Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/2b1fd278-99a4-3792-9065-db2b07d186f9.roa
File:                     2b1fd278-99a4-3792-9065-db2b07d186f9.roa (raw, json)
Hash identifier:          UjalfZ3zDwkAqFR5N6uU/h6FwxKSokU2d9jkaobhjTE=
Subject key identifier:   AA:FE:DB:D4:3A:A5:E3:68:45:B3:74:DE:1F:EA:73:2C:2A:89:23:9D
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285848A04B1894310DB1EDEAE7BA00
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/2b1fd278-99a4-3792-9065-db2b07d186f9.roa
Signing time:             Wed 22 Jan 2025 06:07:32 +0000
ROA not before:           Wed 22 Jan 2025 06:07:32 +0000
ROA not after:            Tue 22 Apr 2025 05:07:32 +0000
asID:                     54994
IP address blocks:        2607:b300:fd0d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a0:4b:18:94:31:0d:b1:ed:ea:e7:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Jan 22 06:07:32 2025 GMT
            Not After : Apr 22 05:07:32 2025 GMT
        Subject: CN=5688f17c-92cd-40e0-b6d4-30b709396d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:b8:df:ef:99:d5:d0:8c:3e:fc:fe:4f:ab:
                    88:cd:5c:4c:b3:d8:cb:0f:7a:a0:70:fa:3b:5a:12:
                    57:3f:ab:8f:61:ac:5d:7d:f8:67:2e:1b:78:65:cf:
                    97:fc:7f:e6:51:da:c3:a5:79:b6:d8:9d:31:d8:19:
                    e8:15:98:b5:3e:a3:20:3d:6a:21:0d:b6:60:0c:a5:
                    fe:49:09:67:07:86:1e:b2:b8:9e:52:f8:44:c4:e9:
                    c8:d2:23:fb:9f:c9:d3:9f:e9:a1:8e:ac:36:bc:65:
                    24:bd:23:f6:b7:19:77:c2:20:d1:26:91:7d:f7:35:
                    3f:d9:cf:56:5c:b0:42:7a:fc:43:f7:00:24:5d:c3:
                    81:18:b6:f2:90:26:8a:56:99:73:1c:35:17:09:17:
                    df:35:0a:4f:d5:22:c8:dc:26:1c:c9:b2:67:3e:2e:
                    4e:07:de:60:c5:13:8a:3e:e3:d4:03:b2:cc:a8:d2:
                    b2:41:0d:f6:6e:b5:2d:f6:a9:d0:09:e9:0e:5f:e8:
                    9d:3a:fc:dd:c8:5b:f5:f9:80:11:68:2d:a0:47:db:
                    c0:82:54:68:b2:64:14:c4:6a:b4:09:2f:2c:1d:44:
                    23:12:01:0c:d6:73:cc:73:28:02:8d:f0:ce:a3:3a:
                    0f:f1:3c:ab:c4:1a:b2:52:b3:5d:e0:3d:46:cf:79:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FE:DB:D4:3A:A5:E3:68:45:B3:74:DE:1F:EA:73:2C:2A:89:23:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/2b1fd278-99a4-3792-9065-db2b07d186f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b300:fd0d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:62:29:c5:4c:33:6d:a6:8f:9b:c7:e1:43:13:b5:f0:73:a6:
         b4:37:e2:79:85:f8:92:2c:f0:47:24:7f:35:9d:b5:6d:22:c9:
         52:79:9a:17:49:59:8f:26:01:42:33:39:ae:bf:34:bf:1f:48:
         f6:94:d6:5a:db:47:2d:a4:a3:24:a0:0b:3f:98:64:db:f2:de:
         a9:dc:3b:b6:00:03:7f:b4:41:17:b9:5e:5e:15:0b:4f:08:4c:
         be:82:5d:9a:1f:43:14:bb:00:07:89:b5:5b:af:ee:38:c2:2f:
         12:b2:9e:8f:fd:a0:fc:0c:10:3a:8a:a6:65:77:16:54:dc:6e:
         9c:af:e2:66:1b:67:48:b7:8d:e4:fc:24:6a:f9:f1:5b:e5:83:
         14:db:7e:e9:95:46:ab:ce:27:21:2c:40:f0:6b:0b:42:8d:63:
         aa:11:04:70:2a:82:b4:29:8c:d7:e8:04:cc:b6:8f:d6:43:92:
         d6:8e:06:05:92:58:09:2b:ad:c7:00:4b:e5:4b:ec:b3:05:04:
         cf:f5:cf:15:0c:cd:0b:60:f8:f7:cf:1f:d6:8b:af:e1:02:eb:
         5f:31:91:3c:b6:08:aa:62:e4:c6:0f:6e:ce:47:29:91:ee:c0:
         0b:ed:af:78:a4:49:67:c2:68:bd:23:97:18:1e:0c:64:c9:44:
         a6:be:3c:65
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEigSxiUMQ2x7ernugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI1MDEyMjA2MDczMloXDTI1MDQyMjA1MDczMlowLzEtMCsGA1UEAxMk
NTY4OGYxN2MtOTJjZC00MGUwLWI2ZDQtMzBiNzA5Mzk2ZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNq43++Z1dCMPvz+T6uIzVxMs9jLD3qgcPo7
WhJXP6uPYaxdffhnLht4Zc+X/H/mUdrDpXm22J0x2BnoFZi1PqMgPWohDbZgDKX+
SQlnB4YesrieUvhExOnI0iP7n8nTn+mhjqw2vGUkvSP2txl3wiDRJpF99zU/2c9W
XLBCevxD9wAkXcOBGLbykCaKVplzHDUXCRffNQpP1SLI3CYcybJnPi5OB95gxROK
PuPUA7LMqNKyQQ32brUt9qnQCekOX+idOvzdyFv1+YARaC2gR9vAglRosmQUxGq0
CS8sHUQjEgEM1nPMcygCjfDOozoP8TyrxBqyUrNd4D1Gz3k7PQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKr+29Q6peNoRbN03h/qcywqiSOdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvMmIxZmQyNzgtOTlhNC0z
NzkyLTkwNjUtZGIyYjA3ZDE4NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgezAP0N
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFNiKcVMM22mj5vH4UMTtfBzprQ34nmF+JIs8EckfzWdtW0iyVJ5
mhdJWY8mAUIzOa6/NL8fSPaU1lrbRy2koySgCz+YZNvy3qncO7YAA3+0QRe5Xl4V
C08ITL6CXZofQxS7AAeJtVuv7jjCLxKyno/9oPwMEDqKpmV3FlTcbpyv4mYbZ0i3
jeT8JGr58VvlgxTbfumVRqvOJyEsQPBrC0KNY6oRBHAqgrQpjNfoBMy2j9ZDktaO
BgWSWAkrrccAS+VL7LMFBM/1zxUMzQtg+PfPH9aLr+EC618xkTy2CKpi5MYPbs5H
KZHuwAvtr3ikSWfCaL0jlxgeDGTJRKa+PGU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:38 2025 by rpki-client