Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa24aba2-4326-3797-b85b-bffa69e2c171.roa
File:                     aa24aba2-4326-3797-b85b-bffa69e2c171.roa (raw, json)
Hash identifier:          FuYC2qeANFJeTpnLnPvVPSQW0h324VJS0wm/4HENgDU=
Subject key identifier:   45:E5:05:BC:A3:3E:0F:5B:25:C5:B7:B5:9E:EB:C4:74:60:58:83:F4
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940396EEF3F41528E8746EF80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa24aba2-4326-3797-b85b-bffa69e2c171.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:56c0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:6e:ef:3f:41:52:8e:87:46:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=850b655e-af02-4687-b53f-fe753553ff2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:09:87:56:d5:46:7a:d0:9e:ea:eb:19:e8:4d:
                    c5:7e:e3:6d:48:2b:73:1d:ff:61:9e:6e:c6:ef:5a:
                    31:3c:1d:55:e4:d6:9f:58:c6:06:dc:be:27:f6:38:
                    bf:7e:ac:4d:e1:3a:c7:79:ce:b4:6d:c9:7c:4e:ae:
                    a0:e8:5b:7d:0c:b6:db:8a:ee:2b:52:d8:e0:e4:94:
                    7f:71:8d:d2:07:ae:2e:85:9c:f5:15:22:bb:d7:28:
                    38:c5:e4:83:59:6e:18:48:09:2e:7a:9f:9d:2a:f0:
                    02:f5:9f:e2:87:35:f1:7f:0a:3e:d4:39:9e:a1:c3:
                    53:11:3f:ca:f3:5a:f9:f4:b9:79:f9:d1:48:72:a6:
                    9b:72:85:9f:b3:3c:c9:86:76:af:b2:9b:5f:65:dc:
                    2d:32:5d:99:97:9b:ea:c1:44:06:49:3e:98:cd:c2:
                    ec:78:21:e9:b0:c6:06:a4:31:f6:69:a2:2c:9d:5a:
                    b8:12:0f:b9:68:dc:8a:95:b6:0f:2a:ea:ce:a0:a1:
                    ec:d0:2a:f1:74:c3:3f:3c:46:f2:e3:fa:fc:29:35:
                    25:e6:c2:8a:19:4d:4e:39:5b:ba:c9:29:86:29:48:
                    bc:a3:e2:e6:5f:ae:60:76:36:a9:0f:a4:ad:71:5f:
                    bb:42:1c:62:da:cb:17:72:8c:d7:92:22:56:e4:5a:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E5:05:BC:A3:3E:0F:5B:25:C5:B7:B5:9E:EB:C4:74:60:58:83:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa24aba2-4326-3797-b85b-bffa69e2c171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:56c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ee:a7:64:60:07:db:53:82:72:65:91:ba:cc:4a:fd:57:03:
         fb:89:92:cf:4b:82:9c:d9:54:a0:12:dc:a8:2d:b9:5b:a5:c2:
         6e:cc:7c:b3:d8:70:0f:93:2d:74:bf:80:89:34:cc:5b:7d:2b:
         97:12:02:33:0f:53:f5:11:16:30:d7:ab:06:e2:7e:08:0a:83:
         4b:20:b2:b6:4b:65:90:eb:3b:11:06:b5:b5:01:08:f9:4c:f0:
         02:5d:75:01:9d:b8:7b:d8:49:fb:10:0e:0f:8f:26:30:87:5c:
         43:c5:73:1c:31:68:0a:f1:c6:c5:0f:61:fa:6b:47:5c:bb:58:
         ed:09:3b:f0:8e:c4:13:b7:53:a0:6f:92:9c:b7:ac:c8:63:7b:
         87:65:61:b2:6b:18:bf:d1:c5:1a:00:a3:bd:3e:5b:85:28:f4:
         d7:35:56:bf:d3:33:d8:c7:3a:14:6c:fa:cb:b8:bc:67:e6:51:
         17:c0:98:d9:9e:72:61:26:29:25:97:eb:ba:b9:50:8f:3b:31:
         b3:5d:ea:42:47:4e:7d:59:40:97:b7:46:d0:05:b4:00:a7:92:
         e0:f7:e3:16:cb:a6:5e:a8:47:69:8c:da:b2:16:b4:05:b5:f6:
         2c:92:0e:19:ef:b9:03:0e:07:45:bb:b8:28:65:87:5c:c8:77:
         fa:7f:94:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOW7vP0FSjodG74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
ODUwYjY1NWUtYWYwMi00Njg3LWI1M2YtZmU3NTM1NTNmZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggmHVtVGetCe6usZ6E3FfuNtSCtzHf9hnm7G
71oxPB1V5NafWMYG3L4n9ji/fqxN4TrHec60bcl8Tq6g6Ft9DLbbiu4rUtjg5JR/
cY3SB64uhZz1FSK71yg4xeSDWW4YSAkuep+dKvAC9Z/ihzXxfwo+1DmeocNTET/K
81r59Ll5+dFIcqabcoWfszzJhnavsptfZdwtMl2Zl5vqwUQGST6YzcLseCHpsMYG
pDH2aaIsnVq4Eg+5aNyKlbYPKurOoKHs0CrxdMM/PEby4/r8KTUl5sKKGU1OOVu6
ySmGKUi8o+LmX65gdjapD6StcV+7Qhxi2ssXcozXkiJW5FptxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEXlBbyjPg9bJcW3tZ7rxHRgWIP0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWEyNGFiYTItNDMyNi0z
Nzk3LWI4NWItYmZmYTY5ZTJjMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFbA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABnup2RgB9tTgnJlkbrMSv1XA/uJks9LgpzZVKAS3KgtuVulwm7M
fLPYcA+TLXS/gIk0zFt9K5cSAjMPU/URFjDXqwbifggKg0sgsrZLZZDrOxEGtbUB
CPlM8AJddQGduHvYSfsQDg+PJjCHXEPFcxwxaArxxsUPYfprR1y7WO0JO/COxBO3
U6Bvkpy3rMhje4dlYbJrGL/RxRoAo70+W4Uo9Nc1Vr/TM9jHOhRs+su4vGfmURfA
mNmecmEmKSWX67q5UI87MbNd6kJHTn1ZQJe3RtAFtACnkuD34xbLpl6oR2mM2rIW
tAW19iySDhnvuQMOB0W7uChlh1zId/p/lJI=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:49:40 2025 by rpki-client