Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa
File:                     d6d07e8f-2d94-3390-a310-5c649e309887.roa (raw, json)
Hash identifier:          A9IkPhONLyoXascdk8uKiKWfQlKbbqUik4TMMQm9Uo0=
Subject key identifier:   30:07:77:60:9A:1F:EB:AD:99:12:5B:76:73:C7:13:63:1D:51:01:FA
Certificate issuer:       /CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
Certificate serial:       010D0C9F432858490B4C1F79F62CC7540B42AC80
Authority key identifier: BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     399568
IP address blocks:        2602:fc6f::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:1f:79:f6:2c:c7:54:0b:42:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=4695f114-92c3-4315-b624-f7a894a77cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:64:c1:22:3e:29:8e:dd:f2:ff:22:40:14:
                    f7:73:cf:34:6b:3d:79:79:24:37:17:c5:2d:47:91:
                    19:61:13:28:d0:a9:74:83:9c:63:d1:0f:c2:e4:26:
                    8e:e9:6c:95:ec:2c:f5:08:07:9b:39:a3:2e:38:a3:
                    17:95:df:65:c0:0c:82:d6:c2:f9:58:68:37:cf:4b:
                    ad:55:f9:06:0c:1a:f9:87:d9:8e:13:31:4b:f5:6b:
                    2b:19:59:4e:e6:a5:cd:0e:ca:dc:5c:9a:d5:c6:71:
                    f7:a3:7e:7f:e8:07:6e:05:79:e6:cf:47:10:f4:6e:
                    b2:b1:23:31:4e:ac:c8:87:a7:a3:51:58:f5:15:b5:
                    37:7a:d8:73:cf:ff:ff:7a:59:34:8e:44:d0:0a:9d:
                    d9:48:ec:98:a4:9a:77:e4:99:d7:71:07:ca:3b:4f:
                    c2:05:20:74:af:60:9d:1e:f5:49:41:6a:42:eb:6e:
                    41:20:d4:f2:3a:73:0d:f4:1c:a4:b7:aa:dc:6b:e1:
                    d8:d2:13:40:c2:f9:18:da:21:c8:ad:74:2f:0e:2d:
                    d0:78:e2:d5:05:90:f3:79:66:d6:17:ff:da:ea:c5:
                    7b:18:0a:15:83:34:66:3e:d5:bf:10:d0:a8:4a:36:
                    fa:cb:e5:d6:ea:3b:3c:4c:e3:cd:7c:ec:a3:21:70:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:07:77:60:9A:1F:EB:AD:99:12:5B:76:73:C7:13:63:1D:51:01:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc6f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:62:47:8c:d4:c9:17:1d:09:45:00:f2:e0:c6:4e:63:6d:90:
         fa:50:09:be:d4:c7:0e:83:af:40:c4:4e:0b:bc:51:d3:94:68:
         ba:a0:ae:f7:66:21:74:05:2b:82:bb:74:a5:e8:70:a4:da:ed:
         0e:85:8c:bc:50:9a:a0:25:74:ca:75:bc:df:38:92:b0:33:5f:
         92:72:38:12:3b:69:2c:fa:e8:bc:4a:2e:da:e7:79:f1:96:ea:
         f2:96:7c:99:0e:22:28:cf:d3:07:ce:c1:73:cc:16:ec:3b:2d:
         5f:b3:0f:d0:06:d3:a7:82:29:30:e2:43:ad:9d:aa:4b:00:ed:
         63:f6:66:59:41:4c:1a:e9:4e:15:b9:c8:00:39:ba:61:8a:a1:
         9c:7e:14:07:ea:fb:85:a2:2e:a0:4e:2d:ef:95:62:a2:d0:be:
         25:9d:77:55:c6:c2:10:eb:1d:43:47:ca:3f:98:17:d2:3f:c0:
         49:bd:e5:68:d1:a6:38:c3:4a:7f:24:ac:b9:ac:c4:55:60:e3:
         10:6c:31:b6:df:d7:ee:59:81:9a:e9:4a:a7:ff:2b:b1:32:51:
         10:3b:13:a3:39:6d:9b:1b:7f:78:c0:da:4e:38:4a:f1:47:da:
         58:7a:72:bd:50:86:60:05:b6:37:87:61:ae:fb:04:0b:82:3c:
         df:9c:03:16
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkLTB959izHVAtCrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2N2ViODgtYTVkNC00NjZjLTliYmEtYWRhZmM1N2Nm
NGU2MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
NDY5NWYxMTQtOTJjMy00MzE1LWI2MjQtZjdhODk0YTc3Y2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAospkwSI+KY7d8v8iQBT3c880az15eSQ3F8Ut
R5EZYRMo0Kl0g5xj0Q/C5CaO6WyV7Cz1CAebOaMuOKMXld9lwAyC1sL5WGg3z0ut
VfkGDBr5h9mOEzFL9WsrGVlO5qXNDsrcXJrVxnH3o35/6AduBXnmz0cQ9G6ysSMx
TqzIh6ejUVj1FbU3ethzz///elk0jkTQCp3ZSOyYpJp35JnXcQfKO0/CBSB0r2Cd
HvVJQWpC625BINTyOnMN9Bykt6rca+HY0hNAwvkY2iHIrXQvDi3QeOLVBZDzeWbW
F//a6sV7GAoVgzRmPtW/ENCoSjb6y+XW6js8TOPNfOyjIXBkFwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDAHd2CaH+utmRJbdnPHE2MdUQH6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZjY3
ZWI4OC1hNWQ0LTQ2NmMtOWJiYS1hZGFmYzU3Y2Y0ZTYvZDZkMDdlOGYtMmQ5NC0z
MzkwLWEzMTAtNWM2NDllMzA5ODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Y2N2ViODgtYTVkNC00NjZjLTli
YmEtYWRhZmM1N2NmNGU2LzNmNjdlYjg4LWE1ZDQtNDY2Yy05YmJhLWFkYWZjNTdj
ZjRlNi5jcmwwHwYDVR0jBBgwFoAUvQ3+qPK8oByiNeKKyKZXSsLFNlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZjY3ZWI4OC1hNWQ0LTQ2NmMtOWJiYS1hZGFm
YzU3Y2Y0ZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8bwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAX2JHjNTJFx0JRQDy4MZOY22Q+lAJvtTHDoOvQMROC7xR05RouqCu
92YhdAUrgrt0pehwpNrtDoWMvFCaoCV0ynW83ziSsDNfknI4EjtpLProvEou2ud5
8Zbq8pZ8mQ4iKM/TB87Bc8wW7DstX7MP0AbTp4IpMOJDrZ2qSwDtY/ZmWUFMGulO
FbnIADm6YYqhnH4UB+r7haIuoE4t75ViotC+JZ13VcbCEOsdQ0fKP5gX0j/ASb3l
aNGmOMNKfySsuazEVWDjEGwxtt/X7lmBmulKp/8rsTJREDsTozltmxt/eMDaTjhK
8UfaWHpyvVCGYAW2N4dhrvsEC4I835wDFg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:53 2025 by rpki-client