Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa
File:                     ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa (raw, json)
Hash identifier:          e1Zz8TvmPKwFL+eXk83dHOp8xU3zf3HMvq7Egi+zdoM=
Subject key identifier:   03:7E:0F:68:65:1E:8F:31:C5:E2:8F:05:85:A8:AD:AC:EE:66:C7:37
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F43285849071BF2427026482945683D80
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        2607:1c0:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:f2:42:70:26:48:29:45:68:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=2c083de9-259e-4d4b-84db-847286901b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:2c:2f:4d:89:3a:f6:89:b4:56:6b:c4:6a:
                    09:f1:a3:22:26:ff:5c:b3:a6:4e:cc:3f:7b:87:f0:
                    2c:d9:5f:12:d3:f4:cb:be:37:d3:e4:ba:fc:6c:b8:
                    e5:2f:52:e6:b3:7a:22:1f:aa:b9:9f:01:2d:7a:69:
                    ff:db:9f:cc:c9:50:d0:9d:2c:e2:7e:2b:ab:05:06:
                    43:59:e0:d5:56:ee:6f:57:c6:e6:34:46:89:9b:13:
                    fd:2f:90:75:40:ab:ed:4c:98:95:3d:57:b4:76:c2:
                    59:af:0d:17:a9:8a:70:41:65:d2:6a:a7:f0:ba:58:
                    3a:50:78:9a:33:8d:e7:1c:72:a1:e6:e5:ce:d7:ad:
                    17:76:76:32:90:97:37:d4:dd:3f:76:c8:3c:48:0b:
                    4e:56:1f:3a:4b:af:fb:98:57:91:2a:60:42:b6:6b:
                    76:fb:c6:9c:86:05:1d:99:1a:0a:2b:88:5c:da:2f:
                    3f:49:b6:b2:63:1c:54:4d:7c:d5:3f:1b:16:7a:af:
                    44:7a:99:ef:28:80:2f:4f:fa:d3:64:e4:6f:f8:ed:
                    db:96:23:ee:e9:07:26:90:23:25:83:fc:8e:71:7c:
                    f0:bd:3f:b9:2d:dc:c1:08:dd:85:8e:18:4a:f3:7e:
                    e7:27:4b:16:e7:8a:92:9c:3d:19:dd:14:0b:81:ca:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:0F:68:65:1E:8F:31:C5:E2:8F:05:85:A8:AD:AC:EE:66:C7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:bf:19:88:6a:88:69:7c:a9:e0:e7:df:c9:20:48:05:0e:
         5a:2f:ce:fa:82:19:ec:28:df:77:16:27:3e:c3:d1:e7:92:29:
         23:e6:9a:aa:92:24:5a:a5:cf:49:4d:40:0f:b7:20:a6:88:5a:
         70:31:b5:31:3d:88:63:77:14:34:98:d6:92:70:a2:67:3c:e2:
         75:60:22:b8:bc:93:8c:16:c1:cf:9b:c0:0a:60:30:d7:70:f8:
         1b:73:6e:94:c1:ce:00:f0:68:66:50:9a:5e:aa:60:5d:9e:88:
         4f:8f:dc:b2:72:da:14:26:5d:cd:b8:b9:f2:dc:db:3d:72:87:
         5e:c4:4e:40:73:ff:48:eb:7c:2c:55:af:88:35:a6:29:ed:5e:
         24:4c:6d:a8:3d:af:b1:bd:92:e0:a8:17:77:36:5c:3d:d9:dc:
         32:43:fb:9d:82:a2:73:cc:43:6c:fc:63:cb:00:7d:fe:e7:1c:
         07:38:ad:11:f2:50:42:da:06:30:b6:8c:f2:e0:f8:56:15:46:
         3d:00:0b:71:e9:30:33:c4:bf:32:bb:c4:7b:5c:49:0b:25:11:
         29:63:ee:e1:59:a5:4c:bf:8a:31:6a:68:83:ac:fd:87:7e:bb:
         30:ce:24:a5:72:4b:af:64:c7:90:25:ba:69:8d:f4:f7:c8:de:
         b6:f1:20:32
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkHG/JCcCZIKUVoPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNjMTdkYjctMjA0Yy00MWUyLTg1Y2EtNmE1YTQ0OGE4
Yjg4MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
MmMwODNkZTktMjU5ZS00ZDRiLTg0ZGItODQ3Mjg2OTAxYjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6UsL02JOvaJtFZrxGoJ8aMiJv9cs6ZOzD97
h/As2V8S0/TLvjfT5Lr8bLjlL1Lms3oiH6q5nwEtemn/25/MyVDQnSzifiurBQZD
WeDVVu5vV8bmNEaJmxP9L5B1QKvtTJiVPVe0dsJZrw0XqYpwQWXSaqfwulg6UHia
M43nHHKh5uXO160XdnYykJc31N0/dsg8SAtOVh86S6/7mFeRKmBCtmt2+8achgUd
mRoKK4hc2i8/SbayYxxUTXzVPxsWeq9EepnvKIAvT/rTZORv+O3bliPu6QcmkCMl
g/yOcXzwvT+5LdzBCN2FjhhK837nJ0sW54qSnD0Z3RQLgcoJTwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAN+D2hlHo8xxeKPBYWorazuZsc3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2Mx
N2RiNy0yMDRjLTQxZTItODVjYS02YTVhNDQ4YThiODgvY2UwZjUxZWQtOTBiMy0z
NDU3LWFjOTYtNWQ2MzAyZmI5ZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNjMTdkYjctMjA0Yy00MWUyLTg1
Y2EtNmE1YTQ0OGE4Yjg4L2MzYzE3ZGI3LTIwNGMtNDFlMi04NWNhLTZhNWE0NDhh
OGI4OC5jcmwwHwYDVR0jBBgwFoAUfS26/0Pb6XKW6UWHlVxFclTUa4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2MxN2RiNy0yMDRjLTQxZTItODVjYS02YTVh
NDQ4YThiODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgcBwAMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGdK/GYhqiGl8qeDn38kgSAUOWi/O+oIZ7CjfdxYnPsPR55IpI+aa
qpIkWqXPSU1AD7cgpohacDG1MT2IY3cUNJjWknCiZzzidWAiuLyTjBbBz5vACmAw
13D4G3NulMHOAPBoZlCaXqpgXZ6IT4/csnLaFCZdzbi58tzbPXKHXsROQHP/SOt8
LFWviDWmKe1eJExtqD2vsb2S4KgXdzZcPdncMkP7nYKic8xDbPxjywB9/uccBzit
EfJQQtoGMLaM8uD4VhVGPQALcekwM8S/MrvEe1xJCyURKWPu4VmlTL+KMWpog6z9
h367MM4kpXJLr2THkCW6aY3098jetvEgMg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:33 2025 by rpki-client