Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/04e98726-cb6c-3fc0-8257-de52674690ff.roa
File:                     04e98726-cb6c-3fc0-8257-de52674690ff.roa (raw, json)
Hash identifier:          TV0ZHbuD2wMSsttj1y+Tx4uMfer4NR3jd66KU3bzyOA=
Subject key identifier:   F9:72:73:A0:AD:52:10:F1:86:09:38:10:14:82:A3:49:C3:7A:12:45
Certificate issuer:       /CN=f0c5c989-838a-4504-9ec3-d2a149457243
Certificate serial:       010D0C9F432858490D0BC6D4ACB22869CD382500
Authority key identifier: AB:26:F7:63:55:B3:02:0B:3B:78:5D:A4:CA:BC:A3:AD:5A:00:19:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/04e98726-cb6c-3fc0-8257-de52674690ff.roa
Signing time:             Sun 02 Mar 2025 05:03:04 +0000
ROA not before:           Sun 02 Mar 2025 05:03:04 +0000
ROA not after:            Sat 31 May 2025 04:03:04 +0000
asID:                     0
IP address blocks:        2604:5e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0d:0b:c6:d4:ac:b2:28:69:cd:38:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c5c989-838a-4504-9ec3-d2a149457243
        Validity
            Not Before: Mar  2 05:03:04 2025 GMT
            Not After : May 31 04:03:04 2025 GMT
        Subject: CN=7724bb8f-0dde-4d18-832e-eaa4e1809bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:7a:9b:7d:f9:26:5b:f1:ca:bb:37:b8:ef:
                    8f:96:9a:9f:32:33:b3:df:fc:ee:26:10:ac:2f:ba:
                    38:8c:4f:b4:a4:3f:00:d5:37:2f:0e:6f:7a:d1:34:
                    94:90:89:8c:e7:12:d0:34:4e:a3:92:46:d4:aa:6a:
                    bb:e6:83:2e:c7:0d:ab:2f:c9:d0:1a:c1:9b:12:f1:
                    07:b6:18:1f:7d:24:b8:51:f2:de:58:86:a1:db:cf:
                    4a:24:9d:01:65:63:d8:63:61:f3:c0:b2:8f:3d:8b:
                    34:c6:30:75:87:d4:3c:12:49:4d:ff:6b:d6:91:9e:
                    3c:b3:8d:d2:97:7f:eb:32:fd:11:81:4e:b4:a8:5d:
                    6b:ef:32:d5:17:93:af:c5:25:2c:9b:e0:88:7d:27:
                    2a:51:f0:67:6a:4e:22:2c:46:a1:85:ef:23:4d:80:
                    b4:a9:6e:13:96:3d:6c:10:10:d7:f6:f1:16:88:ec:
                    fb:cc:34:12:5e:a0:01:b8:97:04:84:ab:d9:0a:d8:
                    e5:be:54:18:1d:fc:c0:5e:10:09:06:11:7b:f1:a7:
                    fc:80:d4:08:34:3e:d5:cd:7b:37:c4:68:ff:9b:33:
                    2e:a8:6c:71:a5:9b:38:fd:e3:d6:a4:c1:94:24:8d:
                    c7:cb:f1:98:e5:f9:cd:08:b4:4e:73:43:51:12:a5:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:72:73:A0:AD:52:10:F1:86:09:38:10:14:82:A3:49:C3:7A:12:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/04e98726-cb6c-3fc0-8257-de52674690ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.crl

            X509v3 Authority Key Identifier:
                keyid:AB:26:F7:63:55:B3:02:0B:3B:78:5D:A4:CA:BC:A3:AD:5A:00:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:03:d3:8e:18:dd:6c:7d:b2:be:87:49:3c:06:77:95:f8:78:
         ed:f0:36:fe:4d:09:49:fe:b9:ce:b2:62:e0:55:86:1c:c3:1b:
         77:bf:39:d7:c8:13:b3:fa:a4:30:33:d3:97:c8:a9:d5:1c:2e:
         76:ad:65:84:05:58:cd:f9:0d:11:01:18:18:f5:ed:69:86:20:
         75:c1:a9:c6:c9:90:ef:a6:c1:38:7c:e7:ca:22:99:17:18:9a:
         b8:86:df:5c:f1:06:8b:4e:9a:8f:f6:50:32:e6:44:25:50:a0:
         3a:5d:a5:2f:75:b2:a5:43:2f:66:31:9b:21:0c:0a:ac:84:c4:
         be:27:56:dd:b7:5e:c0:ed:02:a8:6a:23:33:cd:25:8a:5e:90:
         4c:41:0c:c0:fe:5c:0e:31:b3:f4:b8:a8:da:06:c8:52:aa:06:
         5e:ac:5a:1d:5c:71:35:26:4b:54:d9:f9:1e:8e:52:ad:82:ab:
         18:04:08:14:54:d4:c4:cf:b3:69:47:a3:33:d3:41:20:38:7f:
         a8:0e:e2:be:65:9a:e2:1c:49:71:c3:53:29:11:95:81:00:79:
         17:05:60:c2:9c:36:2b:e5:24:0e:9a:f4:c9:21:3c:21:84:ec:
         53:e7:04:51:3f:49:81:87:64:7e:e1:4e:f4:bf:64:1c:74:bd:
         61:85:63:e3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkNC8bUrLIoac04JQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBjNWM5ODktODM4YS00NTA0LTllYzMtZDJhMTQ5NDU3
MjQzMB4XDTI1MDMwMjA1MDMwNFoXDTI1MDUzMTA0MDMwNFowLzEtMCsGA1UEAxMk
NzcyNGJiOGYtMGRkZS00ZDE4LTgzMmUtZWFhNGUxODA5YmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDl6m335Jlvxyrs3uO+PlpqfMjOz3/zuJhCs
L7o4jE+0pD8A1TcvDm960TSUkImM5xLQNE6jkkbUqmq75oMuxw2rL8nQGsGbEvEH
thgffSS4UfLeWIah289KJJ0BZWPYY2HzwLKPPYs0xjB1h9Q8EklN/2vWkZ48s43S
l3/rMv0RgU60qF1r7zLVF5OvxSUsm+CIfScqUfBnak4iLEahhe8jTYC0qW4Tlj1s
EBDX9vEWiOz7zDQSXqABuJcEhKvZCtjlvlQYHfzAXhAJBhF78af8gNQIND7VzXs3
xGj/mzMuqGxxpZs4/ePWpMGUJI3Hy/GY5fnNCLROc0NREqU5jQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPlyc6CtUhDxhgk4EBSCo0nDehJFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMGM1
Yzk4OS04MzhhLTQ1MDQtOWVjMy1kMmExNDk0NTcyNDMvMDRlOTg3MjYtY2I2Yy0z
ZmMwLTgyNTctZGU1MjY3NDY5MGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjBjNWM5ODktODM4YS00NTA0LTll
YzMtZDJhMTQ5NDU3MjQzL2YwYzVjOTg5LTgzOGEtNDUwNC05ZWMzLWQyYTE0OTQ1
NzI0My5jcmwwHwYDVR0jBBgwFoAUqyb3Y1WzAgs7eF2kyryjrVoAGfkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mMGM1Yzk4OS04MzhhLTQ1MDQtOWVjMy1kMmEx
NDk0NTcyNDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQF4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCeA9OOGN1sfbK+h0k8BneV+Hjt8Db+TQlJ/rnOsmLgVYYcwxt3vznX
yBOz+qQwM9OXyKnVHC52rWWEBVjN+Q0RARgY9e1phiB1wanGyZDvpsE4fOfKIpkX
GJq4ht9c8QaLTpqP9lAy5kQlUKA6XaUvdbKlQy9mMZshDAqshMS+J1bdt17A7QKo
aiMzzSWKXpBMQQzA/lwOMbP0uKjaBshSqgZerFodXHE1JktU2fkejlKtgqsYBAgU
VNTEz7NpR6Mz00EgOH+oDuK+ZZriHElxw1MpEZWBAHkXBWDCnDYr5SQOmvTJITwh
hOxT5wRRP0mBh2R+4U70v2QcdL1hhWPj
-----END CERTIFICATE-----
Generated at Thu Apr 10 07:23:39 2025 by rpki-client