Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0b25c7a2-3e70-3b86-bed5-b6884143a551.roa
File:                     0b25c7a2-3e70-3b86-bed5-b6884143a551.roa (raw, json)
Hash identifier:          mk9oEfk5lSmP9UxOPGcpMljlaMSKeJrK6kPvAB2vYmA=
Subject key identifier:   C3:BE:C2:2C:F8:A3:9D:4D:30:21:34:73:C5:1E:74:FF:07:F9:0F:50
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246FF1830A44D18C0A865C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0b25c7a2-3e70-3b86-bed5-b6884143a551.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397239
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ff:18:30:a4:4d:18:c0:a8:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=7dee56ea-14c5-4095-93fc-9e49d80fa083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:7c:ab:31:01:d0:36:a7:f4:36:d5:6c:03:
                    f4:5b:39:e3:56:8a:d1:a0:f2:94:e9:53:e9:dc:ef:
                    33:d7:e3:64:99:8c:ee:30:de:01:08:22:8f:a4:13:
                    f6:3a:27:5f:f2:f6:6f:82:ff:18:34:eb:33:a4:73:
                    fa:27:af:82:44:1c:1e:94:18:0a:d6:35:d3:95:c8:
                    b6:1d:55:21:c2:fb:7a:ad:e6:5f:b5:8c:7c:07:0e:
                    70:ad:1f:57:41:3f:c6:c4:bc:eb:ef:43:6f:3b:ce:
                    e2:a0:1f:26:f5:07:bd:73:2f:9d:82:e6:cf:0e:5e:
                    54:c9:57:f7:e0:1a:af:31:f7:0f:7a:e2:06:5f:77:
                    cf:97:28:ae:d3:c6:38:79:35:ae:03:fd:0c:8a:24:
                    74:0f:84:2a:f1:be:7e:0d:27:f1:a3:63:8d:28:75:
                    a1:dc:3e:bd:ac:64:42:08:40:5e:22:fd:34:48:55:
                    f8:7c:33:44:a2:af:e5:32:25:bd:2c:3e:ee:f0:35:
                    61:a7:49:c9:d4:2c:7a:fa:9c:bd:2a:bd:cd:9a:e8:
                    28:c9:a2:7e:ff:a2:67:8b:52:e1:8e:90:96:17:cf:
                    03:cc:34:80:1f:fc:fc:44:34:7d:71:16:33:e6:fc:
                    0b:10:d9:5d:03:98:49:53:14:44:ef:13:9c:68:fc:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BE:C2:2C:F8:A3:9D:4D:30:21:34:73:C5:1E:74:FF:07:F9:0F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0b25c7a2-3e70-3b86-bed5-b6884143a551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b4:0a:e1:6e:d9:ae:43:2c:72:66:ef:8f:09:f6:18:f2:e4:
         75:44:5e:bf:57:c0:df:de:36:49:db:25:69:8d:21:97:12:09:
         d3:72:34:2d:f1:84:d2:12:45:2a:12:0b:f0:4e:22:cc:c7:d2:
         3b:8a:1a:c3:34:20:a3:70:43:44:28:bc:f2:00:a5:ee:2e:bd:
         af:09:17:21:69:c6:c3:dc:71:29:50:13:a5:bb:3d:e6:97:35:
         01:b1:ac:b0:a9:d7:f9:54:c2:58:ec:40:af:9d:1e:27:b3:d8:
         19:00:ab:3e:93:f0:48:00:16:f4:19:35:82:d3:56:82:fa:9f:
         25:89:b7:b1:85:bc:20:7d:85:c5:db:fb:57:00:51:39:fb:84:
         9f:4a:c2:2e:3c:07:d1:b1:b9:a9:a0:7d:7c:23:eb:ab:63:f4:
         61:06:d7:cd:2c:8c:62:93:10:5e:b1:6b:1e:90:46:a2:83:dd:
         a1:1e:82:75:00:6f:90:a7:fb:57:37:a4:9f:fa:00:e9:af:e3:
         ee:6b:5f:9f:03:2c:e1:ae:b4:6b:66:5f:86:f4:32:62:eb:c5:
         d0:85:b6:11:9b:76:04:29:12:d9:be:ea:71:d3:59:c0:76:08:
         28:0c:ca:3a:2c:bc:ac:a9:5c:e7:05:88:82:7e:ad:8a:40:a0:
         9b:cd:31:1f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkSRv8YMKRNGMCoZcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
N2RlZTU2ZWEtMTRjNS00MDk1LTkzZmMtOWU0OWQ4MGZhMDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmll8qzEB0Dan9DbVbAP0WznjVorRoPKU6VPp
3O8z1+NkmYzuMN4BCCKPpBP2Oidf8vZvgv8YNOszpHP6J6+CRBwelBgK1jXTlci2
HVUhwvt6reZftYx8Bw5wrR9XQT/GxLzr70NvO87ioB8m9Qe9cy+dgubPDl5UyVf3
4BqvMfcPeuIGX3fPlyiu08Y4eTWuA/0MiiR0D4Qq8b5+DSfxo2ONKHWh3D69rGRC
CEBeIv00SFX4fDNEoq/lMiW9LD7u8DVhp0nJ1Cx6+py9Kr3NmugoyaJ+/6Jni1Lh
jpCWF88DzDSAH/z8RDR9cRYz5vwLENldA5hJUxRE7xOcaPzwuQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMO+wiz4o51NMCE0c8UedP8H+Q9QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGIyNWM3YTItM2U3MC0z
Yjg2LWJlZDUtYjY4ODQxNDNhNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoRAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbbQK4W7ZrkMscmbvjwn2GPLkdURev1fA3942SdslaY0hlxIJ03I0
LfGE0hJFKhIL8E4izMfSO4oawzQgo3BDRCi88gCl7i69rwkXIWnGw9xxKVATpbs9
5pc1AbGssKnX+VTCWOxAr50eJ7PYGQCrPpPwSAAW9Bk1gtNWgvqfJYm3sYW8IH2F
xdv7VwBROfuEn0rCLjwH0bG5qaB9fCPrq2P0YQbXzSyMYpMQXrFrHpBGooPdoR6C
dQBvkKf7Vzekn/oA6a/j7mtfnwMs4a60a2ZfhvQyYuvF0IW2EZt2BCkS2b7qcdNZ
wHYIKAzKOiy8rKlc5wWIgn6tikCgm80xHw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:37:16 2025 by rpki-client