Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/993092f6-e94c-3e8a-b3a3-55e854404374.roa
File:                     993092f6-e94c-3e8a-b3a3-55e854404374.roa (raw, json)
Hash identifier:          mHYPEXqtJ/z5Mh+6TNzQ+0SaQ/9WlED4BwaFYJgLi/k=
Subject key identifier:   8F:16:77:32:C3:62:49:0D:F2:20:6E:8D:6B:F7:FF:F8:3A:EC:46:AC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D01CC0BF3393F84EE33AE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/993092f6-e94c-3e8a-b3a3-55e854404374.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     15353
IP address blocks:        2001:470:26d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:1c:c0:bf:33:93:f8:4e:e3:3a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=ceed67e1-c0e5-4f95-b991-69c9cd3f8f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:ae:52:00:5a:b1:b3:90:1a:92:c3:ee:d8:
                    55:bb:b0:ab:16:b3:2c:7e:8c:7e:71:73:85:2b:7b:
                    f3:e9:65:4c:fb:66:4d:49:ef:4e:ca:7b:2e:0d:53:
                    bb:2a:b6:ea:29:f6:9f:96:e9:63:d8:40:8c:ec:fa:
                    c2:57:4b:91:dd:e8:48:ba:6d:09:79:a4:31:84:a2:
                    6c:67:f2:8e:12:a8:46:32:92:fa:16:71:b2:3d:b3:
                    45:85:1d:be:7b:2d:1e:25:1d:7a:84:0c:e6:bd:f6:
                    01:0d:a2:e6:8a:02:de:eb:79:68:ca:1e:9c:53:83:
                    83:86:e4:ab:7a:ba:46:9c:64:38:73:06:ec:2a:14:
                    c0:1f:83:af:6b:de:ea:ab:4f:75:b9:0f:57:46:ec:
                    8b:1d:05:07:95:bf:c2:78:39:f0:72:93:6a:94:c8:
                    85:21:76:fc:3a:68:2c:5b:2b:31:25:18:bb:f2:48:
                    3c:44:0f:49:d0:18:5e:9a:a9:7b:9e:ac:0f:6d:13:
                    f4:08:41:47:f3:75:f2:74:44:f2:40:69:2e:5d:ad:
                    cc:c6:85:d5:d5:90:09:58:7c:60:2e:82:92:54:fc:
                    39:f7:87:87:d3:3d:3e:89:e7:c8:58:96:b3:2f:77:
                    21:a9:97:b4:58:ad:5f:72:e7:83:04:a5:8c:44:10:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:77:32:C3:62:49:0D:F2:20:6E:8D:6B:F7:FF:F8:3A:EC:46:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/993092f6-e94c-3e8a-b3a3-55e854404374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:26d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:cf:b3:84:55:5d:9c:c7:46:f5:a2:3f:6d:4a:20:f2:ba:81:
         3e:4b:f9:7d:fd:26:5c:66:32:97:f9:e1:43:57:a5:a0:1c:18:
         a7:b6:5a:58:86:4d:ef:2e:ea:01:99:80:a3:53:cb:2e:44:77:
         85:08:56:35:2d:d8:44:22:4b:a5:66:7f:05:cf:7d:b0:f3:a6:
         4c:76:46:4b:ea:d8:72:20:e3:a1:3d:6a:9f:2b:62:80:f9:c8:
         89:38:ce:36:e2:67:de:69:ca:74:87:7e:31:bd:b9:47:07:9b:
         88:28:9e:3f:fd:4a:0c:1d:94:b0:de:8b:e3:7b:b0:9f:3f:04:
         82:83:9d:cd:21:d4:36:76:85:5c:c4:49:e0:59:ee:99:69:60:
         ea:7f:2f:a7:2f:64:40:76:58:19:31:14:24:78:ae:4e:20:a2:
         0f:0f:d7:a1:30:36:ad:da:61:d7:d3:36:8d:66:06:1b:5f:c8:
         30:23:b5:80:2e:d3:58:cb:9d:bb:62:fd:3c:01:02:12:51:e3:
         44:e9:3c:97:83:47:d1:d0:33:dd:4c:d4:39:4f:43:1a:d0:db:
         9d:f2:07:a2:1a:97:69:b9:b8:f9:4f:fd:3a:cb:db:5e:02:52:
         80:a3:5a:86:8e:24:6a:da:72:af:92:52:e8:6d:24:4c:74:8d:
         14:0d:b8:7f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0BzAvzOT+E7jOuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
Y2VlZDY3ZTEtYzBlNS00Zjk1LWI5OTEtNjljOWNkM2Y4ZjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJKuUgBasbOQGpLD7thVu7CrFrMsfox+cXOF
K3vz6WVM+2ZNSe9OynsuDVO7KrbqKfaflulj2ECM7PrCV0uR3ehIum0JeaQxhKJs
Z/KOEqhGMpL6FnGyPbNFhR2+ey0eJR16hAzmvfYBDaLmigLe63loyh6cU4ODhuSr
erpGnGQ4cwbsKhTAH4Ova97qq091uQ9XRuyLHQUHlb/CeDnwcpNqlMiFIXb8Omgs
WysxJRi78kg8RA9J0Bhemql7nqwPbRP0CEFH83XydETyQGkuXa3MxoXV1ZAJWHxg
LoKSVPw594eH0z0+iefIWJazL3chqZe0WK1fcueDBKWMRBDt7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI8WdzLDYkkN8iBujWv3//g67EasMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTkzMDkyZjYtZTk0Yy0z
ZThhLWIzYTMtNTVlODU0NDA0Mzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKTPs4RVXZzHRvWiP21KIPK6gT5L+X39JlxmMpf54UNXpaAcGKe2
WliGTe8u6gGZgKNTyy5Ed4UIVjUt2EQiS6VmfwXPfbDzpkx2Rkvq2HIg46E9ap8r
YoD5yIk4zjbiZ95pynSHfjG9uUcHm4gonj/9SgwdlLDei+N7sJ8/BIKDnc0h1DZ2
hVzESeBZ7plpYOp/L6cvZEB2WBkxFCR4rk4gog8P16EwNq3aYdfTNo1mBhtfyDAj
tYAu01jLnbti/TwBAhJR40TpPJeDR9HQM91M1DlPQxrQ253yB6Ial2m5uPlP/TrL
214CUoCjWoaOJGracq+SUuhtJEx0jRQNuH8=
-----END CERTIFICATE-----
Generated at Tue May 6 20:42:34 2025 by rpki-client