Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00afe954-cb24-34e5-9db9-d86711c1a5cf.roa
File:                     00afe954-cb24-34e5-9db9-d86711c1a5cf.roa (raw, json)
Hash identifier:          TisHRCoinQSu6GKm1Dz3wDerCzI9duQH4flrbinwWJA=
Subject key identifier:   96:80:59:FF:5F:2D:74:6A:F6:DE:94:2F:9E:DC:F9:78:42:43:2F:9D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1BBC0F3AC10564E280040
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00afe954-cb24-34e5-9db9-d86711c1a5cf.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10838
IP address blocks:        2600:5c00::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:bb:c0:f3:ac:10:56:4e:28:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=d48b038b-dd02-4016-8a8e-6504b31b17ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:d6:8a:1f:26:86:8f:95:18:a1:52:60:db:
                    93:fb:1b:09:09:c9:6f:bd:48:2d:8e:ff:93:cf:a3:
                    6c:4d:02:43:43:9f:3b:1d:74:9c:45:d1:db:c6:77:
                    a5:af:87:4f:f9:48:0b:ab:19:10:6e:00:87:ac:fa:
                    9f:48:f2:f6:e7:22:74:28:2b:43:93:11:9c:ac:bd:
                    69:bb:03:46:67:3d:96:74:5b:e7:f9:39:a9:d9:ce:
                    38:2f:9c:68:ec:6c:43:a5:22:46:a6:0d:77:c3:0a:
                    5b:ef:a0:37:9d:48:49:12:60:e6:bb:10:65:44:c3:
                    f3:77:6d:84:92:92:2e:5a:72:1c:76:43:9d:86:e4:
                    ae:cd:a8:8a:30:f5:64:7c:f4:b8:56:0f:b0:db:27:
                    79:2a:2f:15:18:14:17:ab:26:51:d4:be:9b:88:df:
                    70:66:73:dc:94:50:57:e6:3d:06:15:dd:36:b4:5a:
                    ef:f7:e3:21:07:03:ca:0c:ed:ee:e3:f6:21:14:6b:
                    68:9c:8d:6e:59:46:53:2e:2a:12:4b:88:66:b7:5d:
                    e8:d9:5f:fd:55:60:e1:91:eb:6b:ce:78:36:c0:73:
                    5a:be:c9:62:66:10:6e:25:c0:e5:38:88:cc:b3:90:
                    36:0c:5b:d8:6f:86:15:0b:13:80:bc:ba:7a:19:0f:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:59:FF:5F:2D:74:6A:F6:DE:94:2F:9E:DC:F9:78:42:43:2F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00afe954-cb24-34e5-9db9-d86711c1a5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c00::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:33:ca:5a:c7:d3:a2:7c:fe:80:d2:1a:8c:c9:37:d4:73:
         b3:81:84:18:9d:a4:4a:c7:fb:ee:75:48:47:30:05:1b:b2:1c:
         bb:9f:2d:2f:bf:28:5a:85:e5:67:37:e3:a0:9f:bf:3e:b1:d8:
         2c:05:5c:78:fc:0a:dc:ee:01:09:b2:f4:2b:66:a6:50:2b:41:
         6c:13:f9:99:82:89:c3:76:27:58:f3:67:cb:64:35:14:23:d7:
         87:4b:10:46:aa:23:96:67:c2:99:8a:52:e8:df:8f:45:43:84:
         ba:f5:a6:00:c4:80:6e:ad:19:1e:6b:d7:ac:a2:3a:e1:74:d4:
         f7:5d:d9:72:7e:9c:f7:2f:46:6e:84:f0:60:71:af:0f:7b:05:
         f9:fd:de:3f:55:c9:c2:4e:4f:25:7d:06:e3:94:e8:43:c4:84:
         de:92:2d:e3:79:4f:a1:9f:42:b9:53:b6:51:81:12:cb:cf:a2:
         d7:40:97:95:f5:55:be:80:b4:eb:b5:62:a0:2f:95:dc:ac:08:
         64:4b:f0:5e:4b:3d:5e:43:c2:53:c6:7f:6a:8c:33:d5:da:4e:
         f6:3e:9e:2b:37:e5:a1:b0:72:32:d2:07:63:66:0b:c6:3f:d8:
         39:0f:f1:d9:b8:78:8a:29:69:13:b0:68:76:57:f7:98:81:b3:
         40:da:be:83
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEji0bvA86wQVk4oAEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZDQ4YjAzOGItZGQwMi00MDE2LThhOGUtNjUwNGIzMWIxN2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLzWih8mho+VGKFSYNuT+xsJCclvvUgtjv+T
z6NsTQJDQ587HXScRdHbxnelr4dP+UgLqxkQbgCHrPqfSPL25yJ0KCtDkxGcrL1p
uwNGZz2WdFvn+Tmp2c44L5xo7GxDpSJGpg13wwpb76A3nUhJEmDmuxBlRMPzd22E
kpIuWnIcdkOdhuSuzaiKMPVkfPS4Vg+w2yd5Ki8VGBQXqyZR1L6biN9wZnPclFBX
5j0GFd02tFrv9+MhBwPKDO3u4/YhFGtonI1uWUZTLioSS4hmt13o2V/9VWDhketr
zng2wHNavsliZhBuJcDlOIjMs5A2DFvYb4YVCxOAvLp6GQ/UEQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJaAWf9fLXRq9t6UL57c+XhCQy+dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMDBhZmU5NTQtY2IyNC0z
NGU1LTlkYjktZDg2NzExYzFhNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgBcAAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAC9gzylrH06J8/oDSGozJN9Rzs4GEGJ2kSsf77nVIRzAFG7Icu58t
L78oWoXlZzfjoJ+/PrHYLAVcePwK3O4BCbL0K2amUCtBbBP5mYKJw3YnWPNny2Q1
FCPXh0sQRqojlmfCmYpS6N+PRUOEuvWmAMSAbq0ZHmvXrKI64XTU913Zcn6c9y9G
boTwYHGvD3sF+f3eP1XJwk5PJX0G45ToQ8SE3pIt43lPoZ9CuVO2UYESy8+i10CX
lfVVvoC067VioC+V3KwIZEvwXks9XkPCU8Z/aowz1dpO9j6eKzflobByMtIHY2YL
xj/YOQ/x2bh4iilpE7Bodlf3mIGzQNq+gw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:21:01 2025 by rpki-client