Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cec742cd-4108-39e1-93e9-edf995db5279.roa
File:                     cec742cd-4108-39e1-93e9-edf995db5279.roa (raw, json)
Hash identifier:          m+6DN1FUZbMq1WMgqsBrOR/o5leI7k24oUaGGHUpats=
Subject key identifier:   E8:E5:BA:00:35:93:5C:77:70:FF:AD:C1:0B:F8:23:87:40:A5:31:24
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858481C9A7CE1AF96FEDC7A6CC360
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cec742cd-4108-39e1-93e9-edf995db5279.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     12222
IP address blocks:        2001:4878:37::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:7c:e1:af:96:fe:dc:7a:6c:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=0f8db5de-f49c-45d4-bdfe-3f36a086cc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:29:7c:05:27:c9:45:66:b0:06:99:00:26:
                    a9:69:d8:e8:b5:98:9d:df:a1:2b:6e:fe:2e:a8:06:
                    bf:a3:b1:3a:52:cf:00:f9:72:0b:9b:4f:35:0b:ab:
                    f1:31:07:17:54:ca:68:82:81:df:0c:c6:b9:c3:25:
                    63:3c:2b:db:38:ae:87:e7:b5:c6:1f:3d:0d:21:67:
                    9d:94:89:16:f8:86:71:4a:08:40:50:1c:b0:52:1a:
                    11:06:e3:b1:9f:9b:6a:36:b4:a4:44:40:cc:83:68:
                    23:33:49:17:81:4f:8a:32:d1:41:f4:26:b5:43:de:
                    ee:f8:39:14:07:64:d3:4c:3a:68:1f:75:e6:d3:99:
                    89:9d:b0:e3:50:22:b7:eb:b6:a9:5e:8c:2e:38:f4:
                    9e:33:69:1e:50:03:6e:3a:8f:86:fb:39:38:e8:f0:
                    ae:74:44:63:ac:0f:db:28:04:37:8e:d6:21:96:7c:
                    e4:8f:aa:b1:d8:3c:0f:c0:e4:de:d5:df:f2:a8:60:
                    66:41:4e:73:c9:4d:9f:ba:2d:9b:f1:84:27:ff:39:
                    48:be:96:0d:0c:60:10:9f:27:9b:49:db:e5:f6:7c:
                    69:f5:c9:d6:6d:a0:d9:cc:9e:c2:cc:4c:48:57:2a:
                    db:6c:73:9e:2b:af:d7:b3:49:0e:83:c3:b9:86:5c:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E5:BA:00:35:93:5C:77:70:FF:AD:C1:0B:F8:23:87:40:A5:31:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cec742cd-4108-39e1-93e9-edf995db5279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:37::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ba:66:a5:77:53:4b:df:ea:48:cc:56:2f:91:0f:6e:ba:7e:
         89:20:e7:ff:a6:84:62:d3:64:b6:f1:5b:7c:55:06:d8:7c:ed:
         57:eb:3f:6b:8a:f3:26:e6:6e:87:58:23:66:7c:6a:36:3e:d0:
         43:bf:a0:6a:c8:dd:6e:a3:80:d9:b4:00:70:fe:c7:35:c0:18:
         2f:7b:3d:53:39:1f:f1:a1:2b:cb:84:9d:5d:5c:b0:f3:bb:d4:
         0a:cc:d1:30:22:e9:90:a0:f8:69:46:fe:40:06:bc:06:90:93:
         f6:a4:56:9d:00:fd:ec:80:d6:f6:ce:d2:11:16:7c:72:84:26:
         9e:99:8e:18:3d:d3:be:52:33:14:e1:90:70:bf:5c:1c:09:44:
         f8:53:99:c2:75:86:03:35:7f:5d:38:87:b5:75:48:a5:b3:87:
         44:f4:cf:23:2a:7b:9c:a4:49:a0:74:64:97:5c:28:ea:bd:1d:
         3f:7d:54:c4:fe:e8:57:c7:48:00:76:fe:da:28:a5:f3:9c:1a:
         08:95:a1:0c:ff:67:6f:55:39:47:68:ac:93:a1:f4:fc:23:ac:
         6e:ef:2b:66:d7:fe:1d:b1:87:18:51:c7:48:c7:f5:ba:13:1d:
         22:ed:08:c2:f0:ec:5a:84:e7:2f:08:d3:cc:99:de:7b:75:49:
         cb:4b:9d:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgcmnzhr5b+3Hpsw2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
MGY4ZGI1ZGUtZjQ5Yy00NWQ0LWJkZmUtM2YzNmEwODZjYzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kIpfAUnyUVmsAaZACapadjotZid36Erbv4u
qAa/o7E6Us8A+XILm081C6vxMQcXVMpogoHfDMa5wyVjPCvbOK6H57XGHz0NIWed
lIkW+IZxSghAUBywUhoRBuOxn5tqNrSkREDMg2gjM0kXgU+KMtFB9Ca1Q97u+DkU
B2TTTDpoH3Xm05mJnbDjUCK367apXowuOPSeM2keUANuOo+G+zk46PCudERjrA/b
KAQ3jtYhlnzkj6qx2DwPwOTe1d/yqGBmQU5zyU2fui2b8YQn/zlIvpYNDGAQnyeb
Sdvl9nxp9cnWbaDZzJ7CzExIVyrbbHOeK6/Xs0kOg8O5hly4+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOjlugA1k1x3cP+twQv4I4dApTEkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2VjNzQyY2QtNDEwOC0z
OWUxLTkzZTktZWRmOTk1ZGI1Mjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAA3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIm6ZqV3U0vf6kjMVi+RD266fokg5/+mhGLTZLbxW3xVBth87Vfr
P2uK8ybmbodYI2Z8ajY+0EO/oGrI3W6jgNm0AHD+xzXAGC97PVM5H/GhK8uEnV1c
sPO71ArM0TAi6ZCg+GlG/kAGvAaQk/akVp0A/eyA1vbO0hEWfHKEJp6Zjhg9075S
MxThkHC/XBwJRPhTmcJ1hgM1f104h7V1SKWzh0T0zyMqe5ykSaB0ZJdcKOq9HT99
VMT+6FfHSAB2/toopfOcGgiVoQz/Z29VOUdorJOh9PwjrG7vK2bX/h2xhxhRx0jH
9boTHSLtCMLw7FqE5y8I08yZ3nt1SctLnUw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:01 2025 by rpki-client