Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1ea78304-f867-38df-b225-352d8e1e451f.roa
File:                     1ea78304-f867-38df-b225-352d8e1e451f.roa (raw, json)
Hash identifier:          1hBYCsnUsPkL92GfPgSj4EBIpxChrTPe63mdBf3MokU=
Subject key identifier:   AD:BA:83:33:7D:E2:E1:FD:F5:3A:BD:40:58:DA:11:26:8A:70:73:9D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6CB1AAC9AA26A9561BD40
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1ea78304-f867-38df-b225-352d8e1e451f.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        2001:4c8:109f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:cb:1a:ac:9a:a2:6a:95:61:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=a7a8cded-2d98-4c58-b8b6-dc36319e0bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:94:fe:ca:92:6e:16:5e:e3:22:e7:dc:46:97:
                    e2:a2:74:ad:37:53:1d:0b:77:21:c2:8b:ee:10:89:
                    15:0f:c0:c3:56:d9:0c:21:b9:5b:07:b4:b3:a9:a0:
                    32:10:2d:c4:9f:04:d4:27:33:3d:69:47:c7:96:b3:
                    8f:bc:2c:af:5e:5c:2d:10:9d:a2:03:ad:df:d4:cc:
                    6c:46:01:69:0f:54:c3:9e:04:61:1e:e4:ac:5c:ee:
                    5e:f1:94:13:91:cf:fe:bf:0a:4b:aa:b5:32:87:eb:
                    19:a4:8d:4a:f1:26:08:22:3f:49:b3:42:18:80:ee:
                    12:b5:06:72:05:e4:e3:40:fe:4f:73:be:fa:ee:ed:
                    5c:1c:c9:8a:5b:15:88:a9:73:3c:a8:4d:47:73:3b:
                    a4:35:04:3e:5e:d0:04:64:a9:26:34:32:97:13:b0:
                    b5:8e:b4:fe:01:56:e3:57:c3:f1:6c:25:72:86:1f:
                    54:c4:de:a6:0b:c5:4d:7e:19:ec:ea:cf:54:76:0e:
                    37:7b:14:31:84:55:bb:dd:df:cf:97:b8:c5:67:bf:
                    1a:fc:82:6a:2c:a4:f6:ce:d1:a8:69:5c:c3:4a:59:
                    11:ea:af:a3:fb:86:d2:e3:81:2e:54:99:7f:09:19:
                    bd:13:4a:d8:e2:c4:7b:81:16:17:fc:a0:ad:cf:35:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BA:83:33:7D:E2:E1:FD:F5:3A:BD:40:58:DA:11:26:8A:70:73:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1ea78304-f867-38df-b225-352d8e1e451f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:109f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:52:df:30:49:e9:9d:b6:39:c7:8e:60:a4:d5:28:46:eb:db:
         b2:c2:99:dd:e3:09:ac:0f:22:0c:62:d5:af:48:25:c2:96:f6:
         b7:91:e4:58:0a:b1:06:f9:29:d6:f2:67:af:2c:c0:01:de:9c:
         ff:2a:e5:88:4c:ec:12:11:ec:56:6b:68:d3:2e:87:fd:e7:e1:
         b6:c6:2a:fe:a0:85:27:4f:e8:14:ff:f5:58:59:67:50:75:9d:
         4b:71:ca:e4:ae:87:05:f4:f3:d7:7b:ad:e7:98:23:46:4a:f5:
         1b:40:f6:33:e0:e5:1f:68:8f:ce:77:27:c7:86:ae:e5:d3:82:
         82:f1:a1:84:f5:be:df:1c:29:62:73:70:85:b6:d9:40:7a:85:
         4d:83:dd:d1:af:f5:09:ce:29:b3:11:14:00:6b:56:af:c4:d1:
         7c:4a:1d:59:f3:2c:2d:77:40:15:c4:86:bd:e5:dd:da:4c:d3:
         7e:78:9d:38:cc:35:50:f2:ff:83:28:f7:fb:cd:7b:a6:52:c8:
         87:81:c1:f8:68:65:b2:89:9b:1b:f4:75:49:82:be:3d:73:55:
         b5:35:9a:1a:30:01:18:4e:b5:14:31:30:21:08:89:0c:7c:c5:
         d2:4d:0b:1c:0a:51:6a:4c:f9:f4:1e:64:12:26:d3:23:d6:ff:
         cd:74:87:fc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkapssarJqiapVhvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
YTdhOGNkZWQtMmQ5OC00YzU4LWI4YjYtZGMzNjMxOWUwYmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pT+ypJuFl7jIufcRpfionStN1MdC3chwovu
EIkVD8DDVtkMIblbB7SzqaAyEC3EnwTUJzM9aUfHlrOPvCyvXlwtEJ2iA63f1Mxs
RgFpD1TDngRhHuSsXO5e8ZQTkc/+vwpLqrUyh+sZpI1K8SYIIj9Js0IYgO4StQZy
BeTjQP5Pc7767u1cHMmKWxWIqXM8qE1HczukNQQ+XtAEZKkmNDKXE7C1jrT+AVbj
V8PxbCVyhh9UxN6mC8VNfhns6s9Udg43exQxhFW73d/Pl7jFZ78a/IJqLKT2ztGo
aVzDSlkR6q+j+4bS44EuVJl/CRm9E0rY4sR7gRYX/KCtzzWehQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK26gzN94uH99Tq9QFjaESaKcHOdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMWVhNzgzMDQtZjg2Ny0z
OGRmLWIyMjUtMzUyZDhlMWU0NTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBCf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHZS3zBJ6Z22OceOYKTVKEbr27LCmd3jCawPIgxi1a9IJcKW9reR
5FgKsQb5KdbyZ68swAHenP8q5YhM7BIR7FZraNMuh/3n4bbGKv6ghSdP6BT/9VhZ
Z1B1nUtxyuSuhwX089d7reeYI0ZK9RtA9jPg5R9oj853J8eGruXTgoLxoYT1vt8c
KWJzcIW22UB6hU2D3dGv9QnOKbMRFABrVq/E0XxKHVnzLC13QBXEhr3l3dpM0354
nTjMNVDy/4Mo9/vNe6ZSyIeBwfhoZbKJmxv0dUmCvj1zVbU1mhowARhOtRQxMCEI
iQx8xdJNCxwKUWpM+fQeZBIm0yPW/810h/w=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:19:55 2025 by rpki-client