Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17b82114-33b6-39da-bced-058cb1848c24.roa
File:                     17b82114-33b6-39da-bced-058cb1848c24.roa (raw, json)
Hash identifier:          Io/TKggBm0NIgaiYh6J6rP3gsXxZ4Sg9etNjn2oOPs0=
Subject key identifier:   92:F5:32:D5:A9:20:E1:C4:81:2B:56:18:81:94:48:56:19:33:81:2D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849134FA34F39AD458649FFFF40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17b82114-33b6-39da-bced-058cb1848c24.roa
Signing time:             Tue 04 Mar 2025 10:54:39 +0000
ROA not before:           Tue 04 Mar 2025 10:54:39 +0000
ROA not after:            Mon 02 Jun 2025 09:54:39 +0000
asID:                     30036
IP address blocks:        2604:2d80:bc00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:4f:a3:4f:39:ad:45:86:49:ff:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  4 10:54:39 2025 GMT
            Not After : Jun  2 09:54:39 2025 GMT
        Subject: CN=6f6f6eba-1f81-4e92-a362-d1a163e6504a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:b9:4c:c5:54:1b:ad:1c:11:26:bf:98:7e:
                    c4:7f:11:29:50:9d:21:5e:51:94:fa:1d:cd:82:e3:
                    fe:93:81:cf:bf:ad:b7:b0:0a:58:f0:b4:e9:08:fe:
                    36:d3:d0:d9:88:90:51:b3:f8:a6:28:09:c7:38:b4:
                    e7:bd:c9:ee:72:36:46:01:9a:93:bc:07:57:05:07:
                    09:8a:a6:37:ab:16:dc:b1:0e:b6:95:cf:66:a4:dc:
                    01:b1:64:54:90:0f:01:60:7b:8d:11:3c:43:a3:12:
                    24:88:07:20:12:b4:7d:41:cf:ae:39:be:3d:37:2e:
                    02:b8:b0:c1:95:71:3f:01:c6:f1:c8:73:cb:aa:ae:
                    2b:d7:6c:74:ad:14:f0:be:e8:02:89:09:70:b2:4d:
                    4d:fd:0d:e2:dd:73:c4:a3:7b:8b:43:0a:14:c4:5a:
                    ee:94:2d:33:fd:e0:ac:e7:e8:a7:fb:83:80:b1:71:
                    85:a9:f8:a1:f7:28:cf:19:6a:0b:83:d4:fc:df:1b:
                    f9:20:c2:3f:e5:72:d2:d5:12:57:7f:46:c7:4e:a8:
                    41:45:59:da:c6:9b:1f:bf:7d:f8:f3:5f:79:c0:f2:
                    f7:15:ae:4a:c9:d4:2f:8e:22:cf:f9:ac:c4:90:8d:
                    9e:7b:96:1e:0b:55:36:86:81:68:82:d1:ab:64:a9:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F5:32:D5:A9:20:E1:C4:81:2B:56:18:81:94:48:56:19:33:81:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17b82114-33b6-39da-bced-058cb1848c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:bc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:5c:ee:00:46:5c:4b:7d:15:ef:2b:6a:0f:a8:b7:20:44:e2:
         dc:48:b8:19:ed:7e:89:16:bf:6c:dd:7f:1b:c4:ce:87:06:76:
         d3:43:b4:a6:61:06:5e:56:aa:3a:5b:dd:f9:80:de:06:58:d4:
         b9:6e:29:35:fd:a6:a2:09:8d:0c:45:84:a4:98:e9:58:b5:93:
         c4:86:95:de:32:71:4b:8a:07:a8:9f:cf:2f:df:a0:5a:86:c0:
         f5:5e:8f:3e:df:2e:3b:19:9d:45:48:c0:96:eb:24:25:41:a0:
         bc:4e:c9:a7:ba:56:df:50:09:6d:49:8d:cd:2b:aa:f7:ea:29:
         c4:35:d7:d3:63:11:d7:a4:be:cd:04:8e:6c:cc:d9:86:c3:79:
         d2:d3:2c:85:81:8a:0b:3f:65:9b:03:69:a2:77:5f:36:29:b3:
         42:9f:8f:0f:e9:86:eb:37:ef:02:4b:26:83:49:39:b6:b4:45:
         8a:fe:97:4d:0c:78:82:25:9c:f2:b8:91:42:b2:1c:95:f6:98:
         e3:81:f5:3a:5c:2a:38:49:dc:d2:e6:99:dd:68:1e:d2:b2:b0:
         80:c2:be:f2:11:b9:53:2e:1a:f8:9b:14:30:23:2c:9f:24:2f:
         27:2c:43:26:d1:2a:71:75:e2:31:b3:bb:f5:00:1d:b0:6c:f0:
         38:7b:f7:ee
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTT6NPOa1Fhkn//0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDMwNDEwNTQzOVoXDTI1MDYwMjA5NTQzOVowLzEtMCsGA1UEAxMk
NmY2ZjZlYmEtMWY4MS00ZTkyLWEzNjItZDFhMTYzZTY1MDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOG5TMVUG60cESa/mH7EfxEpUJ0hXlGU+h3N
guP+k4HPv623sApY8LTpCP4209DZiJBRs/imKAnHOLTnvcnucjZGAZqTvAdXBQcJ
iqY3qxbcsQ62lc9mpNwBsWRUkA8BYHuNETxDoxIkiAcgErR9Qc+uOb49Ny4CuLDB
lXE/AcbxyHPLqq4r12x0rRTwvugCiQlwsk1N/Q3i3XPEo3uLQwoUxFrulC0z/eCs
5+in+4OAsXGFqfih9yjPGWoLg9T83xv5IMI/5XLS1RJXf0bHTqhBRVnaxpsfv334
8195wPL3Fa5KydQvjiLP+azEkI2ee5YeC1U2hoFogtGrZKlWFwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJL1MtWpIOHEgStWGIGUSFYZM4EtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTdiODIxMTQtMzNiNi0z
OWRhLWJjZWQtMDU4Y2IxODQ4YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgLww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAClzuAEZcS30V7ytqD6i3IETi3Ei4Ge1+iRa/bN1/G8TOhwZ200O0
pmEGXlaqOlvd+YDeBljUuW4pNf2mogmNDEWEpJjpWLWTxIaV3jJxS4oHqJ/PL9+g
WobA9V6PPt8uOxmdRUjAluskJUGgvE7Jp7pW31AJbUmNzSuq9+opxDXX02MR16S+
zQSObMzZhsN50tMshYGKCz9lmwNpondfNimzQp+PD+mG6zfvAksmg0k5trRFiv6X
TQx4giWc8riRQrIclfaY44H1OlwqOEnc0uaZ3Wge0rKwgMK+8hG5Uy4a+JsUMCMs
nyQvJyxDJtEqcXXiMbO79QAdsGzwOHv37g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:00:51 2025 by rpki-client