Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/341debe4-149d-318d-932a-74d9e8faae16.roa
File:                     341debe4-149d-318d-932a-74d9e8faae16.roa (raw, json)
Hash identifier:          OuyfNk5vaoMX43FRJ7DHXUNfdIBvG6g7Fz4HNNQJxJo=
Subject key identifier:   1D:FD:5C:DC:5B:2F:4B:15:C0:F6:2D:DB:FB:58:02:1C:CF:95:E0:31
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F432858484C10391CF21AC1A37D6F0B80
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/341debe4-149d-318d-932a-74d9e8faae16.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     14340
IP address blocks:        2600:e807:1111::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:39:1c:f2:1a:c1:a3:7d:6f:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=2165658a-5038-4b91-a0d2-1a9a4f1a594c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:0a:53:db:37:19:3b:a0:f5:ab:16:01:34:
                    ad:a2:90:48:69:46:65:be:70:f3:6a:9d:a3:8d:80:
                    14:ba:6e:b2:ce:d4:a9:f4:5f:39:10:31:04:99:4a:
                    67:a5:e1:27:9f:4f:fc:36:0e:09:27:a4:94:95:05:
                    23:5f:1c:25:69:8a:5f:a7:46:99:8a:dd:b9:9a:15:
                    b3:ad:fe:ab:ba:2b:c5:ed:e9:77:e2:9d:95:f2:a5:
                    cd:29:c7:10:0d:43:1e:48:7f:a1:fc:1c:a1:d0:e9:
                    32:4a:ab:6b:70:23:4b:53:78:d1:d0:8a:f7:28:0b:
                    7a:53:bd:0e:fc:4c:ca:80:2c:69:c1:aa:52:99:88:
                    b7:4e:11:5e:f9:39:e1:c9:d7:b2:d5:23:34:ae:3d:
                    be:79:10:a4:95:eb:2f:e0:57:ff:87:83:50:27:77:
                    78:bb:de:56:f9:2a:04:b5:e3:2c:16:fe:5b:1d:fe:
                    55:96:ef:ce:0e:47:bd:db:08:f3:5a:76:c9:39:8a:
                    d4:02:3a:ef:e6:a0:42:ee:48:df:9d:1f:45:c8:20:
                    e4:bf:30:ab:10:85:f4:b2:c3:e3:b7:0d:f3:1a:bd:
                    80:a1:f0:ad:8f:62:17:19:e4:ed:79:98:05:4a:49:
                    5c:79:87:1c:0e:db:ae:5f:c6:1b:4e:54:9f:97:de:
                    1e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FD:5C:DC:5B:2F:4B:15:C0:F6:2D:DB:FB:58:02:1C:CF:95:E0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/341debe4-149d-318d-932a-74d9e8faae16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:e807:1111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8c:ae:57:ff:f3:33:93:46:44:00:10:27:29:34:f6:61:35:
         ee:d6:e0:5b:63:63:61:78:5a:83:17:f6:c3:89:8f:12:50:fa:
         47:af:f4:e1:82:c7:34:c5:b8:05:a6:6b:0e:da:59:83:52:c2:
         2e:7f:64:ea:f1:99:b3:3b:3e:29:9d:03:53:12:9d:af:a9:4c:
         aa:61:1c:86:da:51:be:a4:ac:37:49:23:c1:57:6a:7d:fa:9a:
         ca:ed:b1:af:8e:76:c7:13:2a:21:e5:21:19:61:53:31:2b:d1:
         c7:7d:e4:fd:65:d3:13:30:0c:30:9a:f2:9b:2a:cf:a9:a5:94:
         c4:32:31:4b:d0:ed:3e:12:77:d3:3f:8a:5f:82:51:82:30:13:
         f0:d8:7d:9b:4d:a0:79:a0:6b:49:33:a4:2c:82:71:c0:40:e7:
         9e:e2:d8:cb:6c:37:a7:32:e7:67:3c:94:87:93:38:1f:9f:3f:
         01:1b:87:35:e3:48:bc:80:27:33:12:7d:7e:d2:ed:7e:7b:99:
         22:04:fe:7e:cc:74:45:8c:6c:bf:50:11:59:99:b2:1b:2e:08:
         27:bf:f7:0d:3a:19:08:c6:e4:1e:8e:04:19:e0:14:88:67:47:
         66:c7:c9:74:69:4a:67:27:cc:e7:47:1d:91:f6:98:4b:fe:91:
         54:9a:ce:9a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhMEDkc8hrBo31vC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx
MTI3MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MjE2NTY1OGEtNTAzOC00YjkxLWEwZDItMWE5YTRmMWE1OTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiycKU9s3GTug9asWATStopBIaUZlvnDzap2j
jYAUum6yztSp9F85EDEEmUpnpeEnn0/8Ng4JJ6SUlQUjXxwlaYpfp0aZit25mhWz
rf6ruivF7el34p2V8qXNKccQDUMeSH+h/Byh0OkySqtrcCNLU3jR0Ir3KAt6U70O
/EzKgCxpwapSmYi3ThFe+Tnhydey1SM0rj2+eRCklesv4Ff/h4NQJ3d4u95W+SoE
teMsFv5bHf5Vlu/ODke92wjzWnbJOYrUAjrv5qBC7kjfnR9FyCDkvzCrEIX0ssPj
tw3zGr2AofCtj2IXGeTteZgFSklceYccDtuuX8YbTlSfl94e7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB39XNxbL0sVwPYt2/tYAhzPleAxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0
OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvMzQxZGViZTQtMTQ5ZC0z
MThkLTkzMmEtNzRkOWU4ZmFhZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl
ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz
MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl
ZTQ1MzExMjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgDoBxER
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAASMrlf/8zOTRkQAECcpNPZhNe7W4FtjY2F4WoMX9sOJjxJQ+kev
9OGCxzTFuAWmaw7aWYNSwi5/ZOrxmbM7PimdA1MSna+pTKphHIbaUb6krDdJI8FX
an36msrtsa+OdscTKiHlIRlhUzEr0cd95P1l0xMwDDCa8psqz6mllMQyMUvQ7T4S
d9M/il+CUYIwE/DYfZtNoHmga0kzpCyCccBA557i2MtsN6cy52c8lIeTOB+fPwEb
hzXjSLyAJzMSfX7S7X57mSIE/n7MdEWMbL9QEVmZshsuCCe/9w06GQjG5B6OBBng
FIhnR2bHyXRpSmcnzOdHHZH2mEv+kVSazpo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:07 2025 by rpki-client