Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b9b59c-8102-3dd5-a0c5-cc3069f6c359.roa
File:                     e2b9b59c-8102-3dd5-a0c5-cc3069f6c359.roa (raw, json)
Hash identifier:          oUx++00peRpP6UR+74N6J53kc33rIGUaZb/dAIaSiXg=
Subject key identifier:   E8:F0:AF:03:15:BE:02:63:E3:69:C5:90:92:0F:D0:B6:59:FB:20:5C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848530AEF1FF23264256DEFA080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b9b59c-8102-3dd5-a0c5-cc3069f6c359.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     63949
IP address blocks:        2600:3c17::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:ef:1f:f2:32:64:25:6d:ef:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=dc1b0984-d1eb-4dd1-8169-ae88324aff12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:6d:b2:11:a2:3a:9b:cb:a6:aa:98:7e:9e:
                    ce:69:b6:d1:6b:49:7b:c1:38:55:75:21:05:81:66:
                    6f:b3:31:cd:8c:ec:76:28:35:23:77:cf:1e:e1:83:
                    e6:cc:cf:2e:8c:3d:c8:57:05:97:5e:31:9b:26:44:
                    58:57:0b:11:ea:38:c4:29:80:e3:8e:eb:39:a3:51:
                    a6:a8:4f:4c:a4:b6:d5:17:9e:04:92:d2:74:80:97:
                    89:d0:bc:9f:7f:34:71:a1:45:2f:40:5b:1d:db:cf:
                    8d:a5:4c:18:9b:c3:cd:7f:0f:f4:bd:3e:7a:e6:b1:
                    9f:2d:1d:5e:1e:3f:d4:dd:27:78:ca:48:29:a3:e9:
                    13:34:91:34:e8:52:9c:6b:62:3a:0d:ff:67:77:20:
                    dc:33:5c:0e:1b:da:ad:e7:c4:12:93:79:ba:e8:20:
                    75:ad:b5:0a:5b:19:38:22:a3:70:46:4e:bf:17:41:
                    44:82:bd:e2:15:12:49:0e:73:70:c2:cf:1a:c5:3d:
                    cc:37:10:f4:68:5f:54:92:08:59:9a:da:1e:08:0b:
                    4f:1b:27:db:da:c8:ec:91:5d:d5:c4:2a:13:3b:ca:
                    ba:87:b4:0a:98:1b:3d:ee:ae:94:c1:fa:65:a6:0c:
                    3a:b7:0e:ac:8c:b4:09:dd:43:bf:40:82:c9:b5:3a:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F0:AF:03:15:BE:02:63:E3:69:C5:90:92:0F:D0:B6:59:FB:20:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b9b59c-8102-3dd5-a0c5-cc3069f6c359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c17::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:87:5e:44:b5:57:45:17:88:a1:88:f1:53:88:e5:68:4c:
         9d:e3:28:98:7b:d4:9e:3f:a1:f6:c5:77:f8:d6:01:3f:32:2b:
         22:c9:88:c6:e4:eb:30:ec:d9:0c:86:0a:d7:7c:0d:73:42:92:
         6a:63:67:93:0f:56:3d:3e:a5:ff:14:25:57:4a:aa:96:da:44:
         ee:22:97:4f:20:b5:f7:a8:7c:0d:66:d8:d7:83:1f:d9:78:67:
         c8:e2:29:de:cf:f1:a1:db:32:8c:10:29:ad:06:e2:df:b5:79:
         f2:d9:12:e0:b5:65:b7:87:ba:b9:cc:18:e2:97:1d:4d:10:55:
         e6:12:04:a6:03:98:d4:21:6d:e8:fd:42:a7:e3:41:0b:30:5f:
         c9:26:61:78:89:4e:97:15:b6:fb:4f:06:28:43:ed:e6:09:0d:
         12:c5:eb:fe:2d:ac:c4:85:a5:51:b1:d1:41:4d:f6:64:23:ec:
         d7:2c:cb:99:3e:d5:81:be:62:d6:3b:ff:37:9d:ee:03:ce:7e:
         ea:81:b3:82:2a:c7:68:4a:b6:cf:63:07:40:fa:ab:29:4e:39:
         be:af:e7:1a:31:ce:e9:34:18:66:90:47:74:9e:c7:81:28:8b:
         02:dc:b4:3f:86:60:15:9e:cf:6a:7b:48:59:25:4b:a8:3c:18:
         33:49:57:5b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhTCu8f8jJkJW3voIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGMxYjA5ODQtZDFlYi00ZGQxLTgxNjktYWU4ODMyNGFmZjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln9tshGiOpvLpqqYfp7OabbRa0l7wThVdSEF
gWZvszHNjOx2KDUjd88e4YPmzM8ujD3IVwWXXjGbJkRYVwsR6jjEKYDjjus5o1Gm
qE9MpLbVF54EktJ0gJeJ0LyffzRxoUUvQFsd28+NpUwYm8PNfw/0vT565rGfLR1e
Hj/U3Sd4ykgpo+kTNJE06FKca2I6Df9ndyDcM1wOG9qt58QSk3m66CB1rbUKWxk4
IqNwRk6/F0FEgr3iFRJJDnNwws8axT3MNxD0aF9UkghZmtoeCAtPGyfb2sjskV3V
xCoTO8q6h7QKmBs97q6Uwfplpgw6tw6sjLQJ3UO/QILJtTpzMwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOjwrwMVvgJj42nFkJIP0LZZ+yBcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTJiOWI1OWMtODEwMi0z
ZGQ1LWEwYzUtY2MzMDY5ZjZjMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgA8FzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAJa4deRLVXRReIoYjxU4jlaEyd4yiYe9SeP6H2xXf41gE/MisiyYjG
5Osw7NkMhgrXfA1zQpJqY2eTD1Y9PqX/FCVXSqqW2kTuIpdPILX3qHwNZtjXgx/Z
eGfI4inez/Gh2zKMECmtBuLftXny2RLgtWW3h7q5zBjilx1NEFXmEgSmA5jUIW3o
/UKn40ELMF/JJmF4iU6XFbb7TwYoQ+3mCQ0Sxev+LazEhaVRsdFBTfZkI+zXLMuZ
PtWBvmLWO/83ne4Dzn7qgbOCKsdoSrbPYwdA+qspTjm+r+caMc7pNBhmkEd0nseB
KIsC3LQ/hmAVns9qe0hZJUuoPBgzSVdb
-----END CERTIFICATE-----
Generated at Sun May 4 23:47:41 2025 by rpki-client