Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/cacd879b-c595-3b9e-aef7-2d5632987ae5.roa
File:                     cacd879b-c595-3b9e-aef7-2d5632987ae5.roa (raw, json)
Hash identifier:          yawgPOV90nMAtbvpVjO2XcJSUbtBobMrwHHQxap9uvs=
Subject key identifier:   4F:77:C8:FE:E5:B1:0C:01:82:76:D5:D2:BF:81:90:B9:85:F7:E9:43
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858488AE0A417E2B7DE65D236A2A0
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/cacd879b-c595-3b9e-aef7-2d5632987ae5.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     65531
IP address blocks:        2602:fa2e:100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a4:17:e2:b7:de:65:d2:36:a2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=d6d7ae72-25d3-47e8-b302-5696fc55d3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:09:d1:0b:a4:3f:71:f0:ad:64:19:41:cd:
                    7d:97:62:65:44:61:c6:0d:10:30:de:89:55:9a:3a:
                    71:f9:3e:32:54:c4:db:b3:b3:b1:99:db:6e:b3:9f:
                    e0:fd:a1:87:cd:90:49:4c:a9:c3:a7:d7:24:64:3f:
                    71:18:ae:c8:6e:c0:70:fc:82:5d:15:37:1f:8d:b9:
                    74:32:97:27:2c:35:13:6b:68:79:7a:c5:87:86:35:
                    af:14:e0:d7:36:cb:73:e5:61:ff:8d:ef:ed:e6:f7:
                    11:5e:ca:ac:cc:3e:2b:e3:2e:a4:80:20:9d:d0:4e:
                    ad:91:86:30:0e:14:ae:a5:b2:fe:87:6d:9b:1b:38:
                    7e:a8:37:71:f0:6c:84:26:bc:35:d2:10:7f:6b:cc:
                    25:b3:10:51:e8:2a:50:aa:10:c4:8d:6e:b7:48:f0:
                    ab:c8:a6:c6:54:6b:7e:06:83:c5:ab:6d:c4:ee:dd:
                    da:a7:83:5a:2c:e8:c0:12:3b:1f:54:22:82:c3:cf:
                    bc:52:4b:9d:f5:cc:b6:2b:a8:c5:f8:43:4c:7c:03:
                    0b:56:3a:18:39:ac:f4:f3:5d:2d:10:4f:b7:31:b2:
                    61:b1:0d:c7:5c:c4:b7:8d:dd:7b:a8:1c:6a:ad:d4:
                    18:51:3c:fb:57:cb:3f:2e:f6:ec:3d:c1:68:0c:38:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:77:C8:FE:E5:B1:0C:01:82:76:D5:D2:BF:81:90:B9:85:F7:E9:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/cacd879b-c595-3b9e-aef7-2d5632987ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:85:cb:7b:fe:ea:9e:a5:5b:3b:39:80:ff:c4:0b:67:e4:eb:
         34:13:d2:ab:d6:ce:db:a8:4e:7a:03:ba:2d:e3:8e:77:cd:f0:
         9b:6f:1a:f8:14:ce:cf:ad:10:76:b9:c5:3a:b0:73:e7:bb:55:
         86:d8:ca:ca:95:66:e4:d2:02:f7:83:f5:8c:a5:ae:ec:62:d6:
         d8:f6:7f:b7:84:83:ef:d1:5e:0b:6a:c8:ff:26:5f:fe:73:66:
         47:99:fb:95:85:7b:ee:40:cd:77:83:d1:67:fc:7a:27:86:2c:
         94:4e:04:c9:07:29:a6:59:f7:0e:e5:06:b9:ad:74:8e:ad:28:
         55:f5:80:12:1b:de:85:d4:0d:00:87:19:b1:26:e8:d5:99:d3:
         5e:06:aa:a6:82:ae:23:0e:1c:ea:d6:a9:eb:ea:d4:26:f1:c5:
         76:69:c4:ab:41:da:00:f1:19:57:df:b2:5f:d6:ac:f8:2a:50:
         73:3e:b1:0d:c7:32:28:a0:93:fb:76:78:67:c9:e9:d8:a1:e4:
         a9:ab:92:ca:ce:bf:c3:26:fc:1d:cf:b4:9a:67:df:0a:5a:41:
         0b:f4:da:c9:32:94:ce:63:56:b4:6e:5f:8b:14:0c:ac:5d:5b:
         9c:30:29:dc:a0:99:4c:69:3e:97:a7:cb:6b:e7:1c:5f:32:a6:
         c7:b9:02:8d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiK4KQX4rfeZdI2oqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5ODMyMDctODA3My00MmFmLTg4ZWUtZGY0OTAyYzhh
ZGFmMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
ZDZkN2FlNzItMjVkMy00N2U4LWIzMDItNTY5NmZjNTVkM2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzgJ0QukP3HwrWQZQc19l2JlRGHGDRAw3olV
mjpx+T4yVMTbs7Oxmdtus5/g/aGHzZBJTKnDp9ckZD9xGK7IbsBw/IJdFTcfjbl0
MpcnLDUTa2h5esWHhjWvFODXNstz5WH/je/t5vcRXsqszD4r4y6kgCCd0E6tkYYw
DhSupbL+h22bGzh+qDdx8GyEJrw10hB/a8wlsxBR6CpQqhDEjW63SPCryKbGVGt+
BoPFq23E7t3ap4NaLOjAEjsfVCKCw8+8Ukud9cy2K6jF+ENMfAMLVjoYOaz0810t
EE+3MbJhsQ3HXMS3jd17qBxqrdQYUTz7V8s/LvbsPcFoDDiqvQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE93yP7lsQwBgnbV0r+BkLmF9+lDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4
MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5MDJjOGFkYWYvY2FjZDg3OWItYzU5NS0z
YjllLWFlZjctMmQ1NjMyOTg3YWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWY5ODMyMDctODA3My00MmFmLTg4
ZWUtZGY0OTAyYzhhZGFmLzlmOTgzMjA3LTgwNzMtNDJhZi04OGVlLWRmNDkwMmM4
YWRhZi5jcmwwHwYDVR0jBBgwFoAUwyy5+3oif0oFHkqZqPtujWhZyqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5
MDJjOGFkYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6LgEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJaFy3v+6p6lWzs5gP/EC2fk6zQT0qvWztuoTnoDui3jjnfN8Jtv
GvgUzs+tEHa5xTqwc+e7VYbYysqVZuTSAveD9Yylruxi1tj2f7eEg+/RXgtqyP8m
X/5zZkeZ+5WFe+5AzXeD0Wf8eieGLJROBMkHKaZZ9w7lBrmtdI6tKFX1gBIb3oXU
DQCHGbEm6NWZ014GqqaCriMOHOrWqevq1CbxxXZpxKtB2gDxGVffsl/WrPgqUHM+
sQ3HMiigk/t2eGfJ6dih5KmrksrOv8Mm/B3PtJpn3wpaQQv02skylM5jVrRuX4sU
DKxdW5wwKdygmUxpPpeny2vnHF8ypse5Ao0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:15:10 2025 by rpki-client