Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66a1e9f0-076e-3f0f-a8ad-b66d7458724b.roa
File:                     66a1e9f0-076e-3f0f-a8ad-b66d7458724b.roa (raw, json)
Hash identifier:          dzWXaGwJEl03o/K2/O3ty+sCvP48C8i5QM3/XP84ITY=
Subject key identifier:   B6:F2:F6:0B:66:4E:92:4F:F9:70:E6:46:45:D4:76:B0:C8:B6:D8:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B195F14232EE064062A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66a1e9f0-076e-3f0f-a8ad-b66d7458724b.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:8047::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:19:5f:14:23:2e:e0:64:06:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=ff6b484d-97fe-4a7f-8e0e-3421f6934d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fe:91:db:98:91:c4:93:ef:f1:70:03:3e:b4:
                    6d:b1:7e:86:fe:04:75:4f:0f:62:5c:0d:01:0b:33:
                    84:a2:98:35:a7:bf:53:42:fd:6a:fe:5c:fb:ac:d1:
                    d2:c4:57:58:00:01:e8:85:3c:ad:78:26:2a:04:68:
                    ee:3e:00:5f:4c:86:8a:0c:e6:3c:ad:10:46:90:11:
                    15:c1:ce:fd:65:0f:d4:d6:2c:b5:d2:58:01:39:a6:
                    46:b3:d9:a2:a8:17:98:42:77:20:11:27:1b:bc:4d:
                    5d:d8:79:3e:0b:75:01:02:99:8b:fb:92:6c:e2:52:
                    b9:08:19:cb:ba:27:b0:6c:d5:49:b0:5e:89:fd:e6:
                    23:2b:86:47:34:ac:67:48:d6:d8:46:cc:f3:53:47:
                    a9:89:6d:ba:e5:f4:46:72:20:a5:24:f1:eb:0a:f6:
                    63:3b:af:cc:f0:00:78:bd:b9:fd:bb:6b:91:c2:ca:
                    4f:d7:15:7f:18:8a:80:fa:3b:63:2b:01:be:93:a8:
                    8f:e8:eb:10:ce:6b:84:dc:8e:c3:83:ff:55:4d:87:
                    1a:43:21:df:e4:2e:29:f1:ad:fe:33:10:0f:d9:05:
                    f4:93:6d:d2:3a:fc:48:a4:40:93:22:e0:7f:f4:9b:
                    c0:a1:51:aa:9c:d4:7a:30:ce:20:18:43:58:18:61:
                    5b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F2:F6:0B:66:4E:92:4F:F9:70:E6:46:45:D4:76:B0:C8:B6:D8:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66a1e9f0-076e-3f0f-a8ad-b66d7458724b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8047::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5e:bc:7b:e5:74:f4:70:41:50:4a:54:af:44:70:af:22:38:
         03:90:76:5a:f5:cb:3d:ea:01:35:f0:f8:4d:51:ba:b3:2f:63:
         af:9b:1f:ec:2b:1c:83:3f:be:79:81:b0:6a:12:13:83:13:34:
         47:67:6e:ac:3d:e8:a3:b1:7d:7f:5b:72:bd:68:5e:e5:30:19:
         1b:c4:5f:71:e7:3a:74:be:ba:e3:f1:dc:78:3a:ca:46:56:ef:
         b5:a6:d7:11:48:1b:aa:ed:7b:9e:e2:47:2f:fb:f6:b1:db:30:
         d1:7f:8d:cb:3a:08:83:fb:02:95:08:e1:f5:8a:62:c1:fb:39:
         d9:07:30:60:e8:bc:a1:06:88:92:90:6a:5c:34:fa:2d:e0:1b:
         3f:5a:d4:c5:fd:c2:34:27:fa:a5:8c:9e:71:5b:60:28:0a:84:
         0d:83:65:66:6a:db:40:ee:9e:15:31:e9:07:2b:ce:c5:cf:21:
         65:e1:39:6f:eb:6a:a3:79:3e:19:4e:d8:79:11:a8:db:a3:c9:
         90:45:72:50:f8:00:68:c4:c6:d8:9e:50:26:e0:8f:e9:70:92:
         11:64:6f:81:8e:7e:1e:af:c6:8d:54:af:8c:5c:54:66:ba:c4:
         01:2e:7b:d4:3a:6e:08:5f:33:03:57:1f:c2:b4:f8:6d:18:3d:
         88:0a:a3:06
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhCSxlfFCMu4GQGKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmY2YjQ4NGQtOTdmZS00YTdmLThlMGUtMzQyMWY2OTM0ZDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf6R25iRxJPv8XADPrRtsX6G/gR1Tw9iXA0B
CzOEopg1p79TQv1q/lz7rNHSxFdYAAHohTyteCYqBGjuPgBfTIaKDOY8rRBGkBEV
wc79ZQ/U1iy10lgBOaZGs9miqBeYQncgEScbvE1d2Hk+C3UBApmL+5Js4lK5CBnL
uiewbNVJsF6J/eYjK4ZHNKxnSNbYRszzU0epiW265fRGciClJPHrCvZjO6/M8AB4
vbn9u2uRwspP1xV/GIqA+jtjKwG+k6iP6OsQzmuE3I7Dg/9VTYcaQyHf5C4p8a3+
MxAP2QX0k23SOvxIpECTIuB/9JvAoVGqnNR6MM4gGENYGGFbKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLby9gtmTpJP+XDmRkXUdrDIttjuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjZhMWU5ZjAtMDc2ZS0z
ZjBmLWE4YWQtYjY2ZDc0NTg3MjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKJevHvldPRwQVBKVK9EcK8iOAOQdlr1yz3qATXw+E1RurMvY6+b
H+wrHIM/vnmBsGoSE4MTNEdnbqw96KOxfX9bcr1oXuUwGRvEX3HnOnS+uuPx3Hg6
ykZW77Wm1xFIG6rte57iRy/79rHbMNF/jcs6CIP7ApUI4fWKYsH7OdkHMGDovKEG
iJKQalw0+i3gGz9a1MX9wjQn+qWMnnFbYCgKhA2DZWZq20DunhUx6QcrzsXPIWXh
OW/raqN5PhlO2HkRqNujyZBFclD4AGjExtieUCbgj+lwkhFkb4GOfh6vxo1Ur4xc
VGa6xAEue9Q6bghfMwNXH8K0+G0YPYgKowY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:58 2025 by rpki-client