Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/25b58291-455e-37c7-900e-654b6a637a7d.roa
File:                     25b58291-455e-37c7-900e-654b6a637a7d.roa (raw, json)
Hash identifier:          wWpcHhrdh34tRDcaiPkLAhAXiOEQFNijipstKmqWD4c=
Subject key identifier:   2C:76:2A:51:DB:31:B3:D9:EE:6D:B9:15:C2:3F:E7:B3:C4:9D:27:BD
Certificate issuer:       /CN=db3a4466-554c-4a7d-9803-eceac12519bb
Certificate serial:       010D0C9F432858488815EA9936E0F86ED30741C0
Authority key identifier: DF:C1:84:7A:4C:76:6B:D7:EB:4D:50:5D:47:52:BC:DF:54:A4:70:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/25b58291-455e-37c7-900e-654b6a637a7d.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     401065
IP address blocks:        2602:f8ec::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:ea:99:36:e0:f8:6e:d3:07:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db3a4466-554c-4a7d-9803-eceac12519bb
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=dfbe4bcc-7f51-48d4-82d8-012ccbea2500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:c6:4e:84:4f:78:33:e0:02:af:61:14:17:
                    ec:d4:59:84:39:5d:68:1d:2c:35:5a:20:fc:c1:fa:
                    9c:bb:83:d9:93:93:ba:fe:72:65:d8:4d:c3:30:b7:
                    de:db:ca:06:c0:c6:bb:03:ee:ab:dc:a2:2d:0c:89:
                    32:b3:7b:95:32:6f:ab:83:66:d5:33:d0:b2:e1:fe:
                    0d:d2:80:90:3c:c8:cd:6c:d6:4f:e0:03:98:9d:e7:
                    50:c3:d3:8f:3d:db:dc:c9:98:0d:b8:b3:42:35:7c:
                    15:a9:76:e0:9e:f8:72:e5:db:9f:52:65:2d:76:04:
                    e3:c7:ff:49:43:c6:0f:f4:54:99:e0:b5:dc:d6:66:
                    46:ab:0b:5b:49:87:d2:e3:20:d2:d6:e4:04:90:71:
                    09:19:b2:fd:cb:8f:ef:c9:78:82:54:b5:64:9c:78:
                    ff:a1:e1:a9:94:5e:c4:cb:1f:6e:2a:3f:c9:18:ba:
                    a4:11:9b:9a:68:e2:c5:27:e1:5b:00:ee:7f:bb:c1:
                    8e:69:26:6d:fa:16:6f:31:b4:19:98:c6:fc:3f:fe:
                    70:d8:c9:da:d7:1b:4d:8a:e8:f0:21:f4:11:b0:5a:
                    85:ee:07:80:0e:9e:ee:aa:76:fc:a4:37:3d:80:95:
                    be:5d:91:e2:f7:da:30:26:58:e7:f0:bd:81:cc:e9:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:76:2A:51:DB:31:B3:D9:EE:6D:B9:15:C2:3F:E7:B3:C4:9D:27:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/25b58291-455e-37c7-900e-654b6a637a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/db3a4466-554c-4a7d-9803-eceac12519bb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:C1:84:7A:4C:76:6B:D7:EB:4D:50:5D:47:52:BC:DF:54:A4:70:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ec::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:b2:db:ce:c5:c5:39:31:6a:40:47:78:8c:69:f0:ff:23:
         e6:13:52:db:c9:e4:62:60:d3:23:9b:0d:af:1f:9e:1b:87:e5:
         7f:7c:17:17:db:6b:4b:51:60:d3:59:62:a6:a9:fd:1e:20:00:
         1e:ae:23:ae:a3:3a:78:ed:dd:2f:47:aa:36:4f:a9:c0:2d:03:
         24:2c:4c:75:f2:dc:2f:52:7f:80:aa:c1:dd:a9:a3:cc:65:56:
         6d:3f:31:8d:40:ce:20:95:77:28:c4:7a:33:b4:f9:31:98:c0:
         7b:4e:4e:56:87:ba:9a:76:18:46:54:f4:14:6f:09:52:c0:e3:
         02:17:db:35:b0:df:66:4b:43:24:8f:7c:ca:33:0a:bf:1c:d6:
         ad:3d:9e:d4:a7:b8:dc:93:75:e5:82:d0:46:9e:95:88:89:14:
         ea:39:f5:cc:46:6a:0a:18:58:70:2c:8e:eb:09:af:61:7d:22:
         3a:08:ad:f1:86:b8:df:1e:48:be:cf:df:b1:2c:fc:50:7e:3c:
         d8:d2:e5:ce:93:2d:d3:b1:d4:3e:36:b6:96:60:00:2f:07:d7:
         0d:e7:e3:4f:4d:d7:58:a5:d2:05:fc:a9:68:cc:78:63:cf:ef:
         92:b5:fb:30:14:c0:5c:0b:f8:47:e9:c1:07:71:b4:2b:e1:c7:
         cb:b1:07:60
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiIFeqZNuD4btMHQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIzYTQ0NjYtNTU0Yy00YTdkLTk4MDMtZWNlYWMxMjUx
OWJiMB4XDTI1MDExMzE0MDA1MloXDTI1MDQxMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZGZiZTRiY2MtN2Y1MS00OGQ0LTgyZDgtMDEyY2NiZWEyNTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprjGToRPeDPgAq9hFBfs1FmEOV1oHSw1WiD8
wfqcu4PZk5O6/nJl2E3DMLfe28oGwMa7A+6r3KItDIkys3uVMm+rg2bVM9Cy4f4N
0oCQPMjNbNZP4AOYnedQw9OPPdvcyZgNuLNCNXwVqXbgnvhy5dufUmUtdgTjx/9J
Q8YP9FSZ4LXc1mZGqwtbSYfS4yDS1uQEkHEJGbL9y4/vyXiCVLVknHj/oeGplF7E
yx9uKj/JGLqkEZuaaOLFJ+FbAO5/u8GOaSZt+hZvMbQZmMb8P/5w2Mna1xtNiujw
IfQRsFqF7geADp7uqnb8pDc9gJW+XZHi99owJljn8L2BzOm/yQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCx2KlHbMbPZ7m25FcI/57PEnSe9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kYjNh
NDQ2Ni01NTRjLTRhN2QtOTgwMy1lY2VhYzEyNTE5YmIvMjViNTgyOTEtNDU1ZS0z
N2M3LTkwMGUtNjU0YjZhNjM3YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGIzYTQ0NjYtNTU0Yy00YTdkLTk4
MDMtZWNlYWMxMjUxOWJiL2RiM2E0NDY2LTU1NGMtNGE3ZC05ODAzLWVjZWFjMTI1
MTliYi5jcmwwHwYDVR0jBBgwFoAU38GEekx2a9frTVBdR1K831SkcDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kYjNhNDQ2Ni01NTRjLTRhN2QtOTgwMy1lY2Vh
YzEyNTE5YmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL47AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaCuy287FxTkxakBHeIxp8P8j5hNS28nkYmDTI5sNrx+eG4flf3wX
F9trS1Fg01lipqn9HiAAHq4jrqM6eO3dL0eqNk+pwC0DJCxMdfLcL1J/gKrB3amj
zGVWbT8xjUDOIJV3KMR6M7T5MZjAe05OVoe6mnYYRlT0FG8JUsDjAhfbNbDfZktD
JI98yjMKvxzWrT2e1Ke43JN15YLQRp6ViIkU6jn1zEZqChhYcCyO6wmvYX0iOgit
8Ya43x5Ivs/fsSz8UH482NLlzpMt07HUPja2lmAALwfXDefjT03XWKXSBfypaMx4
Y8/vkrX7MBTAXAv4R+nBB3G0K+HHy7EHYA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:56 2025 by rpki-client