Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/72915ddf-cc27-39f4-b7ed-7b583f2b9b00.roa
File:                     72915ddf-cc27-39f4-b7ed-7b583f2b9b00.roa (raw, json)
Hash identifier:          v0kNPwT90iX17LhQ3l0wFThW5lIb//XrF47+nO+egvM=
Subject key identifier:   29:9E:C0:84:82:25:11:6C:A4:5C:5B:D3:0B:BB:87:22:54:A0:66:96
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F43285848E16BEDBF9E6CEDBE582E9F00
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/72915ddf-cc27-39f4-b7ed-7b583f2b9b00.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     393238
IP address blocks:        2605:3f80::/28 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:ed:bf:9e:6c:ed:be:58:2e:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=b316f3eb-1dcf-4139-a346-798a16f82f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:4f:10:3b:ce:f1:bc:3d:d4:22:4f:11:4e:
                    8f:11:3e:d7:9f:27:78:8b:0e:82:7a:50:81:7a:62:
                    a8:37:13:24:6b:ab:19:57:90:49:ba:7a:1e:e0:0b:
                    d9:64:c8:79:31:5c:1c:a9:6f:8a:c5:74:2e:37:19:
                    d9:14:0f:24:81:57:3a:0b:37:40:32:4c:d0:13:31:
                    c1:c3:0f:16:dc:a7:06:e3:6f:9e:9d:09:30:04:34:
                    e0:9d:29:81:42:c3:58:f9:67:ed:fa:52:ed:a4:17:
                    e9:64:f7:0f:4e:fa:30:60:b9:d3:17:32:70:6a:8c:
                    78:53:aa:64:45:8b:9e:02:38:80:20:98:7b:84:d7:
                    b3:86:92:31:a0:8f:e2:e5:a9:64:25:e2:b9:d0:e1:
                    d0:44:a9:f3:0b:7b:6c:de:5a:e5:3b:09:fd:1d:b7:
                    f0:4d:63:8b:14:fe:bb:4e:f8:29:a8:92:e0:d3:a2:
                    a6:5c:01:c8:8a:f0:43:6b:e8:99:de:1d:9b:01:78:
                    00:82:19:5a:9f:96:4b:3c:7d:dc:9b:f8:90:00:60:
                    bf:1a:9f:cd:29:ea:2b:a7:fe:de:ac:71:8e:31:17:
                    34:19:73:c1:cd:dd:15:61:a0:5f:15:5e:d7:f7:1b:
                    cb:ce:e3:93:50:c1:4e:f4:32:be:ac:8e:6c:2a:e6:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9E:C0:84:82:25:11:6C:A4:5C:5B:D3:0B:BB:87:22:54:A0:66:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/72915ddf-cc27-39f4-b7ed-7b583f2b9b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3f80::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:90:2d:f9:b8:11:c9:c7:da:81:2b:d3:86:78:37:77:f0:dd:
         b1:5d:f0:1e:46:80:4d:c7:d4:16:a7:f3:4c:82:5a:5a:35:f3:
         b3:33:0b:30:35:3a:b2:44:8c:0a:dd:37:80:f9:3a:bd:7f:a0:
         2c:b5:f2:30:78:31:26:e8:5b:a1:83:51:1d:9c:2e:00:ed:f3:
         df:dc:1a:38:a2:95:09:96:7b:0a:86:ee:06:57:cc:b6:4e:91:
         ea:8c:75:94:1e:55:e1:9d:ec:af:a5:40:ac:8d:56:cc:c0:d2:
         49:d1:63:7d:dc:97:83:56:37:f4:d4:6c:e9:a1:2e:4b:5c:ba:
         c6:17:53:80:ef:a1:cf:d8:b2:fd:24:fb:7b:71:68:72:96:00:
         d2:33:e0:0e:6e:29:1d:10:9e:44:a8:2e:bd:17:a3:f4:16:9b:
         88:35:90:be:96:c9:71:04:bc:a8:8e:28:59:e0:89:03:95:3d:
         6f:ef:02:48:71:15:55:e7:91:4c:30:72:a9:7c:7d:f5:1c:bb:
         b6:e7:43:2c:4f:be:3d:ed:3c:85:fb:bc:6b:73:df:d4:cc:ad:
         ad:68:48:0f:54:88:07:75:c1:e6:0a:6e:bd:33:6d:b1:2c:be:
         3d:2d:a1:ce:e5:91:b0:47:67:8a:dc:4b:5c:b4:a1:5c:9d:9d:
         4b:91:bc:77
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha+2/nmztvlgunwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE5MDM4ZDktNjkyMy00ZTI5LThiMzYtZjQ1YjA2Y2Ux
MmY4MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
YjMxNmYzZWItMWRjZi00MTM5LWEzNDYtNzk4YTE2ZjgyZjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqNPEDvO8bw91CJPEU6PET7Xnyd4iw6CelCB
emKoNxMka6sZV5BJunoe4AvZZMh5MVwcqW+KxXQuNxnZFA8kgVc6CzdAMkzQEzHB
ww8W3KcG42+enQkwBDTgnSmBQsNY+Wft+lLtpBfpZPcPTvowYLnTFzJwaox4U6pk
RYueAjiAIJh7hNezhpIxoI/i5alkJeK50OHQRKnzC3ts3lrlOwn9HbfwTWOLFP67
TvgpqJLg06KmXAHIivBDa+iZ3h2bAXgAghlan5ZLPH3cm/iQAGC/Gp/NKeorp/7e
rHGOMRc0GXPBzd0VYaBfFV7X9xvLzuOTUMFO9DK+rI5sKubMdwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCmewISCJRFspFxb0wu7hyJUoGaWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MTkw
MzhkOS02OTIzLTRlMjktOGIzNi1mNDViMDZjZTEyZjgvNzI5MTVkZGYtY2MyNy0z
OWY0LWI3ZWQtN2I1ODNmMmI5YjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzE5MDM4ZDktNjkyMy00ZTI5LThi
MzYtZjQ1YjA2Y2UxMmY4LzcxOTAzOGQ5LTY5MjMtNGUyOS04YjM2LWY0NWIwNmNl
MTJmOC5jcmwwHwYDVR0jBBgwFoAUd7Dtd6dLz91nSrrpZ2b4HS5vbQMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MTkwMzhkOS02OTIzLTRlMjktOGIzNi1mNDVi
MDZjZTEyZjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgU/gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAqkC35uBHJx9qBK9OGeDd38N2xXfAeRoBNx9QWp/NMglpaNfOzMwsw
NTqyRIwK3TeA+Tq9f6AstfIweDEm6Fuhg1EdnC4A7fPf3Bo4opUJlnsKhu4GV8y2
TpHqjHWUHlXhneyvpUCsjVbMwNJJ0WN93JeDVjf01GzpoS5LXLrGF1OA76HP2LL9
JPt7cWhylgDSM+AObikdEJ5EqC69F6P0FpuINZC+lslxBLyojihZ4IkDlT1v7wJI
cRVV55FMMHKpfH31HLu250MsT7497TyF+7xrc9/UzK2taEgPVIgHdcHmCm69M22x
LL49LaHO5ZGwR2eK3EtctKFcnZ1Lkbx3
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:26:24 2025 by rpki-client