Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdf0c36b-7fce-3201-b4ee-22ba0b749904.roa
File:                     bdf0c36b-7fce-3201-b4ee-22ba0b749904.roa (raw, json)
Hash identifier:          ssRaa/AnkecsBO/5ndAJypW3fqHT1jaBlIdlZFrcRJI=
Subject key identifier:   AD:47:A4:2E:13:6E:C3:AD:7B:F6:04:CC:AD:0C:9D:61:C4:B8:C5:EE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849403964D3CC1429D607FF0F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdf0c36b-7fce-3201-b4ee-22ba0b749904.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:57f0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:64:d3:cc:14:29:d6:07:ff:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=6b2d9f33-6299-4f8c-84a7-751afa1b6b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:02:09:6a:f1:db:f5:61:16:de:41:f2:1a:91:
                    3e:53:ab:03:15:06:6f:d0:7c:5e:ff:c7:4f:fe:7b:
                    44:e8:8c:5f:5f:0e:d0:51:44:4f:9e:c7:15:b8:28:
                    21:30:3b:86:9f:2f:6d:a3:bc:e0:77:9d:1e:47:be:
                    b3:d6:3e:a0:fc:e6:cf:f0:2b:12:ea:3d:cc:83:31:
                    d5:80:7a:79:ed:de:60:db:5c:10:cc:e4:3b:98:4b:
                    a4:ac:85:d9:67:b3:d1:1f:ef:0a:1a:7b:cf:11:e9:
                    d1:d2:de:1b:2d:2f:d0:dd:78:d0:3d:e2:ec:5f:15:
                    52:3d:53:19:1a:f5:2e:17:58:62:e7:88:ae:b2:54:
                    17:9f:e6:8d:97:d5:66:57:ba:4d:ba:e5:5b:29:3b:
                    0a:d7:69:a4:42:e4:0f:98:1f:07:3f:b2:77:f0:bb:
                    bd:5b:b8:b8:a4:16:f6:2d:64:3f:63:3a:0f:72:66:
                    5d:d0:44:00:dd:3c:fd:4b:db:ed:33:c4:a4:d0:60:
                    3f:15:4d:a7:44:0a:ee:98:86:7c:f0:ac:60:de:6c:
                    f9:a1:4c:a7:30:ed:cf:d0:86:d3:d2:c5:27:3c:9d:
                    18:ca:df:1b:d6:cb:95:cc:ac:07:53:a5:9e:1e:cd:
                    1e:27:73:1c:c2:d6:65:50:ef:8c:56:8d:96:7c:86:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:47:A4:2E:13:6E:C3:AD:7B:F6:04:CC:AD:0C:9D:61:C4:B8:C5:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdf0c36b-7fce-3201-b4ee-22ba0b749904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:57f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:41:eb:26:32:f5:87:3b:d2:db:b3:42:30:87:69:17:67:2f:
         f3:e9:dc:41:ae:d9:77:38:88:f9:7e:5a:63:74:db:c9:39:a5:
         c2:82:fd:1a:db:3b:8a:c6:9e:e5:8a:d7:58:7c:0e:e5:2c:4f:
         53:4e:56:fe:99:57:b8:b6:e6:a9:3d:71:07:15:f3:41:b1:1b:
         5f:59:c4:c1:c2:f8:ff:f6:b0:39:a9:8b:77:0b:fc:3f:70:0d:
         f0:8c:86:87:6f:cb:13:8a:b3:11:b1:c9:77:f4:4d:be:35:ee:
         de:87:5b:db:2f:fc:93:40:f7:15:a5:33:a9:52:ba:da:38:c3:
         0c:d7:49:a0:bf:77:87:22:87:b3:1a:b9:65:91:a7:78:fe:95:
         d9:12:03:2a:d0:38:40:22:00:68:7b:0e:d2:cf:f2:d0:fa:bd:
         c5:59:a9:20:d6:70:7b:c3:e6:01:1b:84:52:d5:5d:96:c2:0a:
         0a:cf:c3:df:b5:92:f8:ed:70:fd:7c:a4:fd:50:77:3f:ee:2e:
         f8:9c:24:98:0b:f0:e3:ae:8b:67:2d:df:54:49:92:57:bc:df:
         89:ce:79:b0:79:e0:c7:7c:b0:76:42:bc:a3:d1:6a:b3:35:81:
         1f:2b:ec:af:ac:da:46:b3:83:71:02:cd:3a:5e:8b:2c:51:b3:
         87:09:48:65
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWTTzBQp1gf/DwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
NmIyZDlmMzMtNjI5OS00ZjhjLTg0YTctNzUxYWZhMWI2YjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggIJavHb9WEW3kHyGpE+U6sDFQZv0Hxe/8dP
/ntE6IxfXw7QUURPnscVuCghMDuGny9to7zgd50eR76z1j6g/ObP8CsS6j3MgzHV
gHp57d5g21wQzOQ7mEukrIXZZ7PRH+8KGnvPEenR0t4bLS/Q3XjQPeLsXxVSPVMZ
GvUuF1hi54iuslQXn+aNl9VmV7pNuuVbKTsK12mkQuQPmB8HP7J38Lu9W7i4pBb2
LWQ/YzoPcmZd0EQA3Tz9S9vtM8Sk0GA/FU2nRArumIZ88Kxg3mz5oUynMO3P0IbT
0sUnPJ0Yyt8b1suVzKwHU6WeHs0eJ3McwtZlUO+MVo2WfIYEYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK1HpC4TbsOte/YEzK0MnWHEuMXuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmRmMGMzNmItN2ZjZS0z
MjAxLWI0ZWUtMjJiYTBiNzQ5OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFfw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEBB6yYy9Yc70tuzQjCHaRdnL/Pp3EGu2Xc4iPl+WmN028k5pcKC
/RrbO4rGnuWK11h8DuUsT1NOVv6ZV7i25qk9cQcV80GxG19ZxMHC+P/2sDmpi3cL
/D9wDfCMhodvyxOKsxGxyXf0Tb417t6HW9sv/JNA9xWlM6lSuto4wwzXSaC/d4ci
h7MauWWRp3j+ldkSAyrQOEAiAGh7DtLP8tD6vcVZqSDWcHvD5gEbhFLVXZbCCgrP
w9+1kvjtcP18pP1Qdz/uLvicJJgL8OOui2ct31RJkle834nOebB54Md8sHZCvKPR
arM1gR8r7K+s2kazg3ECzTpeiyxRs4cJSGU=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:43:30 2025 by rpki-client