Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e676e3e1-9964-39d4-8939-6d9203cc5303.roa
File:                     e676e3e1-9964-39d4-8939-6d9203cc5303.roa (raw, json)
Hash identifier:          utrH4PO2lzocAgF+179wU+jwxLm5WGnw+IcgXBU3J0Q=
Subject key identifier:   DA:CB:AA:AA:34:B6:F6:C6:D8:46:19:CA:08:E2:C4:1E:BA:75:99:36
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584953C83003DA4D7CB6FCD8DEC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e676e3e1-9964-39d4-8939-6d9203cc5303.roa
Signing time:             Thu 27 Mar 2025 13:09:16 +0000
ROA not before:           Thu 27 Mar 2025 13:09:16 +0000
ROA not after:            Wed 25 Jun 2025 13:09:16 +0000
asID:                     22773
IP address blocks:        2001:579:41a0::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c8:30:03:da:4d:7c:b6:fc:d8:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 27 13:09:16 2025 GMT
            Not After : Jun 25 13:09:16 2025 GMT
        Subject: CN=34c5d93f-f499-4b68-8065-6fe888edf995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:dc:61:c2:f4:a0:58:72:ef:93:05:95:70:
                    15:ad:19:c5:26:cc:2b:b2:09:ee:8b:91:72:18:0e:
                    d7:45:3e:2a:45:e2:04:73:39:a2:c8:24:93:e3:d6:
                    27:d8:b1:74:34:41:e8:70:5d:e1:72:87:20:09:f5:
                    1b:c6:83:33:11:31:a9:8d:f4:0d:e1:4d:f9:a7:36:
                    30:42:88:91:08:40:d9:b2:0c:d9:30:e9:9e:ff:85:
                    52:1c:57:fa:49:e7:3a:35:11:a3:2d:76:e4:e1:c7:
                    e0:2c:a9:d8:e6:e0:6c:42:a5:89:f2:08:be:ff:90:
                    42:b5:23:ab:88:8f:05:34:fb:f9:73:43:5d:b2:90:
                    c2:33:52:96:94:04:19:80:9b:e1:31:bd:06:89:85:
                    08:62:99:04:8f:8c:f3:08:3e:c6:35:b4:65:bf:8d:
                    4b:79:b6:93:ee:b1:4a:da:22:8f:a9:15:31:cd:c4:
                    b4:14:fd:0c:70:d2:15:a3:b4:03:71:05:11:0e:92:
                    bb:74:e3:79:5d:38:27:a2:05:5b:0f:bf:64:4a:80:
                    9e:8e:1b:bd:7c:63:e7:2d:1e:74:89:7f:ba:c3:ef:
                    dc:84:42:4e:be:b2:36:6f:d7:eb:ad:87:7b:b3:41:
                    7d:53:b5:81:2f:04:58:94:01:31:fd:14:85:cc:b0:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CB:AA:AA:34:B6:F6:C6:D8:46:19:CA:08:E2:C4:1E:BA:75:99:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e676e3e1-9964-39d4-8939-6d9203cc5303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:41a0::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:d9:fa:da:57:b5:ae:ae:eb:65:8a:e8:37:c4:cc:cf:e5:
         9f:b0:8c:bc:65:06:62:4f:bf:63:e2:b6:88:ce:28:7d:a6:b7:
         36:e2:9a:79:43:84:62:46:f9:ea:dd:ce:16:0b:04:a5:9f:c9:
         2c:8f:bd:d1:35:49:b0:58:8c:24:30:9b:3a:ce:53:b0:c3:4e:
         ad:a4:49:ca:a2:48:fa:76:17:40:b9:18:23:b2:0d:cb:7f:89:
         95:e7:5d:1e:19:e3:36:ae:8e:04:64:80:f6:52:26:1a:5f:95:
         67:09:fd:fd:c8:fc:e7:ac:48:dd:68:95:ef:da:18:82:a3:64:
         5a:81:1b:91:d8:a8:e6:42:06:0f:77:63:6a:7e:c3:23:04:c4:
         1a:6d:d2:ef:47:38:dc:f7:ae:4a:a8:97:4b:19:22:00:a7:36:
         0d:7e:4f:f4:aa:73:2c:c4:fa:e1:97:b3:75:94:fe:48:cb:03:
         cb:fe:6a:02:a7:88:50:f2:63:86:4d:32:1c:46:23:8d:51:41:
         f5:8d:e0:16:11:0d:fe:fb:88:21:7f:2e:10:ec:57:35:b5:5d:
         18:12:cc:6a:de:52:22:72:79:bf:14:3c:73:5b:4f:b5:18:81:
         5f:91:6d:34:a9:c4:0b:a8:19:a6:5d:a3:a0:ea:c6:55:1a:50:
         32:7b:6c:ab
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElTyDAD2k18tvzY3sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDMyNzEzMDkxNloXDTI1MDYyNTEzMDkxNlowLzEtMCsGA1UEAxMk
MzRjNWQ5M2YtZjQ5OS00YjY4LTgwNjUtNmZlODg4ZWRmOTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdzcYcL0oFhy75MFlXAVrRnFJswrsgnui5Fy
GA7XRT4qReIEczmiyCST49Yn2LF0NEHocF3hcocgCfUbxoMzETGpjfQN4U35pzYw
QoiRCEDZsgzZMOme/4VSHFf6Sec6NRGjLXbk4cfgLKnY5uBsQqWJ8gi+/5BCtSOr
iI8FNPv5c0NdspDCM1KWlAQZgJvhMb0GiYUIYpkEj4zzCD7GNbRlv41LebaT7rFK
2iKPqRUxzcS0FP0McNIVo7QDcQURDpK7dON5XTgnogVbD79kSoCejhu9fGPnLR50
iX+6w+/chEJOvrI2b9frrYd7s0F9U7WBLwRYlAEx/RSFzLAuRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNrLqqo0tvbG2EYZygjixB66dZk2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTY3NmUzZTEtOTk2NC0z
OWQ0LTg5MzktNmQ5MjAzY2M1MzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeUGg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF1/2fraV7Wurutliug3xMzP5Z+wjLxlBmJPv2PitojOKH2mtzbi
mnlDhGJG+erdzhYLBKWfySyPvdE1SbBYjCQwmzrOU7DDTq2kScqiSPp2F0C5GCOy
Dct/iZXnXR4Z4zaujgRkgPZSJhpflWcJ/f3I/OesSN1ole/aGIKjZFqBG5HYqOZC
Bg93Y2p+wyMExBpt0u9HONz3rkqol0sZIgCnNg1+T/SqcyzE+uGXs3WU/kjLA8v+
agKniFDyY4ZNMhxGI41RQfWN4BYRDf77iCF/LhDsVzW1XRgSzGreUiJyeb8UPHNb
T7UYgV+RbTSpxAuoGaZdo6DqxlUaUDJ7bKs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:11 2025 by rpki-client