Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa
File:                     40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa (raw, json)
Hash identifier:          Z0tnHbQTmNCUAgC3BoqVZ0bVRqXa96fKAeR9Hy+PPsk=
Subject key identifier:   EB:E4:55:97:3A:E1:7E:06:DE:BC:8A:25:4B:D8:24:30:02:1E:D1:5A
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848573AD7C6488CFF1660FB2600
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     3257
IP address blocks:        2001:49f0:d129::/48 maxlen: 48
                          2001:49f0:d12a::/48 maxlen: 48
                          2001:49f0:d12b::/48 maxlen: 48
                          2001:49f0:d12c::/48 maxlen: 48
                          2001:49f0:d12d::/48 maxlen: 48
                          2001:49f0:d12e::/48 maxlen: 48
                          2001:49f0:d12f::/48 maxlen: 48
                          2001:49f0:d130::/48 maxlen: 48
                          2001:49f0:d131::/48 maxlen: 48
                          2001:49f0:d132::/48 maxlen: 48
                          2001:49f0:d134::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:d7:c6:48:8c:ff:16:60:fb:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=ce7943b9-2824-43fa-a8a9-7017ac7691db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:15:07:05:10:ec:7d:85:c9:51:4e:23:c8:
                    7b:ab:5b:4e:e2:a8:a1:6e:4f:35:27:30:23:52:6b:
                    48:d0:7e:a7:b9:7f:4d:b1:ce:e5:6e:32:71:59:7e:
                    77:14:52:ee:40:83:9f:18:60:b4:3b:53:98:97:c1:
                    50:d7:f1:93:ff:da:d8:cc:08:44:a3:24:c6:5b:b3:
                    d2:67:2a:a5:0a:7a:0f:4e:8e:ef:cb:84:0e:d9:48:
                    3a:55:af:ee:fd:a3:4c:e1:49:c4:fd:8b:cd:8c:1d:
                    c6:80:13:da:2b:8d:d9:21:d1:4a:1f:a8:ff:ef:a4:
                    7a:b5:e1:f7:94:5f:e7:43:25:32:7c:e6:49:81:72:
                    9f:0c:8b:5a:e0:89:8e:65:e9:30:07:91:60:1f:58:
                    5d:ad:d3:5c:2c:7f:d9:2e:0c:b9:ab:76:bb:6b:ce:
                    7c:da:8a:e9:f2:6d:79:e1:28:57:05:6f:06:30:ed:
                    07:fc:b7:c0:8f:f9:de:f4:8c:a3:f2:c5:69:65:66:
                    9d:9b:53:67:a3:c8:77:a4:03:99:6b:3e:4a:cc:5c:
                    a6:75:46:2f:32:d5:47:6b:c2:22:b5:fb:b1:a4:2b:
                    76:67:94:29:f7:c9:96:95:03:26:55:44:2a:5d:68:
                    2b:46:7e:19:6e:e7:ca:94:54:29:68:12:45:aa:f7:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E4:55:97:3A:E1:7E:06:DE:BC:8A:25:4B:D8:24:30:02:1E:D1:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d129::-2001:49f0:d132:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:65:b1:d5:e9:de:6d:ee:4a:11:ec:5a:da:7b:71:a2:3b:
         e9:ab:48:64:68:35:68:37:77:4c:d1:30:a6:9a:94:eb:d9:de:
         9b:60:91:83:9c:4d:12:94:df:95:41:ae:fd:b5:e9:f1:90:8d:
         92:e1:83:40:86:a3:58:16:df:2a:37:5d:af:bd:75:3b:18:ab:
         93:ea:f7:f4:94:3b:8b:27:1b:28:bf:fc:44:e9:3e:ec:49:ba:
         69:3b:5b:c6:07:4d:5f:30:98:12:fd:41:26:13:6a:3a:23:e8:
         90:16:73:a0:06:ed:4c:4f:40:ae:35:77:9b:10:62:f4:eb:6a:
         f9:50:23:22:6e:35:b9:ec:a3:f1:58:60:f7:d0:c3:7e:0c:97:
         43:c4:5f:fe:af:29:3c:dc:31:d8:ff:86:cb:85:32:8d:6f:54:
         9a:3e:e4:75:f4:4a:ca:68:96:2d:24:17:b0:ea:88:cf:ca:af:
         62:8b:91:c7:a7:3c:ec:4e:93:4e:09:aa:f8:19:d4:46:58:2d:
         05:f2:1a:bc:ad:90:9a:b2:59:5f:b2:91:60:c3:44:37:40:9a:
         4e:31:df:91:b0:f6:06:5f:71:7f:6e:e1:43:6f:01:1d:d8:d3:
         54:a0:6a:ae:b7:f2:a1:a0:34:f6:85:87:1d:e5:a7:e6:b4:33:
         37:f0:39:56
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEhXOtfGSIz/FmD7JgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
Y2U3OTQzYjktMjgyNC00M2ZhLWE4YTktNzAxN2FjNzY5MWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCsVBwUQ7H2FyVFOI8h7q1tO4qihbk81JzAj
UmtI0H6nuX9Nsc7lbjJxWX53FFLuQIOfGGC0O1OYl8FQ1/GT/9rYzAhEoyTGW7PS
ZyqlCnoPTo7vy4QO2Ug6Va/u/aNM4UnE/YvNjB3GgBPaK43ZIdFKH6j/76R6teH3
lF/nQyUyfOZJgXKfDIta4ImOZekwB5FgH1hdrdNcLH/ZLgy5q3a7a8582orp8m15
4ShXBW8GMO0H/LfAj/ne9Iyj8sVpZWadm1Nno8h3pAOZaz5KzFymdUYvMtVHa8Ii
tfuxpCt2Z5Qp98mWlQMmVUQqXWgrRn4ZbufKlFQpaBJFqvcqiQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFOvkVZc64X4G3ryKJUvYJDACHtFaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNDBlZTJlZmItYmRmNS0z
M2ZiLTg2MzMtMDIyYmViY2JiMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwAgAUnw
0SkDBwAgAUnw0TIDBwAgAUnw0TQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVsxlsdXp3m3uShHsWtp7caI7
6atIZGg1aDd3TNEwppqU69nem2CRg5xNEpTflUGu/bXp8ZCNkuGDQIajWBbfKjdd
r711Oxirk+r39JQ7iycbKL/8ROk+7Em6aTtbxgdNXzCYEv1BJhNqOiPokBZzoAbt
TE9ArjV3mxBi9Otq+VAjIm41ueyj8Vhg99DDfgyXQ8Rf/q8pPNwx2P+Gy4UyjW9U
mj7kdfRKymiWLSQXsOqIz8qvYouRx6c87E6TTgmq+BnURlgtBfIavK2QmrJZX7KR
YMNEN0CaTjHfkbD2Bl9xf27hQ28BHdjTVKBqrrfyoaA09oWHHeWn5rQzN/A5Vg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:52 2025 by rpki-client