MTJiNGM1YzkvOWRmYjEzYjYtZThkZC0z
YjYzLWI2OTUtNjIwMWM2OWI3ZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA0NmE4MDAtYzM3OS00YzNiLWI3
MDItZmIxNzEyYjRjNWM5LzIwNDZhODAwLWMzNzktNGMzYi1iNzAyLWZiMTcxMmI0
YzVjOS5jcmwwHwYDVR0jBBgwFoAUG3z6SuVkoJMCTR6fRMJkodj6b6UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMDQ2YTgwMC1jMzc5LTRjM2ItYjcwMi1mYjE3
MTJiNGM1YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABE4Bg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADuwYqE0exaYPY0FLFunvbKukA68IRsaR1EsYL9K7TFNgU7QVcML
Ypgy62XnMFVuWNeHqrcKQqomIIGjTnnhkCiAbNUxjwy0W2BJZ1xgdJMrbKPD6I/I
W/wJqpepbk8DcLcWznXy1/58HuhI2ihCgKTf2wjWq3y13CyDfOwBwfmQcMCub5Br
9/zRSLF0QxBaRZr4y1L44rTKp77cDIuFaaO7K7+53dgos09s0TrqIdLCL7VhsujB
J+0v+zvxzRg01Mb0gjVjZglAtlT4gJG/B2S866TLux7fIu97rJ9qXbM+VZ3aRKxa
ZSYcY6Pl9u8oDQEotGui3HA3oHBBvsE/QaQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:18 2025 by rpki-client