Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa
File:                     1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa (raw, json)
Hash identifier:          b6JqhzipqP4KcIeHNLzOe1wnFLXUZwG7j43w3R+XznM=
Subject key identifier:   58:2B:4F:63:3D:7D:C6:C8:1B:2F:2F:22:DD:64:8E:4A:65:B4:1B:19
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285848DBD66F8213EAD1A51512A880
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     61317
IP address blocks:        2604:4500:1200::/40 maxlen: 40
                          2604:4500:1300::/40 maxlen: 40
                          2604:4500:1400::/40 maxlen: 40
                          2604:4500:1500::/40 maxlen: 40
                          2604:4500:1600::/40 maxlen: 40
                          2604:4500:1700::/40 maxlen: 40
                          2604:4500:1800::/40 maxlen: 40
                          2604:4500:1900::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:6f:82:13:ea:d1:a5:15:12:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=2ec6e383-f702-4fac-978d-d82c58fca84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:2d:21:4a:5a:ac:63:09:cf:54:87:22:1c:
                    10:17:33:a6:67:39:2a:d3:6d:56:52:44:8e:68:36:
                    70:7c:cd:f0:bf:d0:ea:93:c5:f2:d9:8e:89:21:ac:
                    d9:13:23:d2:1d:ec:0d:61:93:7a:1b:91:0c:9b:2c:
                    1f:f8:87:fd:31:f5:a0:05:a3:28:af:96:dd:e6:bf:
                    37:04:20:c2:52:93:bb:06:88:4f:72:42:71:66:b5:
                    98:17:c5:28:bd:e1:bf:19:c3:33:ac:5b:b5:c0:49:
                    fe:08:7b:d1:7a:4d:64:39:a1:ed:ae:22:6c:70:ac:
                    c3:6b:38:36:89:f2:68:2a:90:a0:8d:e3:e2:1a:ce:
                    36:3a:87:cd:67:fc:df:94:4c:20:3f:bc:98:8a:74:
                    1a:47:4d:30:21:a8:fd:98:dd:c9:36:f2:13:4c:ca:
                    a6:51:a1:1c:0b:36:0f:34:0d:37:f1:ca:bc:47:50:
                    75:61:33:81:81:07:65:da:73:85:65:a8:fe:35:34:
                    4e:4c:20:3c:9c:96:b7:ab:7c:d4:24:31:bd:b2:85:
                    34:e4:8c:f8:1f:78:df:c9:0d:bb:6d:95:b0:8e:34:
                    21:45:bf:b0:c2:e4:01:d9:61:1f:64:c2:c7:f6:6c:
                    2b:d8:2f:19:0e:63:4e:9a:85:42:33:da:70:97:cb:
                    36:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2B:4F:63:3D:7D:C6:C8:1B:2F:2F:22:DD:64:8E:4A:65:B4:1B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1200::-2604:4500:19ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:b2:40:c7:24:6b:f4:67:a7:34:46:f3:13:51:00:b8:d4:
         a8:1e:a9:e2:2d:30:e8:9f:40:a9:a8:b3:d7:82:d7:29:b1:e9:
         1c:96:5e:8a:8f:6a:e1:99:85:20:45:a8:e6:6a:f8:e5:f0:10:
         69:89:8f:d8:b7:f1:48:51:93:77:dc:ad:d0:4c:78:38:39:45:
         8f:99:96:02:1c:88:a3:65:4f:6c:2c:80:28:99:7e:61:1f:e3:
         28:f5:88:45:f9:c0:91:45:43:4e:67:43:0d:8b:a9:1d:06:55:
         c0:cf:39:3e:eb:44:16:f9:40:a5:c8:6b:5a:ff:01:4b:82:39:
         69:a7:70:37:8a:8c:c5:56:8c:b2:b5:78:79:5d:48:3f:dc:0c:
         41:ce:19:2f:3b:44:94:34:d9:b5:3e:88:4f:03:e7:c2:d5:b3:
         30:a0:c1:16:69:8d:a7:1f:e8:81:61:f1:87:1d:38:bf:00:60:
         bb:7a:a7:25:49:6c:a6:33:71:0d:29:b8:0a:0e:04:38:16:b1:
         c0:53:16:62:88:a3:da:76:14:6f:9c:65:3a:03:3c:77:37:6c:
         62:aa:80:bc:ac:1c:26:ce:8e:2f:8e:5d:56:f4:e3:bd:2f:fc:
         3c:ed:54:21:8a:e6:4f:3d:4b:73:13:19:ef:6a:6e:b6:2b:7e:
         00:44:c7:30
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjb1m+CE+rRpRUSqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk
MmVjNmUzODMtZjcwMi00ZmFjLTk3OGQtZDgyYzU4ZmNhODRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MItIUparGMJz1SHIhwQFzOmZzkq021WUkSO
aDZwfM3wv9Dqk8Xy2Y6JIazZEyPSHewNYZN6G5EMmywf+If9MfWgBaMor5bd5r83
BCDCUpO7BohPckJxZrWYF8UoveG/GcMzrFu1wEn+CHvRek1kOaHtriJscKzDazg2
ifJoKpCgjePiGs42OofNZ/zflEwgP7yYinQaR00wIaj9mN3JNvITTMqmUaEcCzYP
NA038cq8R1B1YTOBgQdl2nOFZaj+NTROTCA8nJa3q3zUJDG9soU05Iz4H3jfyQ27
bZWwjjQhRb+wwuQB2WEfZMLH9mwr2C8ZDmNOmoVCM9pwl8s2yQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFFgrT2M9fcbIGy8vIt1kjkpltBsZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWVlYWY5ODMtOGQzYS0z
MTE1LTliNmUtMzBkZmEwMjA3ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgEmBEUA
EgMGASYERQAYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAIG5skDHJGv0Z6c0RvMTUQC41KgeqeItMOifQKmo
s9eC1ymx6RyWXoqPauGZhSBFqOZq+OXwEGmJj9i38UhRk3fcrdBMeDg5RY+ZlgIc
iKNlT2wsgCiZfmEf4yj1iEX5wJFFQ05nQw2LqR0GVcDPOT7rRBb5QKXIa1r/AUuC
OWmncDeKjMVWjLK1eHldSD/cDEHOGS87RJQ02bU+iE8D58LVszCgwRZpjacf6IFh
8YcdOL8AYLt6pyVJbKYzcQ0puAoOBDgWscBTFmKIo9p2FG+cZToDPHc3bGKqgLys
HCbOji+OXVb0470v/DztVCGK5k89S3MTGe9qbrYrfgBExzA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:58 2025 by rpki-client