Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/09ee371d-db17-35a1-95c0-fbdbefe48a84.roa
File:                     09ee371d-db17-35a1-95c0-fbdbefe48a84.roa (raw, json)
Hash identifier:          NRsvYltUEWBQ1uLtMte4g6ibZxWtdmbIigUay1m93AQ=
Subject key identifier:   7B:00:F2:25:BB:CB:31:46:B1:84:E6:4B:7A:32:8B:1F:5B:C4:87:3E
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584871C0718C068C804C65FF73A0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/09ee371d-db17-35a1-95c0-fbdbefe48a84.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2620:116:800a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:71:8c:06:8c:80:4c:65:ff:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=5be902ac-14a3-4b41-8e89-0d7741c6cd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:57:78:49:0d:76:c6:6b:13:0a:28:17:8f:
                    50:fe:39:18:71:ae:7e:ee:22:cf:ce:6a:a6:b3:a4:
                    b0:10:91:9d:c4:aa:5f:25:9b:c2:8a:5e:48:4b:e4:
                    ab:1f:fb:4a:3a:c4:63:76:27:1d:68:64:db:f7:f2:
                    1c:53:cf:44:29:e8:d5:d9:ec:2e:a6:42:68:6a:14:
                    e3:11:65:83:d2:14:22:d8:73:bb:7a:df:25:49:74:
                    87:85:50:40:b8:df:3e:c3:03:6f:1f:80:08:5a:96:
                    cc:fe:5d:52:86:3a:17:28:d6:ea:42:41:b6:c9:f0:
                    b6:77:7c:64:87:7d:8e:a9:64:c6:a7:28:ec:68:0a:
                    81:63:a9:25:14:1b:02:fa:84:ea:7d:f3:29:f1:83:
                    43:50:d0:b9:97:2a:8d:ad:53:98:a3:cf:47:2f:ff:
                    3b:fe:a6:bf:bb:1b:fc:0b:ba:eb:39:1b:24:a4:a0:
                    8c:e1:4e:4d:c7:d4:25:63:3e:35:2e:56:91:50:53:
                    c5:92:52:dd:5e:d8:40:62:07:d8:9b:7d:21:b0:34:
                    48:21:59:0b:ba:c6:cb:6d:f7:f4:a6:9d:a7:46:3a:
                    ae:00:a9:ee:b7:ab:62:88:cd:a9:e0:61:75:5f:a0:
                    c9:09:2c:a9:f5:e6:3c:ca:75:f2:88:94:91:95:35:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:00:F2:25:BB:CB:31:46:B1:84:E6:4B:7A:32:8B:1F:5B:C4:87:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/09ee371d-db17-35a1-95c0-fbdbefe48a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fb:c3:02:ea:b4:03:19:cf:85:59:ae:d4:f1:1f:fa:4c:f1:
         b0:44:4f:8d:f9:8a:75:45:01:da:9d:96:b6:67:d0:01:74:40:
         fe:7a:14:02:5c:ed:19:72:10:f2:0f:1b:21:0d:79:fd:cd:4e:
         37:67:e9:ad:a9:4f:e3:a0:03:ac:0b:13:65:6d:6b:a5:aa:7e:
         98:ac:86:43:2e:db:d4:0c:95:04:02:ad:3a:32:7c:10:34:56:
         83:ec:49:8c:db:10:cd:08:32:f2:63:89:88:0c:49:7c:6d:07:
         72:d2:de:fd:bc:42:d5:a5:21:2a:0f:cc:79:fa:51:48:81:52:
         e7:a5:64:ef:e1:d9:07:d9:fa:55:72:82:8d:99:e7:3f:3e:91:
         4e:13:39:40:f5:6b:32:e4:47:3c:a6:6a:25:b5:8b:25:0e:ae:
         36:72:57:0e:c5:7a:36:5f:ec:f5:9f:55:da:76:09:a9:56:f0:
         6d:9d:4a:e6:74:ea:6e:50:8f:92:b3:70:44:f6:28:50:82:df:
         90:7e:5f:fe:cf:9f:bf:95:52:54:e3:8d:c5:f8:0e:87:f1:a4:
         ac:97:e4:69:c1:06:15:b1:b4:63:f8:34:4d:46:8d:ef:08:b2:
         34:7d:77:a3:7e:2c:50:6b:04:8b:12:fb:01:5b:06:01:00:d2:
         2f:6b:99:ba
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhxwHGMBoyATGX/c6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NWJlOTAyYWMtMTRhMy00YjQxLThlODktMGQ3NzQxYzZjZDNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiydXeEkNdsZrEwooF49Q/jkYca5+7iLPzmqm
s6SwEJGdxKpfJZvCil5IS+SrH/tKOsRjdicdaGTb9/IcU89EKejV2ewupkJoahTj
EWWD0hQi2HO7et8lSXSHhVBAuN8+wwNvH4AIWpbM/l1ShjoXKNbqQkG2yfC2d3xk
h32OqWTGpyjsaAqBY6klFBsC+oTqffMp8YNDUNC5lyqNrVOYo89HL/87/qa/uxv8
C7rrORskpKCM4U5Nx9QlYz41LlaRUFPFklLdXthAYgfYm30hsDRIIVkLusbLbff0
pp2nRjquAKnut6tiiM2p4GF1X6DJCSyp9eY8ynXyiJSRlTUf2QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHsA8iW7yzFGsYTmS3oyix9bxIc+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMDllZTM3MWQtZGIxNy0z
NWExLTk1YzAtZmJkYmVmZTQ4YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAX7wwLqtAMZz4VZrtTxH/pM8bBET435inVFAdqdlrZn0AF0QP56
FAJc7RlyEPIPGyENef3NTjdn6a2pT+OgA6wLE2Vta6WqfpishkMu29QMlQQCrToy
fBA0VoPsSYzbEM0IMvJjiYgMSXxtB3LS3v28QtWlISoPzHn6UUiBUuelZO/h2QfZ
+lVygo2Z5z8+kU4TOUD1azLkRzymaiW1iyUOrjZyVw7FejZf7PWfVdp2CalW8G2d
SuZ06m5Qj5KzcET2KFCC35B+X/7Pn7+VUlTjjcX4DofxpKyX5GnBBhWxtGP4NE1G
je8IsjR9d6N+LFBrBIsS+wFbBgEA0i9rmbo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:31 2025 by rpki-client