Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa
File:                     c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa (raw, json)
Hash identifier:          Vf1cLY2R1Vr6sA/GfAKqZJ7h2uo3UJxg85VRF272AdM=
Subject key identifier:   F0:D2:E3:D8:31:85:A3:22:49:DB:39:77:05:79:02:AF:0A:01:17:38
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F432858493C09395C88DA4A1074CE48E0
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     0
IP address blocks:        2601:a003::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:39:5c:88:da:4a:10:74:ce:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=f6429f6b-6be4-41eb-8798-5eb3d04a2fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:40:d4:ca:e4:8d:31:9f:91:00:30:3b:d0:
                    fe:92:d0:85:e0:91:65:96:e9:e5:f3:53:76:a6:f9:
                    f7:3c:dd:51:53:b9:e2:ab:c5:5a:4f:c8:48:36:ff:
                    11:ff:e4:8c:36:ec:72:4f:f0:8d:68:55:e9:bf:4b:
                    78:ac:97:c9:cb:a2:4d:75:f1:9a:45:9e:c7:7d:d1:
                    85:05:b8:5d:0a:f3:0c:f5:e4:c9:b9:75:1e:60:06:
                    13:47:f1:cf:64:70:67:8c:62:26:94:50:ee:de:df:
                    1f:54:f2:63:0b:62:59:f2:8f:37:c0:a6:f4:0f:9a:
                    7a:2b:0f:23:24:2b:55:1f:c3:6d:06:7f:61:59:de:
                    77:c1:22:1f:71:81:67:f2:78:c6:c2:e6:77:e6:e9:
                    61:e2:fd:5a:5e:f3:42:dc:cd:7d:cd:ec:de:11:b4:
                    76:12:86:3d:36:c4:f6:f0:66:da:25:2c:0f:d1:4e:
                    33:6d:1b:82:7d:27:a2:c6:fa:22:0c:c9:c1:d9:2d:
                    f8:9a:3c:ce:9f:f6:cd:9e:eb:52:a1:9c:bb:9c:57:
                    5a:a4:a0:af:3a:54:3f:33:2b:3c:0e:35:f6:e2:d2:
                    4f:95:11:7b:c8:c8:78:70:25:9e:e0:66:8d:f2:33:
                    f9:89:1d:43:88:be:c8:86:63:57:4f:f2:9f:25:30:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D2:E3:D8:31:85:A3:22:49:DB:39:77:05:79:02:AF:0A:01:17:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a003::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:86:ec:13:03:90:81:35:16:b7:9a:5c:f7:62:79:61:25:84:
         41:3a:0c:7a:8a:ac:6e:ca:fb:f5:7a:f5:d2:15:2c:70:77:15:
         97:7e:76:32:92:cb:74:ba:a4:dd:56:39:64:72:bf:6c:c1:90:
         9c:1f:99:91:cf:ff:be:43:c4:c5:74:90:e4:dd:42:54:0c:15:
         50:96:0a:c7:14:c0:3a:28:f4:a4:bf:65:67:3f:67:fc:8a:c1:
         27:d1:b6:bf:67:cd:28:72:12:fb:38:4b:da:e7:53:f0:ab:75:
         31:a1:d9:69:5a:53:f0:b5:54:b5:66:ac:56:b9:4b:4b:77:da:
         38:b3:d4:21:b4:aa:de:b8:ac:89:85:4c:ce:2c:cc:de:6f:b0:
         83:3d:54:58:74:87:12:ab:a1:e4:b9:75:b1:4b:e3:2e:48:e1:
         af:69:2b:58:3b:a8:28:7a:9f:b2:39:b3:03:8d:8c:aa:62:28:
         dd:0a:b9:62:d7:cf:15:03:eb:7f:49:5a:a1:b7:e4:0d:7a:8d:
         cb:ec:83:ad:d8:c9:42:3a:e0:47:45:9b:a3:f8:aa:f1:6a:6f:
         cf:14:71:9f:d2:87:bd:1f:ff:55:88:23:85:90:8b:a9:a5:63:
         7b:78:27:8e:eb:58:89:d9:f6:11:1e:44:e6:9d:74:97:eb:12:
         f7:64:3e:45
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk8CTlciNpKEHTOSOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZjY0MjlmNmItNmJlNC00MWViLTg3OTgtNWViM2QwNGEyZmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfFA1MrkjTGfkQAwO9D+ktCF4JFllunl81N2
pvn3PN1RU7niq8VaT8hINv8R/+SMNuxyT/CNaFXpv0t4rJfJy6JNdfGaRZ7HfdGF
BbhdCvMM9eTJuXUeYAYTR/HPZHBnjGImlFDu3t8fVPJjC2JZ8o83wKb0D5p6Kw8j
JCtVH8NtBn9hWd53wSIfcYFn8njGwuZ35ulh4v1aXvNC3M19zezeEbR2EoY9NsT2
8GbaJSwP0U4zbRuCfSeixvoiDMnB2S34mjzOn/bNnutSoZy7nFdapKCvOlQ/Mys8
DjX24tJPlRF7yMh4cCWe4GaN8jP5iR1DiL7IhmNXT/KfJTAKrwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPDS49gxhaMiSds5dwV5Aq8KARc4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYzhhOGM4YjQtZTRiNC0z
MDExLTk5ZWEtYmI2NDVmOTE3NzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgAzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBFhuwTA5CBNRa3mlz3YnlhJYRBOgx6iqxuyvv1evXSFSxwdxWXfnYy
kst0uqTdVjlkcr9swZCcH5mRz/++Q8TFdJDk3UJUDBVQlgrHFMA6KPSkv2VnP2f8
isEn0ba/Z80ochL7OEva51Pwq3UxodlpWlPwtVS1ZqxWuUtLd9o4s9QhtKreuKyJ
hUzOLMzeb7CDPVRYdIcSq6HkuXWxS+MuSOGvaStYO6goep+yObMDjYyqYijdCrli
188VA+t/SVqht+QNeo3L7IOt2MlCOuBHRZuj+Krxam/PFHGf0oe9H/9ViCOFkIup
pWN7eCeO61iJ2fYRHkTmnXSX6xL3ZD5F
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:44 2025 by rpki-client