Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/157e7ddc-0440-39be-bf38-9215c69ec8a3.roa
File:                     157e7ddc-0440-39be-bf38-9215c69ec8a3.roa (raw, json)
Hash identifier:          Pr4RcV6YNOvwjTgsVvNCMyRxo2ycp7/W06bp6iuYowE=
Subject key identifier:   80:5F:E6:5C:7E:B8:D3:48:2C:62:B1:83:F0:22:23:BC:C6:BE:32:74
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F4328584900215F2904B54E186EB098C0
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/157e7ddc-0440-39be-bf38-9215c69ec8a3.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     23470
IP address blocks:        2602:fc2f:f02::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:5f:29:04:b5:4e:18:6e:b0:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=71dc0772-3968-4028-ad4c-4ac0eb26d8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:18:d8:59:f7:92:6d:ec:9c:56:56:a1:d6:
                    c9:04:fe:47:10:fe:a2:69:fd:b2:0a:cf:f1:ac:23:
                    4b:41:70:2e:56:a4:01:65:37:cc:02:6e:26:c1:1b:
                    c8:f4:bd:7d:42:0c:6d:d8:d3:d7:3b:cb:39:08:b4:
                    01:37:1a:ed:30:fb:06:ea:93:fc:f4:93:48:54:f8:
                    f5:06:3d:1c:60:47:a2:b1:e3:92:a2:2e:ad:d1:7c:
                    d1:4b:b4:c9:f1:83:4c:f5:64:f5:d8:72:de:a9:f6:
                    8e:40:f4:0f:0f:3f:0e:04:36:a0:c5:29:56:de:3b:
                    ad:eb:7a:b8:27:d4:b9:57:2a:9e:38:23:c1:16:01:
                    68:d0:f8:6d:95:4b:d7:6c:11:61:5a:b0:f5:77:86:
                    b3:f3:0c:9d:99:cd:e7:58:3a:d0:7e:e9:43:9a:32:
                    87:bd:d4:59:ef:f7:e9:ad:7a:50:88:34:f8:88:53:
                    9b:3f:91:74:15:ea:6f:c2:61:7e:1e:07:b2:77:6b:
                    f6:3e:fd:34:97:03:7e:1b:40:5f:8a:f9:ee:4c:33:
                    7c:99:ab:0b:78:a9:a3:41:92:43:54:1a:a6:44:4a:
                    40:da:39:56:f1:94:4a:0b:a8:97:11:96:46:69:f8:
                    12:a8:95:d9:a4:39:e2:69:1c:48:e2:a0:ef:cd:dd:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5F:E6:5C:7E:B8:D3:48:2C:62:B1:83:F0:22:23:BC:C6:BE:32:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/157e7ddc-0440-39be-bf38-9215c69ec8a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2f:f02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:83:89:d9:d3:d3:37:0f:f2:ab:92:5a:ce:ad:c0:bf:3e:70:
         cb:9b:6e:84:50:63:62:3f:bb:2b:1c:be:04:59:82:0e:5f:9e:
         e2:98:cd:41:c4:70:09:1d:4f:cc:5c:d5:b7:14:ee:f8:fa:08:
         43:de:93:47:1e:70:b3:97:67:76:0a:0e:6f:23:f6:69:a1:92:
         a3:08:ca:be:d9:85:fb:04:98:b9:dd:bf:6c:d7:05:b4:ae:1f:
         54:11:fd:74:04:6a:7b:db:b0:16:7c:03:2d:fe:6b:39:7d:c5:
         d8:ce:28:c0:b2:d9:9e:eb:52:48:59:86:74:ed:c5:92:8d:17:
         76:29:10:ee:d0:3c:a0:0c:dd:cb:19:f7:86:27:30:3e:1c:5a:
         86:a6:e2:ee:ef:6d:d6:01:6d:a2:e7:85:df:13:97:ab:cc:2d:
         98:8b:f2:f1:80:1f:d8:0a:7a:5d:af:40:08:76:72:69:fa:8d:
         1a:a4:64:f4:5e:d2:65:e2:f7:72:d0:43:a1:54:39:fc:89:9a:
         77:96:1c:d7:1c:0f:82:b4:c0:27:85:89:cc:5e:c0:53:5b:ab:
         51:41:ae:5d:25:95:b0:46:8d:26:e9:21:ba:70:98:54:59:ac:
         93:73:88:30:d7:3c:43:47:50:d8:fc:e8:df:46:cd:62:42:01:
         b4:0e:41:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIV8pBLVOGG6wmMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU4NDhlMTYtYjQyOS00NTA1LTkyMzQtZjZkODg5ZmQx
NDM4MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NzFkYzA3NzItMzk2OC00MDI4LWFkNGMtNGFjMGViMjZkOGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxioY2Fn3km3snFZWodbJBP5HEP6iaf2yCs/x
rCNLQXAuVqQBZTfMAm4mwRvI9L19Qgxt2NPXO8s5CLQBNxrtMPsG6pP89JNIVPj1
Bj0cYEeiseOSoi6t0XzRS7TJ8YNM9WT12HLeqfaOQPQPDz8OBDagxSlW3jut63q4
J9S5VyqeOCPBFgFo0PhtlUvXbBFhWrD1d4az8wydmc3nWDrQfulDmjKHvdRZ7/fp
rXpQiDT4iFObP5F0FepvwmF+Hgeyd2v2Pv00lwN+G0BfivnuTDN8masLeKmjQZJD
VBqmREpA2jlW8ZRKC6iXEZZGafgSqJXZpDniaRxI4qDvzd2p6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIBf5lx+uNNILGKxg/AiI7zGvjJ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0
OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4ODlmZDE0MzgvMTU3ZTdkZGMtMDQ0MC0z
OWJlLWJmMzgtOTIxNWM2OWVjOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4NDhlMTYtYjQyOS00NTA1LTky
MzQtZjZkODg5ZmQxNDM4L2RlODQ4ZTE2LWI0MjktNDUwNS05MjM0LWY2ZDg4OWZk
MTQzOC5jcmwwHwYDVR0jBBgwFoAUHsnQl1NrlIorg8DaKChlnetiZ+QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4
ODlmZDE0MzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8Lw8C
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFCDidnT0zcP8quSWs6twL8+cMubboRQY2I/uyscvgRZgg5fnuKY
zUHEcAkdT8xc1bcU7vj6CEPek0cecLOXZ3YKDm8j9mmhkqMIyr7ZhfsEmLndv2zX
BbSuH1QR/XQEanvbsBZ8Ay3+azl9xdjOKMCy2Z7rUkhZhnTtxZKNF3YpEO7QPKAM
3csZ94YnMD4cWoam4u7vbdYBbaLnhd8Tl6vMLZiL8vGAH9gKel2vQAh2cmn6jRqk
ZPRe0mXi93LQQ6FUOfyJmneWHNccD4K0wCeFicxewFNbq1FBrl0llbBGjSbpIbpw
mFRZrJNziDDXPENHUNj86N9GzWJCAbQOQR8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:42 2025 by rpki-client