Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa
File:                     724a3de3-fa7b-350e-9620-6cb73ca032ec.roa (raw, json)
Hash identifier:          PMcJRlolnQSrWlJpK5uGyR9DzKi3rgdGC7QVc1gxpaw=
Subject key identifier:   B0:FD:5C:83:0E:D7:6D:1E:45:E3:84:25:0D:21:AB:48:D1:A0:1D:64
Certificate issuer:       /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51
Certificate serial:       010D0C9F4328584819CFCB360F40D07F26302480
Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     395823
IP address blocks:        2602:fce8::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:cb:36:0f:40:d0:7f:26:30:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=aa0a35ac-6e9f-4af0-8683-f5595666fe00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:b0:e7:32:29:b9:cb:5c:e0:91:cc:38:5d:
                    36:c4:bf:f8:84:91:5d:52:f4:78:a9:20:88:77:a7:
                    eb:47:a8:d2:93:fe:3b:c8:26:7c:23:f4:47:55:f2:
                    66:19:c4:ec:4e:3c:5d:60:8f:f9:2d:ff:21:23:5c:
                    ba:93:ca:ae:ca:21:b4:25:22:72:9b:51:42:fe:11:
                    ab:c4:71:a5:b8:e6:59:b6:3b:7d:be:87:ca:ac:bc:
                    88:bd:f5:ab:2b:65:9d:06:6c:1e:15:19:0e:d6:c0:
                    75:f1:72:0a:0c:33:c9:72:9b:f6:15:ff:e7:12:a8:
                    4e:72:d8:be:0b:55:a3:52:58:e8:47:5d:2d:61:9c:
                    f3:97:23:99:03:b3:6e:9b:b2:c6:22:4a:ca:ef:6c:
                    dc:9c:e4:67:f1:26:33:b6:3a:5a:66:2d:0d:79:a1:
                    d3:3c:da:3c:9f:a0:fb:54:81:44:39:8c:5f:21:b3:
                    78:a1:59:86:cf:b9:26:0f:6e:de:59:f7:1e:8e:27:
                    55:c0:a7:91:e3:aa:70:51:94:73:a6:28:38:14:9e:
                    db:60:e8:51:9e:43:de:1e:94:e5:10:3c:f8:c1:9d:
                    06:1d:a4:c3:3b:b4:77:22:a2:66:e5:60:ff:17:1b:
                    fc:33:ae:a2:f9:df:2f:2d:76:c9:f2:8d:32:3d:86:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FD:5C:83:0E:D7:6D:1E:45:E3:84:25:0D:21:AB:48:D1:A0:1D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl

            X509v3 Authority Key Identifier:
                keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fce8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:7b:f4:23:ed:69:45:7a:85:87:56:02:eb:de:6f:83:0e:26:
         f2:dd:12:64:dc:f9:c4:70:b3:11:da:6d:9c:cd:76:aa:bf:ed:
         a3:05:ef:fc:80:92:f8:de:ae:ad:87:8d:6e:6e:e6:ed:0b:30:
         a9:56:71:d1:6f:9f:a3:87:61:03:a1:b2:60:7f:bf:b3:a9:80:
         f6:91:22:a7:ec:a2:17:fb:0e:6c:4c:b2:a7:95:b2:11:92:42:
         d6:45:0b:2d:8b:9b:2f:16:0e:99:27:1a:81:b5:94:12:4f:71:
         d8:3b:1f:6b:7d:f1:17:8c:28:80:e6:88:16:0a:77:b5:ba:35:
         41:c2:74:68:74:ea:9c:20:4b:9c:cc:ec:4d:98:a8:01:13:0e:
         78:50:48:43:1d:d7:ca:97:3c:0c:27:17:f3:d0:ba:89:94:39:
         52:51:53:6c:f7:c4:ba:d8:d0:4b:c1:1b:ac:a4:69:4f:b4:22:
         14:7f:a5:29:b7:44:1a:7d:25:8f:39:ea:11:80:58:c5:6a:2c:
         01:d6:fa:39:86:d1:07:f4:1b:1b:4f:e5:15:cf:89:d9:28:b9:
         21:b3:da:4c:af:5a:d1:88:34:c9:ee:0d:2e:15:b8:07:a7:bb:
         b3:0e:02:4d:68:eb:f1:3f:11:e3:9d:74:1f:7e:2c:72:4c:2d:
         28:d0:a9:2b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgZz8s2D0DQfyYwJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE0ZTVlNjctNDE2MS00YTJkLWJkNzMtMmRlYjVmMWQ4
ZjUxMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YWEwYTM1YWMtNmU5Zi00YWYwLTg2ODMtZjU1OTU2NjZmZTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQiw5zIpuctc4JHMOF02xL/4hJFdUvR4qSCI
d6frR6jSk/47yCZ8I/RHVfJmGcTsTjxdYI/5Lf8hI1y6k8quyiG0JSJym1FC/hGr
xHGluOZZtjt9vofKrLyIvfWrK2WdBmweFRkO1sB18XIKDDPJcpv2Ff/nEqhOcti+
C1WjUljoR10tYZzzlyOZA7Num7LGIkrK72zcnORn8SYztjpaZi0NeaHTPNo8n6D7
VIFEOYxfIbN4oVmGz7kmD27eWfcejidVwKeR46pwUZRzpig4FJ7bYOhRnkPeHpTl
EDz4wZ0GHaTDO7R3IqJm5WD/Fxv8M66i+d8vLXbJ8o0yPYaQ0QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLD9XIMO120eReOEJQ0hq0jRoB1kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRl
NWU2Ny00MTYxLTRhMmQtYmQ3My0yZGViNWYxZDhmNTEvNzI0YTNkZTMtZmE3Yi0z
NTBlLTk2MjAtNmNiNzNjYTAzMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE0ZTVlNjctNDE2MS00YTJkLWJk
NzMtMmRlYjVmMWQ4ZjUxL2UxNGU1ZTY3LTQxNjEtNGEyZC1iZDczLTJkZWI1ZjFk
OGY1MS5jcmwwHwYDVR0jBBgwFoAUG9dxIb6YBpSp8yztchxJVEi+aecwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRlNWU2Ny00MTYxLTRhMmQtYmQ3My0yZGVi
NWYxZDhmNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL86AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcHv0I+1pRXqFh1YC695vgw4m8t0SZNz5xHCzEdptnM12qr/towXv
/ICS+N6urYeNbm7m7QswqVZx0W+fo4dhA6GyYH+/s6mA9pEip+yiF/sObEyyp5Wy
EZJC1kULLYubLxYOmScagbWUEk9x2Dsfa33xF4wogOaIFgp3tbo1QcJ0aHTqnCBL
nMzsTZioARMOeFBIQx3Xypc8DCcX89C6iZQ5UlFTbPfEutjQS8EbrKRpT7QiFH+l
KbdEGn0ljznqEYBYxWosAdb6OYbRB/QbG0/lFc+J2Si5IbPaTK9a0Yg0ye4NLhW4
B6e7sw4CTWjr8T8R4510H34sckwtKNCpKw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:32:04 2025 by rpki-client