Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa
File:                     448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa (raw, json)
Hash identifier:          Us0otx/jJiBR1mkbUrlH47YP/LTgns1n3jTtQaQE5HQ=
Subject key identifier:   78:E3:35:11:43:50:1C:6E:B7:9C:AF:93:BA:52:33:87:ED:BE:F6:45
Certificate issuer:       /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial:       010D0C9F432858487FB5DD9C5D7147CA843BC380
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     394353
IP address blocks:        2001:500:200::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:dd:9c:5d:71:47:ca:84:3b:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=a095efd1-063d-4eb5-b9ac-7886ac5dbb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:d4:b5:f2:48:05:3c:9a:27:1a:39:81:43:
                    a3:55:f6:d4:bb:da:d0:33:64:a0:6e:ac:df:36:81:
                    61:16:7d:73:30:81:97:f7:1b:34:94:fe:4f:7f:4c:
                    ee:2c:c8:94:83:94:58:2f:88:c8:da:30:bd:48:b5:
                    1c:c8:e0:23:60:60:fc:91:e5:d1:dc:2e:ab:86:08:
                    9e:5c:23:b7:24:46:25:12:fd:ec:69:12:c5:88:01:
                    ce:8c:c6:d8:60:ba:a3:11:42:ed:6a:02:28:36:1c:
                    00:1a:09:10:8e:69:48:e7:20:c6:6d:7c:58:10:30:
                    06:32:ec:0b:18:a5:b2:ec:1c:00:d0:9c:b2:97:cb:
                    bd:f9:e0:40:ff:00:0e:ab:0e:78:39:a2:fd:85:b3:
                    bf:b2:19:f4:0e:eb:42:6f:7b:38:fa:87:ff:f2:11:
                    45:70:d0:c0:62:ca:3c:9c:49:a5:7a:5e:6e:e7:52:
                    51:be:d4:be:9f:cb:6e:2a:40:0a:70:60:60:55:eb:
                    eb:e0:0b:a9:6f:e9:3b:da:2b:3b:50:3e:d4:b1:ec:
                    53:f7:45:b0:a5:8d:2e:01:a6:9e:d5:5a:4f:79:82:
                    5d:ff:7e:52:19:4e:64:26:68:24:8f:cf:db:1b:45:
                    ce:77:ad:3e:5c:e1:6e:f4:14:8e:1a:8f:45:5e:21:
                    e0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E3:35:11:43:50:1C:6E:B7:9C:AF:93:BA:52:33:87:ED:BE:F6:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl

            X509v3 Authority Key Identifier:
                keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:26:b3:37:13:45:7a:0f:3c:03:73:11:7d:23:cd:64:b1:9f:
         b4:a1:83:cf:0b:67:70:26:74:a8:7d:cc:ba:71:2f:12:e4:02:
         12:c3:bf:1b:39:bd:97:a0:d5:9c:0e:d2:7a:14:c7:06:8b:b7:
         f5:57:bf:53:6b:3c:bc:92:a4:3a:47:b6:aa:d0:3a:04:3d:60:
         71:b1:20:9e:5f:c1:7c:24:7f:5a:fe:ab:9f:be:c9:77:a0:59:
         70:1b:e5:66:a9:b7:fe:32:7e:e7:b5:17:7d:ca:0d:43:42:99:
         8d:40:d4:04:63:4c:fe:bd:cb:83:93:09:13:1c:15:af:53:fd:
         70:39:da:b2:ec:9f:7c:43:7d:4b:62:b6:82:df:15:9d:15:68:
         05:d5:e7:d9:22:65:2a:7b:7e:54:35:d1:2d:26:9d:b7:8d:ec:
         8f:b6:bb:fe:1f:be:dd:6c:70:ef:d3:15:75:58:08:52:c9:9a:
         0f:d0:75:48:4c:0c:1d:3e:00:15:d1:f8:d3:e4:79:d7:39:84:
         4c:d7:87:49:26:63:66:ba:52:e6:92:4f:1b:e4:1c:f0:15:30:
         8d:7a:f7:7c:20:64:78:dd:89:ba:59:4e:96:44:72:40:11:67:
         15:9a:bd:d4:2a:19:0a:6e:4e:33:95:62:e0:bc:79:45:50:ca:
         61:43:7f:75
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh/td2cXXFHyoQ7w4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk
ZWEzMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
YTA5NWVmZDEtMDYzZC00ZWI1LWI5YWMtNzg4NmFjNWRiYjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstnUtfJIBTyaJxo5gUOjVfbUu9rQM2Sgbqzf
NoFhFn1zMIGX9xs0lP5Pf0zuLMiUg5RYL4jI2jC9SLUcyOAjYGD8keXR3C6rhgie
XCO3JEYlEv3saRLFiAHOjMbYYLqjEULtagIoNhwAGgkQjmlI5yDGbXxYEDAGMuwL
GKWy7BwA0Jyyl8u9+eBA/wAOqw54OaL9hbO/shn0DutCb3s4+of/8hFFcNDAYso8
nEmlel5u51JRvtS+n8tuKkAKcGBgVevr4Aupb+k72is7UD7UsexT90WwpY0uAaae
1VpPeYJd/35SGU5kJmgkj8/bG0XOd60+XOFu9BSOGo9FXiHgZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHjjNRFDUBxut5yvk7pSM4ftvvZFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0
YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvNDQ4ZjNlYmMtYWFlZS0z
YjFmLWI5YjctNzE0MDJjYjAyNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz
YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4
ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz
MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIomszcTRXoPPANzEX0jzWSxn7Shg88LZ3AmdKh9zLpxLxLkAhLD
vxs5vZeg1ZwO0noUxwaLt/VXv1NrPLySpDpHtqrQOgQ9YHGxIJ5fwXwkf1r+q5++
yXegWXAb5Wapt/4yfue1F33KDUNCmY1A1ARjTP69y4OTCRMcFa9T/XA52rLsn3xD
fUtitoLfFZ0VaAXV59kiZSp7flQ10S0mnbeN7I+2u/4fvt1scO/TFXVYCFLJmg/Q
dUhMDB0+ABXR+NPkedc5hEzXh0kmY2a6UuaSTxvkHPAVMI1693wgZHjdibpZTpZE
ckARZxWavdQqGQpuTjOVYuC8eUVQymFDf3U=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:27 2025 by rpki-client