Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa
File:                     ba123b0a-7cc6-337d-9697-a1535b947efe.roa (raw, json)
Hash identifier:          cvG18Nit++6o9HCnX4S3sdT0wUS3gPsgwCr3C23zLas=
Subject key identifier:   BF:C4:0A:DF:77:8C:FA:81:21:6D:38:AE:A6:81:DB:21:4B:FF:A9:09
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F432858494469458B64048709AA016480
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        2602:f98b:10::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:45:8b:64:04:87:09:aa:01:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=1e3d3a72-ff9c-4a79-bb7b-53d92cd6d9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:00:4e:bc:54:6d:bd:15:94:5d:e6:76:06:b4:
                    0f:45:b6:21:77:7a:4d:47:c2:e1:54:bf:a1:6c:a7:
                    d9:cf:db:f4:06:8e:b3:f7:3c:c7:79:0a:00:a5:71:
                    a4:f3:04:fa:49:35:ca:85:2f:0f:e6:1c:13:8d:ab:
                    c4:e7:f7:f4:82:55:76:dc:a3:9e:f3:62:41:16:e3:
                    82:fa:52:70:89:d7:7a:33:25:db:de:2e:21:04:28:
                    36:21:36:57:a8:39:a8:bb:8a:88:ad:67:07:12:91:
                    25:b7:a5:b2:ab:9c:a4:69:3c:86:0c:f8:b4:62:68:
                    c2:a9:0c:92:ba:f4:52:7c:a3:e0:02:fc:1e:60:70:
                    92:b3:e7:43:53:9e:65:39:07:6c:df:bd:65:4b:77:
                    13:5b:47:02:e4:59:04:81:bf:8c:06:fe:a6:5e:be:
                    00:d0:e8:4f:88:2a:b9:27:fc:64:32:67:0f:05:26:
                    57:71:7a:a9:0f:33:98:d9:03:58:e1:7f:97:8c:1d:
                    cd:f8:dd:47:b9:cb:59:5b:fb:0c:85:3f:1b:1f:e5:
                    3f:ea:04:e9:76:6a:64:a7:76:30:01:b1:8b:2c:0b:
                    1a:ae:e4:a4:a9:e2:98:7a:d3:a2:22:b7:c8:f6:38:
                    e5:29:c0:ac:e7:09:2e:b1:ed:dc:ff:64:30:c6:f3:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C4:0A:DF:77:8C:FA:81:21:6D:38:AE:A6:81:DB:21:4B:FF:A9:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:03:6b:05:2e:1b:71:2c:7b:a0:11:a4:a8:d7:57:a0:71:ab:
         02:02:62:bc:f8:ff:cf:81:1c:ee:2e:36:de:a7:bb:5d:70:7c:
         76:bb:c9:9a:5f:b9:38:01:97:69:0a:8e:ef:bd:97:d9:53:56:
         8b:28:6e:d0:b3:ec:00:e3:3f:1d:be:0b:39:2c:06:62:bd:76:
         4f:fa:6b:00:d5:82:e5:aa:6e:66:fa:e6:5a:32:44:f7:9c:b9:
         1d:34:9b:fa:b7:1e:18:b5:30:88:4d:e6:1d:1e:8f:52:41:44:
         9d:85:50:e5:d8:38:5b:04:fa:1d:30:8b:a6:ad:3c:9b:7e:6b:
         55:ad:d7:ce:7f:1c:a8:67:50:08:9f:34:65:ef:8e:56:c7:14:
         bd:56:dc:1d:61:e3:55:16:34:a8:d7:1d:24:e8:bf:c6:ee:46:
         6b:2f:fa:13:cd:40:d6:5d:3d:d4:d9:71:03:bd:fd:82:21:cc:
         51:08:af:38:06:c7:4d:e7:6d:d8:ac:06:02:d4:64:3d:54:7f:
         85:6c:53:0b:42:dc:1c:a7:d8:b6:45:b8:b8:f1:f3:b5:31:31:
         a5:a3:b8:ab:10:d8:99:64:f7:5e:e4:fd:7d:79:99:16:c8:aa:
         b8:1f:30:1e:ce:01:96:60:9e:f6:bc:8b:94:16:31:33:14:45:
         50:11:64:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaUWLZASHCaoBZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0
N2Q5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
MWUzZDNhNzItZmY5Yy00YTc5LWJiN2ItNTNkOTJjZDZkOWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgBOvFRtvRWUXeZ2BrQPRbYhd3pNR8LhVL+h
bKfZz9v0Bo6z9zzHeQoApXGk8wT6STXKhS8P5hwTjavE5/f0glV23KOe82JBFuOC
+lJwidd6MyXb3i4hBCg2ITZXqDmou4qIrWcHEpElt6Wyq5ykaTyGDPi0YmjCqQyS
uvRSfKPgAvweYHCSs+dDU55lOQds371lS3cTW0cC5FkEgb+MBv6mXr4A0OhPiCq5
J/xkMmcPBSZXcXqpDzOY2QNY4X+XjB3N+N1HuctZW/sMhT8bH+U/6gTpdmpkp3Yw
AbGLLAsaruSkqeKYetOiIrfI9jjlKcCs5wkuse3c/2QwxvPp0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL/ECt93jPqBIW04rqaB2yFL/6kJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4
YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvYmExMjNiMGEtN2NjNi0z
MzdkLTk2OTctYTE1MzViOTQ3ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1
ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh
NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy
MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5iwAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA4DawUuG3Ese6ARpKjXV6BxqwICYrz4/8+BHO4uNt6nu11wfHa7
yZpfuTgBl2kKju+9l9lTVosobtCz7ADjPx2+CzksBmK9dk/6awDVguWqbmb65loy
RPecuR00m/q3Hhi1MIhN5h0ej1JBRJ2FUOXYOFsE+h0wi6atPJt+a1Wt185/HKhn
UAifNGXvjlbHFL1W3B1h41UWNKjXHSTov8buRmsv+hPNQNZdPdTZcQO9/YIhzFEI
rzgGx03nbdisBgLUZD1Uf4VsUwtC3Byn2LZFuLjx87UxMaWjuKsQ2Jlk917k/X15
mRbIqrgfMB7OAZZgnva8i5QWMTMURVARZP8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:44 2025 by rpki-client