Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/7750dbea-23be-30cb-a5c2-247a4b108e61.roa
File:                     7750dbea-23be-30cb-a5c2-247a4b108e61.roa (raw, json)
Hash identifier:          qsIzL2bjiGoqks0BU0sbAIZUdo6M7BtEllCiwX17eEc=
Subject key identifier:   77:E5:A4:81:5D:F2:58:32:DA:F9:FB:C2:9F:24:75:54:6C:DC:C5:52
Certificate issuer:       /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial:       010D0C9F432858492CB20B632F1BEE442C265740
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/7750dbea-23be-30cb-a5c2-247a4b108e61.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     398464
IP address blocks:        2606:8940::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:0b:63:2f:1b:ee:44:2c:26:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=1fca4520-dfc8-44a5-b8c7-5236d5402922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:c2:7f:63:5c:e1:51:ee:dd:aa:3e:55:65:
                    8a:61:c4:d0:81:36:d6:2a:23:4b:f1:1f:43:cd:fa:
                    8c:78:53:a2:05:1e:72:ab:fa:f9:44:8f:17:77:74:
                    7a:ec:12:a9:20:5a:1a:72:55:1c:b1:a4:34:98:0d:
                    e7:9b:0f:e1:49:18:68:34:9b:41:57:8d:97:e8:50:
                    82:e3:d7:d0:a7:37:b6:2f:63:50:83:98:c4:a6:9a:
                    50:74:61:db:79:98:af:4a:0f:3d:13:f4:7e:77:e6:
                    47:0b:f1:29:8e:1e:b4:18:6c:3a:b1:4c:55:03:0b:
                    92:a5:d1:4a:28:4f:85:41:25:69:13:8c:10:6a:89:
                    ed:3c:9a:d6:97:3b:3c:7b:67:2c:87:30:9c:6e:75:
                    cb:ee:d3:f8:7a:12:fd:d3:bb:02:44:22:65:c3:e3:
                    2f:1d:81:00:75:6e:da:8a:9d:0a:6f:e0:61:b0:2d:
                    25:fd:7a:2e:12:99:e0:11:36:2e:f7:49:27:c9:dc:
                    9b:a8:fa:f4:c1:23:50:b1:7b:00:91:3a:0d:63:95:
                    25:07:68:64:d6:b7:3f:50:4a:cd:77:d5:74:ea:05:
                    e8:3c:c8:e0:20:c2:55:34:4c:54:a0:48:83:01:ff:
                    7e:42:ee:6e:08:cc:86:d3:26:7b:ef:97:96:96:39:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:A4:81:5D:F2:58:32:DA:F9:FB:C2:9F:24:75:54:6C:DC:C5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/7750dbea-23be-30cb-a5c2-247a4b108e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:b3:08:62:6e:63:da:ad:35:c8:a5:29:9b:5b:0e:ce:62:
         bf:05:58:17:d7:37:e0:11:3d:7a:f9:73:40:cb:3c:c6:17:6f:
         f8:6a:5a:5f:31:67:20:55:5f:b9:d0:17:8e:66:3d:34:93:1f:
         88:dd:96:8b:de:69:bb:ad:f8:f9:cd:a5:48:39:f9:ba:6c:85:
         0c:84:2b:35:44:5c:60:e5:0d:f1:d4:76:8c:42:5c:cf:e7:81:
         af:ab:6d:24:42:4e:5a:fc:2e:d1:0e:ee:f9:3c:09:72:e6:0b:
         f2:c9:b5:ef:55:13:08:b5:a0:de:50:b7:47:9f:20:72:92:4d:
         13:f1:53:93:97:d2:92:69:1b:ca:d2:05:61:85:d1:4e:71:ae:
         b8:5d:57:b3:96:84:e3:4b:00:b8:2c:81:b5:5e:88:73:56:a1:
         39:69:10:59:96:79:39:8e:4b:bc:6f:b8:9c:c2:d8:ac:31:11:
         05:3f:68:9f:d3:59:4e:bb:37:f2:c6:3e:fb:e0:59:5b:75:2b:
         62:0d:42:5a:69:ad:37:cc:c9:60:72:08:fb:5d:ad:5f:ed:96:
         4a:4c:75:9a:40:83:a6:08:b4:a1:3d:c4:45:ed:f5:d3:e6:24:
         25:13:99:3a:58:2c:d7:95:b4:f2:72:eb:4f:47:0b:4c:f8:5e:
         79:d3:d5:d7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkssgtjLxvuRCwmV0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNlODRmYjItYzUzOS00NmU3LTgyMTItMTJiOTczMGFm
ZWJhMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MWZjYTQ1MjAtZGZjOC00NGE1LWI4YzctNTIzNmQ1NDAyOTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk73Cf2Nc4VHu3ao+VWWKYcTQgTbWKiNL8R9D
zfqMeFOiBR5yq/r5RI8Xd3R67BKpIFoaclUcsaQ0mA3nmw/hSRhoNJtBV42X6FCC
49fQpze2L2NQg5jEpppQdGHbeZivSg89E/R+d+ZHC/Epjh60GGw6sUxVAwuSpdFK
KE+FQSVpE4wQaontPJrWlzs8e2cshzCcbnXL7tP4ehL907sCRCJlw+MvHYEAdW7a
ip0Kb+BhsC0l/XouEpngETYu90knydybqPr0wSNQsXsAkToNY5UlB2hk1rc/UErN
d9V06gXoPMjgIMJVNExUoEiDAf9+Qu5uCMyG0yZ775eWljkgZQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHflpIFd8lgy2vn7wp8kdVRs3MVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4
NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMwYWZlYmEvNzc1MGRiZWEtMjNiZS0z
MGNiLWE1YzItMjQ3YTRiMTA4ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGNlODRmYjItYzUzOS00NmU3LTgy
MTItMTJiOTczMGFmZWJhLzhjZTg0ZmIyLWM1MzktNDZlNy04MjEyLTEyYjk3MzBh
ZmViYS5jcmwwHwYDVR0jBBgwFoAU04o5ZeFTwwNkwVYPyUWDtvqxONswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5
NzMwYWZlYmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaJQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBFtrMIYm5j2q01yKUpm1sOzmK/BVgX1zfgET16+XNAyzzGF2/4alpf
MWcgVV+50BeOZj00kx+I3ZaL3mm7rfj5zaVIOfm6bIUMhCs1RFxg5Q3x1HaMQlzP
54Gvq20kQk5a/C7RDu75PAly5gvyybXvVRMItaDeULdHnyBykk0T8VOTl9KSaRvK
0gVhhdFOca64XVezloTjSwC4LIG1XohzVqE5aRBZlnk5jku8b7icwtisMREFP2if
01lOuzfyxj774FlbdStiDUJaaa03zMlgcgj7Xa1f7ZZKTHWaQIOmCLShPcRF7fXT
5iQlE5k6WCzXlbTycutPRwtM+F5509XX
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:33 2025 by rpki-client