Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/490ab2cd-4dd2-3d12-8478-4839712464fa.roa
File:                     490ab2cd-4dd2-3d12-8478-4839712464fa.roa (raw, json)
Hash identifier:          J+v/ViS2vuJftf1X36BnAflgrKMNwWg6iZPs0g9hc/0=
Subject key identifier:   DF:38:AF:E1:BA:C2:D9:3E:E4:8D:7F:08:1C:9B:FD:90:D2:8F:0E:6B
Certificate issuer:       /CN=2c480684-ece9-4dd6-8ec6-0437d826102d
Certificate serial:       010D0C9F4328584819CFD391B928C4E8652D7740
Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/490ab2cd-4dd2-3d12-8478-4839712464fa.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     46616
IP address blocks:        2620:85:e000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d3:91:b9:28:c4:e8:65:2d:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=95e36507-cee1-43d9-875d-746d8aedd7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:0b:91:c6:4b:94:1a:55:b2:56:34:11:9b:
                    83:f8:b6:68:8d:b7:84:9a:7d:5d:7a:1a:48:44:d9:
                    cc:86:fc:fc:2b:7a:85:de:bf:ae:7b:65:90:c6:69:
                    eb:8b:9a:71:c3:1c:22:2e:43:d4:23:a7:ce:a0:bd:
                    1f:ca:5e:bc:fe:5d:dc:7d:76:b2:9e:ee:64:b8:75:
                    2c:d4:36:3a:db:1e:5f:ae:4c:67:5d:8c:4e:b2:12:
                    e5:a4:9e:ac:a9:c3:b4:76:b3:fb:67:e1:1e:e8:71:
                    5a:1b:9c:40:ef:3f:cc:41:46:a9:77:fd:26:a9:63:
                    56:aa:8f:db:36:c0:fb:60:a3:72:8f:63:ab:53:1e:
                    f0:66:a7:d8:5a:b8:b2:4f:f8:13:0b:c2:a8:6c:92:
                    97:ba:58:4d:0b:51:23:17:7f:3e:20:a6:03:56:42:
                    55:e6:07:30:fb:37:28:e0:11:c5:aa:db:db:11:d0:
                    9f:ec:9f:f8:d2:f3:61:71:e9:10:ca:29:3c:39:b6:
                    8d:be:91:4f:bc:18:31:34:a8:9a:23:3f:79:d7:66:
                    a7:c0:f2:be:e6:32:c7:6b:7c:5c:ed:c6:ed:2a:d8:
                    6e:4c:54:ea:5c:ad:1a:54:a5:71:e9:80:a7:23:5e:
                    ef:cd:ea:77:53:52:97:1d:82:a5:45:30:51:6a:dc:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:38:AF:E1:BA:C2:D9:3E:E4:8D:7F:08:1C:9B:FD:90:D2:8F:0E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/490ab2cd-4dd2-3d12-8478-4839712464fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:85:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:72:39:52:39:cb:8e:4b:74:85:18:bf:6f:87:9c:0f:d9:e8:
         d7:4a:ee:76:eb:dd:bf:51:ae:56:ba:9a:39:11:2b:2a:a4:76:
         a3:3e:e8:26:51:2f:c5:ea:30:8e:8f:cd:11:46:58:ac:ba:84:
         3b:c2:d8:d9:89:2b:2a:a2:6b:bd:d0:6b:ac:5f:cb:83:00:24:
         31:48:63:9a:ce:0c:0b:6a:50:7f:a8:23:88:34:44:99:a4:4b:
         a6:97:d8:ec:44:3a:38:77:e0:d2:9d:aa:3e:9a:7e:ab:e3:f8:
         60:d7:64:b7:e1:23:99:9c:f5:58:a7:cc:33:d8:55:75:f7:5d:
         a9:59:df:16:ba:97:c5:87:5e:bf:fa:29:84:2d:0a:20:7e:e4:
         a4:bb:1b:e7:16:61:64:83:b7:7c:7c:32:5c:4f:10:cc:ae:5a:
         ba:56:3f:24:2e:94:31:51:b0:6a:a6:e3:90:fe:1e:6e:f3:a8:
         f2:e7:96:4b:01:48:70:91:ae:29:3c:0f:85:5c:91:17:e6:bd:
         77:40:c8:b5:a5:e2:31:5b:da:77:60:40:d1:31:72:0f:03:eb:
         91:e2:9c:4b:43:f3:57:8b:47:5f:41:b9:cd:29:4b:08:bd:44:
         fe:b6:8b:15:2e:f4:f6:3b:fe:94:14:d7:8a:d3:70:8f:2b:f0:
         67:14:2d:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz9ORuSjE6GUtd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmM0ODA2ODQtZWNlOS00ZGQ2LThlYzYtMDQzN2Q4MjYx
MDJkMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
OTVlMzY1MDctY2VlMS00M2Q5LTg3NWQtNzQ2ZDhhZWRkN2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoULkcZLlBpVslY0EZuD+LZojbeEmn1dehpI
RNnMhvz8K3qF3r+ue2WQxmnri5pxwxwiLkPUI6fOoL0fyl68/l3cfXaynu5kuHUs
1DY62x5frkxnXYxOshLlpJ6sqcO0drP7Z+Ee6HFaG5xA7z/MQUapd/0mqWNWqo/b
NsD7YKNyj2OrUx7wZqfYWriyT/gTC8KobJKXulhNC1EjF38+IKYDVkJV5gcw+zco
4BHFqtvbEdCf7J/40vNhcekQyik8ObaNvpFPvBgxNKiaIz9512anwPK+5jLHa3xc
7cbtKthuTFTqXK0aVKVx6YCnI17vzep3U1KXHYKlRTBRatzIQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN84r+G6wtk+5I1/CByb/ZDSjw5rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYzQ4
MDY4NC1lY2U5LTRkZDYtOGVjNi0wNDM3ZDgyNjEwMmQvNDkwYWIyY2QtNGRkMi0z
ZDEyLTg0NzgtNDgzOTcxMjQ2NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmM0ODA2ODQtZWNlOS00ZGQ2LThl
YzYtMDQzN2Q4MjYxMDJkLzJjNDgwNjg0LWVjZTktNGRkNi04ZWM2LTA0MzdkODI2
MTAyZC5jcmwwHwYDVR0jBBgwFoAU228xi315cPYMwgcg0hNv9Pw2VXMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYzQ4MDY4NC1lY2U5LTRkZDYtOGVjNi0wNDM3
ZDgyNjEwMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAheAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAINyOVI5y45LdIUYv2+HnA/Z6NdK7nbr3b9Rrla6mjkRKyqkdqM+
6CZRL8XqMI6PzRFGWKy6hDvC2NmJKyqia73Qa6xfy4MAJDFIY5rODAtqUH+oI4g0
RJmkS6aX2OxEOjh34NKdqj6afqvj+GDXZLfhI5mc9VinzDPYVXX3XalZ3xa6l8WH
Xr/6KYQtCiB+5KS7G+cWYWSDt3x8MlxPEMyuWrpWPyQulDFRsGqm45D+Hm7zqPLn
lksBSHCRrik8D4VckRfmvXdAyLWl4jFb2ndgQNExcg8D65HinEtD81eLR19Buc0p
Swi9RP62ixUu9PY7/pQU14rTcI8r8GcULbE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:10 2025 by rpki-client