Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/6da3baad-46e4-37f2-9c98-ee417f9b2dc1.roa
File:                     6da3baad-46e4-37f2-9c98-ee417f9b2dc1.roa (raw, json)
Hash identifier:          iEiV8LwqZb4cCl3TymKJlDp79UmjW5BZlIn+AQC8PpA=
Subject key identifier:   AE:C3:2A:5B:F0:D0:88:2A:31:68:31:E3:B7:64:0F:D6:3F:54:5E:5F
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A315D1A6F8BF1C50773A5060
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/6da3baad-46e4-37f2-9c98-ee417f9b2dc1.roa
Signing time:             Thu 23 Jan 2025 06:07:37 +0000
ROA not before:           Thu 23 Jan 2025 06:07:37 +0000
ROA not after:            Wed 23 Apr 2025 05:07:37 +0000
asID:                     19165
IP address blocks:        2604:5500:9000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:15:d1:a6:f8:bf:1c:50:77:3a:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 23 06:07:37 2025 GMT
            Not After : Apr 23 05:07:37 2025 GMT
        Subject: CN=b3015099-2440-4a2b-ad6d-f5a7ccadf326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:87:36:67:f0:7d:41:6e:c7:e9:a3:1e:97:
                    c2:e5:a1:54:8f:66:c4:b1:c3:6f:fd:34:95:6b:98:
                    ab:7d:c6:c3:85:25:f9:40:7f:3f:0f:f4:f4:0b:a5:
                    9e:ca:85:91:7d:ad:0f:79:0b:c1:74:bf:96:55:bd:
                    db:fb:d3:2f:98:89:93:1c:39:c4:16:24:6e:73:cd:
                    c3:34:0d:61:1d:1d:39:42:43:02:1f:b6:c9:79:91:
                    30:5b:af:d5:88:00:29:a0:54:29:e3:99:24:85:c6:
                    7b:33:4d:86:b9:da:67:2c:6f:06:c6:46:dc:10:61:
                    86:b7:9a:51:20:d8:6e:ee:c5:b8:5b:05:51:80:14:
                    81:b1:5b:c2:01:60:3a:3a:c5:4e:32:e4:93:27:43:
                    bf:ca:b1:63:be:cf:6c:ef:90:b4:49:f6:1d:5e:d1:
                    b4:aa:b0:67:9b:48:91:f7:a1:72:37:70:a5:d7:bd:
                    90:0f:bd:ea:81:50:9b:d2:52:33:c5:26:93:2d:53:
                    9d:17:55:ef:8f:0d:2d:9e:0a:4f:21:6a:e2:74:5b:
                    5c:37:b6:42:a1:1e:1e:18:65:75:08:d2:9c:9e:7f:
                    2f:c0:11:31:a1:26:52:30:ed:63:3d:a8:b1:d5:57:
                    2f:79:ae:fe:38:f9:d1:bf:09:12:7a:09:68:32:e9:
                    82:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C3:2A:5B:F0:D0:88:2A:31:68:31:E3:B7:64:0F:D6:3F:54:5E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/6da3baad-46e4-37f2-9c98-ee417f9b2dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:4f:cc:54:78:f3:12:aa:c8:9d:cb:d7:b5:39:46:c8:76:ad:
         e1:0a:3a:63:31:0e:2f:49:39:ff:1c:f3:2f:ff:e7:f2:58:54:
         7a:44:85:89:ba:3d:d6:fc:b7:8e:21:82:58:54:58:52:0e:f4:
         2a:38:e6:44:44:37:72:9c:99:5c:1b:bc:68:07:fb:73:33:0c:
         e8:34:cc:e0:28:f6:09:86:07:56:01:66:30:81:07:f4:59:0b:
         65:d3:63:f1:36:21:9b:75:14:1e:09:e0:21:68:e0:73:11:97:
         bf:9e:cb:82:4b:c2:9b:61:41:3c:00:6e:34:9a:f9:ad:63:59:
         b0:c4:ae:85:0f:0a:e4:30:2d:6b:8d:b0:be:1d:33:88:5a:40:
         48:8d:0b:33:00:a2:12:07:d6:c4:4a:1c:88:a9:23:c9:54:08:
         b1:90:22:53:a2:eb:d1:54:fa:4d:ad:82:7f:43:c8:fe:d6:86:
         b5:94:f6:46:89:13:99:af:76:a5:62:1b:3a:46:e1:8f:44:90:
         b2:d3:f6:f6:59:73:99:9a:d5:cb:6b:d4:30:ed:6f:68:e1:26:
         5b:a7:34:fb:4d:14:8a:ee:b4:f4:75:79:0f:14:6a:01:f4:bc:
         56:ef:ce:90:f2:c0:78:03:19:3a:ab:f3:4f:23:08:6a:50:d1:
         ce:96:22:4d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEijFdGm+L8cUHc6UGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2
NDA0MB4XDTI1MDEyMzA2MDczN1oXDTI1MDQyMzA1MDczN1owLzEtMCsGA1UEAxMk
YjMwMTUwOTktMjQ0MC00YTJiLWFkNmQtZjVhN2NjYWRmMzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocSHNmfwfUFux+mjHpfC5aFUj2bEscNv/TSV
a5irfcbDhSX5QH8/D/T0C6WeyoWRfa0PeQvBdL+WVb3b+9MvmImTHDnEFiRuc83D
NA1hHR05QkMCH7bJeZEwW6/ViAApoFQp45kkhcZ7M02GudpnLG8GxkbcEGGGt5pR
INhu7sW4WwVRgBSBsVvCAWA6OsVOMuSTJ0O/yrFjvs9s75C0SfYdXtG0qrBnm0iR
96FyN3Cl172QD73qgVCb0lIzxSaTLVOdF1Xvjw0tngpPIWridFtcN7ZCoR4eGGV1
CNKcnn8vwBExoSZSMO1jPaix1Vcvea7+OPnRvwkSegloMumCTQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFK7DKlvw0IgqMWgx47dkD9Y/VF5fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz
YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvNmRhM2JhYWQtNDZlNC0z
N2YyLTljOTgtZWU0MTdmOWIyZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm
NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl
NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz
ZjY1ZTY0MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgRVAJAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAm0/MVHjzEqrIncvXtTlGyHat4Qo6YzEOL0k5/xzzL//n8lhUekSF
ibo91vy3jiGCWFRYUg70KjjmREQ3cpyZXBu8aAf7czMM6DTM4Cj2CYYHVgFmMIEH
9FkLZdNj8TYhm3UUHgngIWjgcxGXv57LgkvCm2FBPABuNJr5rWNZsMSuhQ8K5DAt
a42wvh0ziFpASI0LMwCiEgfWxEociKkjyVQIsZAiU6Lr0VT6Ta2Cf0PI/taGtZT2
RokTma92pWIbOkbhj0SQstP29llzmZrVy2vUMO1vaOEmW6c0+00Uiu609HV5DxRq
AfS8Vu/OkPLAeAMZOqvzTyMIalDRzpYiTQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:17 2025 by rpki-client