Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/419b5da7-8df2-34b3-ae5f-d4f8bed52a83.roa
File:                     419b5da7-8df2-34b3-ae5f-d4f8bed52a83.roa (raw, json)
Hash identifier:          joAoBmKS8JkHvDrvF+q2s8n81la5YOdDAd2tC2OXS0U=
Subject key identifier:   1D:16:14:60:E8:82:D8:E6:2F:67:55:F2:35:B1:8A:A5:6B:A6:4C:F6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DA149F5725A762C4C84FCCD80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/419b5da7-8df2-34b3-ae5f-d4f8bed52a83.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        2604:cb00:20::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:49:f5:72:5a:76:2c:4c:84:fc:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=dec63ca2-7170-43a8-a558-489c333ae0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:f3:b0:ef:73:73:8d:6e:68:fc:3b:8a:4a:
                    1b:19:2b:96:bb:58:f7:cb:9a:88:b6:bd:c1:f5:20:
                    11:ff:d3:dd:c5:ba:6e:ca:b1:57:22:c9:1c:1f:a2:
                    a4:68:9c:c6:96:b9:44:41:49:18:a6:89:e4:42:80:
                    5c:b6:79:d2:32:d1:88:71:58:20:36:8b:75:80:1d:
                    45:76:b4:8e:ab:90:9d:6d:66:58:58:59:31:11:df:
                    de:88:f8:de:e8:58:f4:ff:d8:41:33:82:3e:24:a7:
                    e5:62:31:62:b4:51:68:93:98:5f:d8:76:67:ba:e0:
                    14:72:ad:59:89:08:28:40:47:fa:1e:db:ff:65:8b:
                    62:03:85:23:1a:88:a8:e4:a9:b5:e4:f9:a5:db:6a:
                    e5:d4:1a:94:21:2a:fa:32:55:2f:a8:0f:46:00:6a:
                    77:51:9f:f0:e6:4f:85:e2:2d:e8:ee:74:ec:b2:f8:
                    b4:31:61:b3:05:7f:56:4b:dd:25:49:71:cc:c0:71:
                    ad:df:cb:41:2c:22:f9:4f:55:13:40:a5:c4:c6:b2:
                    fb:62:d3:fd:d9:24:17:9c:0c:b9:b7:44:f9:40:ee:
                    b1:d2:e7:d7:e4:10:46:83:83:1d:af:51:97:9a:d3:
                    57:31:6a:59:3d:4b:69:80:60:8d:d9:a5:99:db:25:
                    37:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:16:14:60:E8:82:D8:E6:2F:67:55:F2:35:B1:8A:A5:6B:A6:4C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/419b5da7-8df2-34b3-ae5f-d4f8bed52a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:da:9e:0f:89:5b:e0:b1:e3:66:06:8e:9a:f9:bf:67:1c:f5:
         25:52:45:3a:44:7a:30:0a:ba:ea:83:93:e6:3a:e6:09:f6:40:
         2f:05:d0:cc:4b:74:a2:cc:1d:e5:32:0e:97:14:00:5b:cb:ee:
         c6:44:a5:6f:3b:c6:28:61:b7:e9:6f:03:dc:38:b8:d6:53:34:
         d2:3d:ba:59:d2:df:ba:f2:85:26:35:bf:3f:92:24:0a:7b:fb:
         75:ac:9b:12:b3:7b:c1:b0:c1:69:8d:29:7d:28:b6:c6:a7:fa:
         da:41:f2:5a:6b:60:9a:5b:1d:f1:66:64:ad:0e:0d:a1:df:9b:
         5a:d3:9b:36:fd:f4:40:3c:b3:76:25:b2:5f:db:5e:97:33:79:
         94:30:f4:54:bb:fa:b0:6d:b6:69:40:ce:eb:41:02:0c:f7:a4:
         26:b0:2f:5b:ec:86:7a:c5:80:29:bf:1d:05:6b:b5:78:ff:22:
         93:07:76:c5:36:e2:8c:0b:2a:a9:57:33:2c:7c:68:d8:b2:fa:
         88:05:af:e5:2d:11:70:a3:50:fd:17:0d:d7:68:18:d7:ee:ba:
         f9:63:04:3d:14:24:05:ff:09:03:99:c7:47:39:9b:9f:1b:ae:
         72:71:f8:fa:69:83:22:6a:28:23:68:1a:76:f8:2c:30:53:13:
         95:2b:41:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD2hSfVyWnYsTIT8zYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDQxOTA0MDAwMFoXDTI4MDQxMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGVjNjNjYTItNzE3MC00M2E4LWE1NTgtNDg5YzMzM2FlMGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohjzsO9zc41uaPw7ikobGSuWu1j3y5qItr3B
9SAR/9PdxbpuyrFXIskcH6KkaJzGlrlEQUkYponkQoBctnnSMtGIcVggNot1gB1F
drSOq5CdbWZYWFkxEd/eiPje6Fj0/9hBM4I+JKflYjFitFFok5hf2HZnuuAUcq1Z
iQgoQEf6Htv/ZYtiA4UjGoio5Km15Pml22rl1BqUISr6MlUvqA9GAGp3UZ/w5k+F
4i3o7nTssvi0MWGzBX9WS90lSXHMwHGt38tBLCL5T1UTQKXExrL7YtP92SQXnAy5
t0T5QO6x0ufX5BBGg4Mdr1GXmtNXMWpZPUtpgGCN2aWZ2yU3LwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB0WFGDogtjmL2dV8jWxiqVrpkz2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDE5YjVkYTctOGRmMi0z
NGIzLWFlNWYtZDRmOGJlZDUyYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEfang+JW+Cx42YGjpr5v2cc9SVSRTpEejAKuuqDk+Y65gn2QC8F
0MxLdKLMHeUyDpcUAFvL7sZEpW87xihht+lvA9w4uNZTNNI9ulnS37ryhSY1vz+S
JAp7+3WsmxKze8GwwWmNKX0otsan+tpB8lprYJpbHfFmZK0ODaHfm1rTmzb99EA8
s3Ylsl/bXpczeZQw9FS7+rBttmlAzutBAgz3pCawL1vshnrFgCm/HQVrtXj/IpMH
dsU24owLKqlXMyx8aNiy+ogFr+UtEXCjUP0XDddoGNfuuvljBD0UJAX/CQOZx0c5
m58brnJx+PppgyJqKCNoGnb4LDBTE5UrQc4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:14 2025 by rpki-client