Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/7ff866d1-b948-3a05-9bd7-f437ba8592ae.roa
File:                     7ff866d1-b948-3a05-9bd7-f437ba8592ae.roa (raw, json)
Hash identifier:          YmzPNlnc0re9Xon478Xf2SeGcx5XjdG/dASYnL6VfIc=
Subject key identifier:   CD:AC:13:08:77:FE:5F:1F:7A:CD:1C:52:E0:DB:70:66:7B:5E:F4:CB
Certificate issuer:       /CN=9e36dcff-6526-450f-a9d4-367f2c2d4a7f
Certificate serial:       010D0C9F43285847B6B62B0B0FFB60ADB7A3C980
Authority key identifier: 84:F9:60:4D:69:2E:F4:73:8B:1B:24:A6:73:C0:85:78:58:DE:1B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/7ff866d1-b948-3a05-9bd7-f437ba8592ae.roa
Signing time:             Wed 30 Oct 2024 14:04:07 +0000
ROA not before:           Wed 30 Oct 2024 14:04:07 +0000
ROA not after:            Tue 28 Jan 2025 15:04:07 +0000
asID:                     10616000
IP address blocks:        2602:fc3b:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:b6:2b:0b:0f:fb:60:ad:b7:a3:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e36dcff-6526-450f-a9d4-367f2c2d4a7f
        Validity
            Not Before: Oct 30 14:04:07 2024 GMT
            Not After : Jan 28 15:04:07 2025 GMT
        Subject: CN=d90febb4-5243-46d2-bcaa-d941d0524149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:b0:52:fd:ee:85:38:11:39:0a:1b:59:c2:
                    06:f8:96:43:a5:10:6f:7e:b2:04:b1:94:38:ba:6d:
                    a6:cf:d4:10:74:7a:bc:08:1b:2b:e1:c3:b0:7a:5b:
                    9c:90:60:fc:80:40:77:28:c2:ef:72:e2:72:ff:f5:
                    83:a2:2a:57:c6:9b:81:fe:66:40:c4:2c:63:ae:29:
                    01:a3:d6:76:19:84:ef:f9:9f:c7:0f:84:8d:ec:ef:
                    27:4f:35:33:c8:14:fe:1d:5c:33:08:85:03:8c:59:
                    c8:9f:10:7c:78:35:86:03:fb:b2:56:31:5f:e9:55:
                    6b:a4:29:c9:73:2c:24:04:1a:fb:ed:89:f6:5a:b7:
                    6c:dd:5a:ee:3c:a6:e3:65:34:d1:59:21:94:81:0d:
                    dc:cd:9d:80:d1:8b:70:54:82:c9:13:e4:ba:e0:75:
                    a9:66:55:f2:39:ea:84:51:1a:5e:63:e8:89:26:d5:
                    be:09:92:88:f4:4d:8c:13:4a:c7:6b:3d:c9:f3:b8:
                    d6:b2:56:43:6e:14:99:1c:5c:24:cb:31:0b:e5:f5:
                    56:ca:50:b9:2a:69:c6:b8:b4:d5:7d:a4:9e:60:a8:
                    ad:41:97:8e:7b:9a:da:f1:f5:5e:0b:41:c1:f3:d3:
                    d4:e7:31:ba:ec:9b:cd:fc:04:b8:65:4a:af:e3:ba:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AC:13:08:77:FE:5F:1F:7A:CD:1C:52:E0:DB:70:66:7B:5E:F4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/7ff866d1-b948-3a05-9bd7-f437ba8592ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.crl

            X509v3 Authority Key Identifier:
                keyid:84:F9:60:4D:69:2E:F4:73:8B:1B:24:A6:73:C0:85:78:58:DE:1B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e36dcff-6526-450f-a9d4-367f2c2d4a7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c1:c4:47:21:8e:47:20:9e:06:0f:60:5f:6b:7c:17:fb:5b:
         ad:6d:bd:5c:8a:56:7e:75:56:2d:cd:00:fe:a4:22:c9:ea:8a:
         96:87:66:8e:b5:53:f7:f6:3c:e1:6e:01:0e:12:5b:79:f1:1a:
         1e:f6:e4:ae:d8:57:56:e6:c5:9e:94:a4:98:31:be:ad:cb:99:
         29:98:76:9b:03:94:91:8a:68:0b:6d:9d:d0:cd:55:d6:e8:bb:
         73:db:e4:86:0c:72:ce:ba:a4:4a:6e:84:d7:11:55:51:c9:5a:
         79:b9:91:76:54:ea:13:89:f1:fa:92:60:68:dc:80:62:ce:c1:
         02:29:9a:10:72:e4:11:85:6c:c7:1a:fc:af:41:4b:b3:c9:f2:
         af:0b:b3:b3:ca:f2:d2:4b:2b:4c:4a:4b:21:4a:30:d1:5e:b4:
         5a:72:10:53:07:e0:03:82:a0:05:23:bd:66:42:70:5b:8f:0c:
         66:ae:c0:80:11:7f:67:49:65:f2:05:b5:8e:05:58:ff:f4:8b:
         b4:f7:f7:ca:dc:8b:10:e2:91:aa:7d:de:4e:22:b7:5f:37:2b:
         be:29:0b:ff:5d:ae:63:36:91:ba:92:d5:91:4b:5c:76:61:34:
         fc:c2:bf:c4:0b:52:41:70:2e:4e:3d:e4:77:c7:05:1f:fb:76:
         06:47:66:6a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEe2tisLD/tgrbejyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWUzNmRjZmYtNjUyNi00NTBmLWE5ZDQtMzY3ZjJjMmQ0
YTdmMB4XDTI0MTAzMDE0MDQwN1oXDTI1MDEyODE1MDQwN1owLzEtMCsGA1UEAxMk
ZDkwZmViYjQtNTI0My00NmQyLWJjYWEtZDk0MWQwNTI0MTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArROwUv3uhTgROQobWcIG+JZDpRBvfrIEsZQ4
um2mz9QQdHq8CBsr4cOweluckGD8gEB3KMLvcuJy//WDoipXxpuB/mZAxCxjrikB
o9Z2GYTv+Z/HD4SN7O8nTzUzyBT+HVwzCIUDjFnInxB8eDWGA/uyVjFf6VVrpCnJ
cywkBBr77Yn2Wrds3VruPKbjZTTRWSGUgQ3czZ2A0YtwVILJE+S64HWpZlXyOeqE
URpeY+iJJtW+CZKI9E2ME0rHaz3J87jWslZDbhSZHFwkyzEL5fVWylC5KmnGuLTV
faSeYKitQZeOe5ra8fVeC0HB89PU5zG67JvN/AS4ZUqv47onzQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM2sEwh3/l8fes0cUuDbcGZ7XvTLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZTM2
ZGNmZi02NTI2LTQ1MGYtYTlkNC0zNjdmMmMyZDRhN2YvN2ZmODY2ZDEtYjk0OC0z
YTA1LTliZDctZjQzN2JhODU5MmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWUzNmRjZmYtNjUyNi00NTBmLWE5
ZDQtMzY3ZjJjMmQ0YTdmLzllMzZkY2ZmLTY1MjYtNDUwZi1hOWQ0LTM2N2YyYzJk
NGE3Zi5jcmwwHwYDVR0jBBgwFoAUhPlgTWku9HOLGySmc8CFeFjeG8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZTM2ZGNmZi02NTI2LTQ1MGYtYTlkNC0zNjdm
MmMyZDRhN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8OxAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAe8HERyGORyCeBg9gX2t8F/tbrW29XIpWfnVWLc0A/qQiyeqKlodm
jrVT9/Y84W4BDhJbefEaHvbkrthXVubFnpSkmDG+rcuZKZh2mwOUkYpoC22d0M1V
1ui7c9vkhgxyzrqkSm6E1xFVUclaebmRdlTqE4nx+pJgaNyAYs7BAimaEHLkEYVs
xxr8r0FLs8nyrwuzs8ry0ksrTEpLIUow0V60WnIQUwfgA4KgBSO9ZkJwW48MZq7A
gBF/Z0ll8gW1jgVY//SLtPf3ytyLEOKRqn3eTiK3XzcrvikL/12uYzaRupLVkUtc
dmE0/MK/xAtSQXAuTj3kd8cFH/t2Bkdmag==
-----END CERTIFICATE-----
Generated at Wed Oct 30 19:53:35 2024 by rpki-client on console-fra.rpki-client.org