Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/650ec69f-88a8-3d3e-825e-87a462316876.roa
File:                     650ec69f-88a8-3d3e-825e-87a462316876.roa (raw, json)
Hash identifier:          HTlerFoPsNdizykMErjjF2bvb9vvF55Q4qQPOMgsTcU=
Subject key identifier:   06:C1:7E:92:7B:AC:11:6A:7F:25:F8:45:93:86:FC:F6:78:04:ED:CC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780269436F3996C57AC9CA880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/650ec69f-88a8-3d3e-825e-87a462316876.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:28e0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:94:36:f3:99:6c:57:ac:9c:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=8d6810d5-9489-4e92-b3fc-e899cb35c75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8d:d8:85:e9:07:7d:d2:33:2b:69:86:6c:8b:
                    5d:92:fb:57:77:40:f4:3b:ee:d4:ea:e7:0f:eb:f6:
                    82:1c:1c:e7:89:d2:9a:01:cc:c6:7f:e6:4b:5d:01:
                    b6:5b:26:e0:05:06:a5:24:4b:f7:c9:f7:12:8b:61:
                    50:79:0b:3b:7d:7d:a9:b6:57:1f:5c:a3:6f:13:14:
                    98:7d:2d:a3:ec:00:27:3a:08:9e:0a:c3:4e:5b:c7:
                    a8:76:db:2f:94:81:56:aa:53:b0:f2:4a:54:68:97:
                    95:d9:29:8b:aa:cd:42:f0:e7:78:f9:21:00:26:0a:
                    ea:58:d5:37:e9:d5:32:92:25:c7:12:eb:ef:c6:19:
                    8f:d4:fb:dd:a0:b6:74:3d:9c:21:bc:19:7c:a7:c2:
                    b6:e2:dc:c3:20:09:b0:5d:1d:90:e3:b9:5b:be:d6:
                    af:96:6f:89:79:e4:f7:d1:d6:ac:dd:9f:19:6b:7e:
                    df:e1:1e:68:aa:b8:a3:78:8f:62:3a:95:83:10:b4:
                    eb:3d:c8:11:fe:97:f6:b9:fb:b3:6a:95:d4:66:c7:
                    b0:b7:b2:5e:d1:b5:0c:52:e3:49:89:69:a0:20:1c:
                    de:49:6e:a0:09:8f:61:97:61:a1:c1:2b:ac:84:9e:
                    a1:82:cf:3f:31:36:d7:dd:01:20:65:30:74:f5:72:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:7E:92:7B:AC:11:6A:7F:25:F8:45:93:86:FC:F6:78:04:ED:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/650ec69f-88a8-3d3e-825e-87a462316876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:28e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:02:1c:61:fa:a6:47:7c:5a:93:50:3f:34:fb:37:38:c9:16:
         45:10:99:84:c1:6f:8a:fe:6a:dd:1a:2d:4f:93:7b:e5:06:fe:
         42:76:e2:e5:11:46:d8:fd:17:d9:fc:a4:0d:05:ea:ad:c3:11:
         37:26:f3:c7:f3:91:93:eb:5f:dd:c5:66:60:1b:c9:18:9f:ba:
         c2:2f:29:6a:ff:6c:a8:a0:08:6e:fd:af:a8:a2:67:52:18:1a:
         73:41:49:fb:82:e1:a1:7a:31:df:33:6f:28:c2:a4:48:c3:be:
         a8:2a:7d:81:be:7a:b5:29:05:bc:fa:48:f8:ec:ae:fc:7f:00:
         2a:38:10:c6:f8:83:77:24:9c:0b:d5:db:df:4e:e0:6e:30:ae:
         d2:1b:5d:e9:18:fe:1c:e3:22:2d:e1:62:95:1d:a1:f3:8a:17:
         2c:9a:90:94:47:7f:72:15:88:3f:d5:ed:67:84:74:6b:e5:3e:
         6f:d7:79:fc:c3:ae:4f:70:78:3c:76:20:9d:d2:fe:db:17:24:
         ff:29:e5:04:3b:a2:57:f8:4d:71:2e:ca:d1:62:15:eb:3e:2d:
         bd:0c:74:a8:12:f2:44:7f:31:03:cf:fd:fd:da:f2:47:a9:fb:
         a0:99:8e:a5:1d:c3:c0:1a:cb:66:a2:5c:39:da:68:5d:4e:71:
         f4:6f:a3:d8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJpQ285lsV6ycqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
OGQ2ODEwZDUtOTQ4OS00ZTkyLWIzZmMtZTg5OWNiMzVjNzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI3YhekHfdIzK2mGbItdkvtXd0D0O+7U6ucP
6/aCHBznidKaAczGf+ZLXQG2WybgBQalJEv3yfcSi2FQeQs7fX2ptlcfXKNvExSY
fS2j7AAnOgieCsNOW8eodtsvlIFWqlOw8kpUaJeV2SmLqs1C8Od4+SEAJgrqWNU3
6dUykiXHEuvvxhmP1PvdoLZ0PZwhvBl8p8K24tzDIAmwXR2Q47lbvtavlm+JeeT3
0das3Z8Za37f4R5oqrijeI9iOpWDELTrPcgR/pf2ufuzapXUZsewt7Je0bUMUuNJ
iWmgIBzeSW6gCY9hl2GhwSushJ6hgs8/MTbX3QEgZTB09XILpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAbBfpJ7rBFqfyX4RZOG/PZ4BO3MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjUwZWM2OWYtODhhOC0z
ZDNlLTgyNWUtODdhNDYyMzE2ODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCjg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACYCHGH6pkd8WpNQPzT7NzjJFkUQmYTBb4r+at0aLU+Te+UG/kJ2
4uURRtj9F9n8pA0F6q3DETcm88fzkZPrX93FZmAbyRifusIvKWr/bKigCG79r6ii
Z1IYGnNBSfuC4aF6Md8zbyjCpEjDvqgqfYG+erUpBbz6SPjsrvx/ACo4EMb4g3ck
nAvV299O4G4wrtIbXekY/hzjIi3hYpUdofOKFyyakJRHf3IViD/V7WeEdGvlPm/X
efzDrk9weDx2IJ3S/tsXJP8p5QQ7olf4TXEuytFiFes+Lb0MdKgS8kR/MQPP/f3a
8kep+6CZjqUdw8Aay2aiXDnaaF1OcfRvo9g=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:18:31 2025 by rpki-client