Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2ff1042-9f50-3b9b-a419-c464e12258f7.roa
File:                     a2ff1042-9f50-3b9b-a419-c464e12258f7.roa (raw, json)
Hash identifier:          eNxAoh2ulUEAQAwl3T5HSQQdo+gjigc6rmp9ue4gADY=
Subject key identifier:   03:2A:A1:FD:28:B5:E1:C5:7E:E3:E6:D1:1D:6F:97:C7:6B:BA:A6:E9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584925B3B5A21C7E8E7F9B1A13C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2ff1042-9f50-3b9b-a419-c464e12258f7.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     399164
IP address blocks:        2610:a1:3200::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:b5:a2:1c:7e:8e:7f:9b:1a:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=086e8682-b0f2-49a2-b4b2-2da06a61c957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:61:08:44:df:b1:d1:84:b3:90:ed:c7:d2:
                    37:fb:91:4d:1e:d3:0c:6f:75:f9:4a:94:69:a9:8a:
                    b1:7d:ed:54:68:dc:95:c2:a9:9a:4a:6b:42:f1:21:
                    ae:fe:52:64:29:7e:5f:5b:c2:d2:de:9c:02:c8:14:
                    b5:0d:dd:4b:da:a7:75:2f:04:9f:47:92:8d:4d:7b:
                    1c:6c:61:cc:02:bf:87:d4:75:3d:ee:dc:73:e9:c7:
                    40:ba:47:d0:27:1b:90:6f:01:5c:94:4e:67:48:59:
                    9c:b5:65:9d:8d:e8:d9:09:3f:71:c9:af:5f:63:e3:
                    7c:e4:56:03:7b:8f:b8:fe:cc:72:df:89:25:4b:0f:
                    8f:87:e4:ca:c2:09:b4:c6:4c:2e:76:5e:21:22:1c:
                    fb:10:e0:33:53:d9:98:56:38:40:d9:28:74:f2:9e:
                    7c:5a:78:e8:95:bf:c9:dd:ed:e7:97:46:3e:a4:06:
                    a9:8f:08:3a:52:de:2c:fc:14:de:a4:cb:fc:93:4c:
                    36:74:2c:cd:1c:79:87:80:e2:12:94:fc:ab:fb:31:
                    e7:42:50:2e:6c:cb:71:6c:f2:0f:f9:72:53:8f:ce:
                    c0:54:9c:05:8b:08:ad:5f:93:4c:82:6b:21:a5:1f:
                    0a:2c:a3:8f:5c:53:a0:7a:d3:55:5e:cb:05:0b:0d:
                    86:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2A:A1:FD:28:B5:E1:C5:7E:E3:E6:D1:1D:6F:97:C7:6B:BA:A6:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2ff1042-9f50-3b9b-a419-c464e12258f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:4d:51:e0:db:a7:63:f9:ff:77:7b:2f:d3:bf:56:eb:6f:21:
         a1:d7:2d:83:6e:c4:72:49:2d:48:40:36:28:c5:a8:71:24:ef:
         cd:db:73:ff:ae:d4:02:e6:6e:86:5e:13:f5:44:a9:fa:98:a1:
         97:30:06:c6:f0:5e:6c:a2:39:26:09:d6:2e:ca:3d:ff:71:42:
         8e:93:bf:a2:20:6b:a9:3f:b3:6f:dd:7e:8c:61:de:0e:25:06:
         e6:2f:90:90:53:16:3d:1b:5f:16:2a:3f:bf:56:90:df:c5:bc:
         96:82:ca:22:ca:88:75:d6:a7:2f:b0:f6:43:c6:13:a7:37:2a:
         56:e1:2b:16:11:1f:dc:67:b4:77:11:34:37:d8:2c:eb:f5:ec:
         75:21:06:75:6d:c9:a9:83:d5:0c:f1:31:5a:f8:12:c7:c2:27:
         a5:f4:27:dd:a2:0e:e6:5b:bd:bb:f8:3b:3d:26:8d:8a:f6:07:
         55:da:0a:c2:35:9a:c4:f5:6e:5d:6a:35:71:3c:4b:56:6f:92:
         65:d7:00:15:1e:91:f7:18:eb:35:0b:b4:8d:97:53:63:c9:12:
         c2:f0:df:e9:d5:b1:35:b6:bf:04:88:7f:9c:89:3f:68:c2:6e:
         a9:95:eb:2f:79:cd:f0:74:8e:1b:0a:3c:d0:05:c1:da:3b:38:
         d1:4c:3e:ab
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkls7WiHH6Of5saE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk
MDg2ZTg2ODItYjBmMi00OWEyLWI0YjItMmRhMDZhNjFjOTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfphCETfsdGEs5Dtx9I3+5FNHtMMb3X5SpRp
qYqxfe1UaNyVwqmaSmtC8SGu/lJkKX5fW8LS3pwCyBS1Dd1L2qd1LwSfR5KNTXsc
bGHMAr+H1HU97txz6cdAukfQJxuQbwFclE5nSFmctWWdjejZCT9xya9fY+N85FYD
e4+4/sxy34klSw+Ph+TKwgm0xkwudl4hIhz7EOAzU9mYVjhA2Sh08p58Wnjolb/J
3e3nl0Y+pAapjwg6Ut4s/BTepMv8k0w2dCzNHHmHgOISlPyr+zHnQlAubMtxbPIP
+XJTj87AVJwFiwitX5NMgmshpR8KLKOPXFOgetNVXssFCw2GpQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAMqof0oteHFfuPm0R1vl8druqbpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTJmZjEwNDItOWY1MC0z
YjliLWE0MTktYzQ2NGUxMjI1OGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZ01R4NunY/n/d3sv079W628hodctg27EckktSEA2KMWocSTvzdtz
/67UAuZuhl4T9USp+pihlzAGxvBebKI5JgnWLso9/3FCjpO/oiBrqT+zb91+jGHe
DiUG5i+QkFMWPRtfFio/v1aQ38W8loLKIsqIddanL7D2Q8YTpzcqVuErFhEf3Ge0
dxE0N9gs6/XsdSEGdW3JqYPVDPExWvgSx8InpfQn3aIO5lu9u/g7PSaNivYHVdoK
wjWaxPVuXWo1cTxLVm+SZdcAFR6R9xjrNQu0jZdTY8kSwvDf6dWxNba/BIh/nIk/
aMJuqZXrL3nN8HSOGwo80AXB2js40Uw+qw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:05 2025 by rpki-client