Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa
File:                     5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa (raw, json)
Hash identifier:          aDvwlhZQWT8nY1QROXHiuJTI2wDF1k3aTcreMXNFpcw=
Subject key identifier:   E2:6D:E9:96:DE:5C:FB:69:A6:67:B2:54:20:AD:E0:E2:3D:46:D1:E8
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285848424AC72D71DC43C8376CD040
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     55081
IP address blocks:        2607:6b80:65::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:c7:2d:71:dc:43:c8:37:6c:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=fed41e4a-d567-4403-8851-27a1038f84ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:29:85:5f:54:56:b3:5b:a2:c0:fb:77:07:
                    34:cd:66:5c:62:96:65:9c:d5:73:78:f8:a9:fc:24:
                    61:0a:40:d2:1f:20:eb:61:95:80:a1:11:82:41:0b:
                    da:57:2c:33:8a:7b:aa:e1:49:bd:1b:67:59:74:be:
                    3a:2b:2f:37:d9:e6:07:ca:4f:a7:c1:6e:72:45:9a:
                    59:af:3e:5c:7c:dd:1b:1e:a1:6e:3e:11:1e:14:6c:
                    ba:80:b7:57:da:a2:ea:eb:ec:21:cf:cc:fa:d9:6e:
                    16:a5:2f:d8:9d:c5:af:34:55:d5:46:23:07:1a:9b:
                    d5:19:5d:aa:ee:d0:f5:0c:63:42:8a:3b:d9:ac:7c:
                    d8:85:ef:7a:ad:53:8f:00:f9:44:e4:a0:26:69:fd:
                    6a:94:61:1b:8f:20:83:4c:12:47:8f:f0:fd:30:12:
                    02:85:7b:ab:9c:24:77:48:6b:b8:9f:42:5a:73:13:
                    19:06:43:0e:79:4d:66:64:25:3b:30:bc:cf:30:c7:
                    0b:d2:e3:21:66:fa:01:65:b1:82:3a:94:66:68:54:
                    ed:23:d0:e3:77:58:d7:c2:39:4e:9f:ff:3f:46:23:
                    48:8f:4d:56:9a:86:4d:99:1a:9f:92:18:62:3e:c4:
                    d7:ca:fb:31:9e:97:13:01:99:b8:50:dc:d0:35:1f:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6D:E9:96:DE:5C:FB:69:A6:67:B2:54:20:AD:E0:E2:3D:46:D1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:65::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:48:8b:d2:e4:70:be:ab:d1:d3:c5:2f:ca:bf:a3:e4:77:1a:
         2d:11:7d:ae:c4:c9:50:ca:9e:f0:27:dc:c6:1c:39:7e:b0:19:
         40:25:4c:8e:7e:c7:0e:25:9d:ed:ed:2f:c5:e2:f7:0a:ca:10:
         9d:d1:c0:88:58:07:6c:70:31:70:23:ce:f0:db:58:46:5a:41:
         18:24:b3:0b:7f:1c:88:d5:0a:09:56:a8:0c:06:b7:46:42:f5:
         31:60:f2:44:04:b6:42:23:92:c3:e1:75:d9:f2:86:02:c5:cd:
         09:cf:b7:4a:aa:5d:2b:d9:4c:22:8b:5a:a4:1a:98:36:5e:29:
         a5:78:78:2d:09:f3:99:1b:d6:58:6c:3e:03:30:fa:72:d9:d7:
         9d:42:3e:51:74:5a:67:01:7b:1b:56:45:9a:1c:7d:7e:3b:2a:
         0a:34:33:19:83:69:53:39:13:91:8e:dd:cb:60:ea:4b:e8:2b:
         27:86:a9:4a:4a:4a:28:49:7a:30:88:be:f8:7c:9f:df:4e:6d:
         30:f9:58:68:70:87:3a:c0:91:34:c3:2d:b6:09:32:fd:2e:5d:
         0a:d5:22:73:51:cd:e1:2a:36:6f:ba:b1:31:8f:79:1f:2d:23:
         10:52:f0:8a:46:48:59:b8:a5:8a:8f:5d:b0:8c:6d:ad:01:6d:
         10:7e:72:b7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhCSsctcdxDyDds0EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmVkNDFlNGEtZDU2Ny00NDAzLTg4NTEtMjdhMTAzOGY4NGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudUphV9UVrNbosD7dwc0zWZcYpZlnNVzePip
/CRhCkDSHyDrYZWAoRGCQQvaVywzinuq4Um9G2dZdL46Ky832eYHyk+nwW5yRZpZ
rz5cfN0bHqFuPhEeFGy6gLdX2qLq6+whz8z62W4WpS/YncWvNFXVRiMHGpvVGV2q
7tD1DGNCijvZrHzYhe96rVOPAPlE5KAmaf1qlGEbjyCDTBJHj/D9MBIChXurnCR3
SGu4n0JacxMZBkMOeU1mZCU7MLzPMMcL0uMhZvoBZbGCOpRmaFTtI9Djd1jXwjlO
n/8/RiNIj01WmoZNmRqfkhhiPsTXyvsxnpcTAZm4UNzQNR+dwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOJt6ZbeXPtppmeyVCCt4OI9RtHoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvNWQ4ZjNmZTEtZTkwNS0z
YmM0LWE2ZjEtZTFmZmE0NmVlYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdrgABl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH5Ii9LkcL6r0dPFL8q/o+R3Gi0Rfa7EyVDKnvAn3MYcOX6wGUAl
TI5+xw4lne3tL8Xi9wrKEJ3RwIhYB2xwMXAjzvDbWEZaQRgkswt/HIjVCglWqAwG
t0ZC9TFg8kQEtkIjksPhddnyhgLFzQnPt0qqXSvZTCKLWqQamDZeKaV4eC0J85kb
1lhsPgMw+nLZ151CPlF0WmcBextWRZocfX47Kgo0MxmDaVM5E5GO3ctg6kvoKyeG
qUpKSihJejCIvvh8n99ObTD5WGhwhzrAkTTDLbYJMv0uXQrVInNRzeEqNm+6sTGP
eR8tIxBS8IpGSFm4pYqPXbCMba0BbRB+crc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:02 2025 by rpki-client