Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa
File:                     38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa (raw, json)
Hash identifier:          LcRyIDV+LBRYzPJh9KPoDvNVqBCvYEl/Skfb88smXD0=
Subject key identifier:   02:24:46:9E:C4:6D:98:D5:C2:00:3C:40:02:C4:1B:8F:37:4C:6E:3B
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858491AA6CFBA0F2E97DF0E754880
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     62563
IP address blocks:        2607:a140:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:cf:ba:0f:2e:97:df:0e:75:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=bf7efac8-def3-468c-a667-619b062cc7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6b:4e:4b:28:98:f5:9e:c0:36:54:f2:04:e5:
                    aa:e0:54:8b:f5:43:37:31:92:58:a6:65:7c:ac:04:
                    08:33:08:66:41:a1:67:61:86:20:d0:56:5c:c8:a2:
                    f6:b1:16:e6:07:cb:40:e3:4b:e7:c7:7b:5e:f7:44:
                    81:33:e6:e9:c3:59:f6:c3:ad:d5:62:52:04:04:30:
                    f4:c3:3b:b0:4c:1e:f2:10:6b:41:50:3f:58:34:2f:
                    76:ce:86:f1:e5:41:6e:ad:8e:0f:bd:15:58:5a:b4:
                    f0:eb:11:36:3c:d9:35:65:44:3e:f9:ef:e0:d8:ae:
                    17:9c:31:a7:fb:a7:de:c6:8a:19:79:e3:67:4d:5c:
                    f2:ef:37:88:cc:70:4e:b5:72:f1:30:84:4c:bf:57:
                    6d:b7:09:e5:cb:8f:55:74:df:21:66:4b:94:ab:e9:
                    27:d4:7e:da:46:87:93:cc:f6:a0:23:04:a0:f6:0f:
                    ed:8b:5a:1d:54:73:c9:03:70:8a:80:dc:36:33:42:
                    ed:0c:bd:a8:83:e1:a4:1d:9d:e0:7f:74:d8:49:7d:
                    9b:e2:ce:d5:a0:ed:23:c4:e5:7c:20:ef:3d:a2:79:
                    a8:dd:0a:ba:a3:30:fb:fd:a7:6d:ad:61:74:e3:7a:
                    97:a5:07:a2:8d:e8:34:1f:75:72:05:8f:9f:62:31:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:24:46:9E:C4:6D:98:D5:C2:00:3C:40:02:C4:1B:8F:37:4C:6E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:19:8f:ab:08:c8:ee:ca:bd:7b:f1:14:ff:d8:ac:4f:20:
         76:77:05:b7:21:82:ac:c9:ce:cf:7a:f9:1a:1e:39:ac:d9:54:
         3b:a4:7e:9e:87:59:35:0f:ac:92:d6:fb:b6:e8:cb:af:ce:36:
         df:80:1f:af:f2:de:ac:1b:1a:19:df:07:2d:3c:d7:b3:84:53:
         66:40:70:0c:bd:16:7d:64:57:5d:04:97:05:7d:ee:a1:f2:cf:
         b9:5f:fa:1f:9b:3f:62:e6:46:7e:06:4c:22:d1:f6:bf:42:d2:
         8d:2f:0a:35:e8:06:32:0d:a6:4f:f9:43:9e:eb:45:94:7e:32:
         4a:ba:df:5a:b2:52:d8:a8:2e:54:c0:10:0b:1a:04:e8:b7:74:
         b2:a1:86:61:09:88:fb:85:a9:16:56:1f:35:1b:9d:8e:1e:35:
         6c:c1:66:e5:a9:f8:fb:8c:98:39:95:8e:99:d7:da:d8:da:12:
         cc:f2:3e:04:ee:52:1b:c0:5b:4c:bf:37:5e:7b:2a:39:6c:52:
         65:93:9e:b5:1d:0a:4d:0a:03:55:bd:b4:f5:04:b6:eb:bb:ca:
         3d:09:94:f0:72:4d:82:59:87:39:79:3c:59:a9:30:09:4c:e8:
         60:85:49:19:16:a4:08:60:28:d9:75:62:33:82:75:b1:f7:fd:
         09:19:8f:c2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkaps+6Dy6X3w51SIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkxOTZmODEtYzI2ZS00NjkwLThiYjgtYmFiNGQ2NTQx
NjMyMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
YmY3ZWZhYzgtZGVmMy00NjhjLWE2NjctNjE5YjA2MmNjN2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WtOSyiY9Z7ANlTyBOWq4FSL9UM3MZJYpmV8
rAQIMwhmQaFnYYYg0FZcyKL2sRbmB8tA40vnx3te90SBM+bpw1n2w63VYlIEBDD0
wzuwTB7yEGtBUD9YNC92zobx5UFurY4PvRVYWrTw6xE2PNk1ZUQ++e/g2K4XnDGn
+6fexooZeeNnTVzy7zeIzHBOtXLxMIRMv1dttwnly49VdN8hZkuUq+kn1H7aRoeT
zPagIwSg9g/ti1odVHPJA3CKgNw2M0LtDL2og+GkHZ3gf3TYSX2b4s7VoO0jxOV8
IO89onmo3Qq6ozD7/adtrWF043qXpQeijeg0H3VyBY+fYjEZ+QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAIkRp7EbZjVwgA8QALEG483TG47MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOTE5
NmY4MS1jMjZlLTQ2OTAtOGJiOC1iYWI0ZDY1NDE2MzIvMzhkMTFiNmYtNTk5NC0z
ZTBlLWI4ZmMtODhmMTI1MTczMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjkxOTZmODEtYzI2ZS00NjkwLThi
YjgtYmFiNGQ2NTQxNjMyLzI5MTk2ZjgxLWMyNmUtNDY5MC04YmI4LWJhYjRkNjU0
MTYzMi5jcmwwHwYDVR0jBBgwFoAU+813SzdHY5Dw69CRgJFkZaTuvgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yOTE5NmY4MS1jMjZlLTQ2OTAtOGJiOC1iYWI0
ZDY1NDE2MzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgehQBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAG9sZj6sIyO7KvXvxFP/YrE8gdncFtyGCrMnOz3r5Gh45rNlUO6R+
nodZNQ+sktb7tujLr84234Afr/LerBsaGd8HLTzXs4RTZkBwDL0WfWRXXQSXBX3u
ofLPuV/6H5s/YuZGfgZMItH2v0LSjS8KNegGMg2mT/lDnutFlH4ySrrfWrJS2Kgu
VMAQCxoE6Ld0sqGGYQmI+4WpFlYfNRudjh41bMFm5an4+4yYOZWOmdfa2NoSzPI+
BO5SG8BbTL83XnsqOWxSZZOetR0KTQoDVb209QS267vKPQmU8HJNglmHOXk8Wakw
CUzoYIVJGRakCGAo2XViM4J1sff9CRmPwg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:19 2025 by rpki-client