Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa
File:                     b801981e-8b4e-342a-a6f6-9042400af3fd.roa (raw, json)
Hash identifier:          M0sBCj52ekkO7r4KRDqm/QuZRiekxhGquqhDyCNHF7U=
Subject key identifier:   4A:47:D2:43:91:09:26:94:FF:1D:70:AF:E5:84:E8:D5:DA:35:43:CB
Certificate issuer:       /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial:       010D0C9F432858487A207EED2F893BE90F372480
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     27580
IP address blocks:        2604:f1c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:7e:ed:2f:89:3b:e9:0f:37:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=7356e725-920f-4b2e-a990-d7003a8f4526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:c0:19:d5:33:68:c2:e9:72:ad:2b:20:16:
                    f2:de:f7:9d:c3:77:24:d9:7d:df:9a:39:38:3d:2e:
                    cf:6c:5b:e1:4a:45:45:42:04:52:b0:cc:ef:dc:e1:
                    04:bb:7b:24:73:67:69:7e:d1:21:a9:cf:d2:a7:53:
                    2d:dd:8c:ab:4a:65:c3:0f:14:05:b4:e5:fa:06:ff:
                    6e:8b:3e:f4:b3:82:6f:a3:9f:3f:e6:9e:90:e7:8c:
                    0d:15:90:07:61:9f:d9:90:06:37:a1:f1:b2:e1:9c:
                    c6:8f:e3:4f:61:19:36:36:cc:90:4a:46:8d:d6:a3:
                    cf:82:f7:4b:e4:fb:46:2c:ce:3c:b6:bd:fc:76:6c:
                    64:30:d8:e9:6e:93:5c:c5:77:5a:27:36:6f:81:ce:
                    f7:ef:75:f5:cd:23:4c:7b:23:f3:fc:a9:a8:a6:09:
                    4e:82:5d:89:1f:2b:79:e2:8e:76:95:e8:42:20:91:
                    47:2e:fc:93:86:3e:c7:84:06:5f:3e:0f:bb:2d:ba:
                    27:56:27:8d:fe:86:12:30:7b:c2:07:16:b1:e7:03:
                    66:b5:ae:bd:74:e6:70:dd:4e:65:a1:1a:97:a5:4a:
                    12:5c:fe:9f:7a:90:ce:99:aa:ef:e9:93:2b:55:0c:
                    a1:1a:a4:3f:14:6d:cd:b8:cd:c3:3d:0a:da:61:e7:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:47:D2:43:91:09:26:94:FF:1D:70:AF:E5:84:E8:D5:DA:35:43:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:02:5b:1a:2e:57:99:74:ec:82:f1:2a:01:82:d5:46:4b:67:
         1b:63:d8:62:9b:0f:46:53:cc:40:f7:e5:8a:bd:e8:d0:5c:69:
         93:11:e3:fd:2e:2b:1b:bf:9e:99:c1:33:3e:15:a5:51:51:a6:
         e7:b3:9a:7a:7d:69:62:d9:91:bb:ac:bb:59:55:99:14:eb:5b:
         ef:29:b5:9c:4b:4b:80:72:9b:a6:69:59:f0:2b:0d:69:cd:d2:
         6c:ba:41:35:a6:a3:c4:0d:e5:53:03:c1:32:ab:23:04:9c:59:
         c1:27:93:89:63:10:28:80:a2:13:c6:7b:01:10:16:42:2e:a7:
         9b:a4:e5:94:66:35:bc:56:89:69:73:4d:a6:58:eb:e5:96:76:
         d3:df:05:d8:63:dd:a0:45:fb:50:77:4c:2b:c5:9c:d5:9c:81:
         61:54:f4:3e:00:a7:7c:13:cc:f4:b5:5e:34:e5:34:d4:b6:f5:
         cc:fc:c4:72:b2:5c:e9:7a:d5:4d:66:f9:b2:50:15:ee:96:35:
         7b:84:40:42:be:91:f1:43:58:25:0f:61:46:97:c4:3b:d3:26:
         80:5f:7c:5a:aa:9a:84:06:94:ab:23:5e:e8:ca:8f:ae:63:01:
         f9:19:8c:df:44:3c:3a:79:b3:80:54:69:c1:dd:3d:60:9b:f5:
         cb:2c:66:80
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEh6IH7tL4k76Q83JIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE4YzgzZmEtZmZjYi00YzE0LTllM2ItYzNmYTQwNTYx
YWQ5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
NzM1NmU3MjUtOTIwZi00YjJlLWE5OTAtZDcwMDNhOGY0NTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD7AGdUzaMLpcq0rIBby3vedw3ck2X3fmjk4
PS7PbFvhSkVFQgRSsMzv3OEEu3skc2dpftEhqc/Sp1Mt3YyrSmXDDxQFtOX6Bv9u
iz70s4Jvo58/5p6Q54wNFZAHYZ/ZkAY3ofGy4ZzGj+NPYRk2NsyQSkaN1qPPgvdL
5PtGLM48tr38dmxkMNjpbpNcxXdaJzZvgc7373X1zSNMeyPz/KmopglOgl2JHyt5
4o52lehCIJFHLvyThj7HhAZfPg+7LbonVieN/oYSMHvCBxax5wNmta69dOZw3U5l
oRqXpUoSXP6fepDOmarv6ZMrVQyhGqQ/FG3NuM3DPQraYed4SQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEpH0kORCSaU/x1wr+WE6NXaNUPLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YThj
ODNmYS1mZmNiLTRjMTQtOWUzYi1jM2ZhNDA1NjFhZDkvYjgwMTk4MWUtOGI0ZS0z
NDJhLWE2ZjYtOTA0MjQwMGFmM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGE4YzgzZmEtZmZjYi00YzE0LTll
M2ItYzNmYTQwNTYxYWQ5LzhhOGM4M2ZhLWZmY2ItNGMxNC05ZTNiLWMzZmE0MDU2
MWFkOS5jcmwwHwYDVR0jBBgwFoAUjccdmxK7+UZwIdMaRkD1JyDt1ZgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YThjODNmYS1mZmNiLTRjMTQtOWUzYi1jM2Zh
NDA1NjFhZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTxwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCVAlsaLleZdOyC8SoBgtVGS2cbY9himw9GU8xA9+WKvejQXGmTEeP9
Lisbv56ZwTM+FaVRUabns5p6fWli2ZG7rLtZVZkU61vvKbWcS0uAcpumaVnwKw1p
zdJsukE1pqPEDeVTA8EyqyMEnFnBJ5OJYxAogKITxnsBEBZCLqebpOWUZjW8Volp
c02mWOvllnbT3wXYY92gRftQd0wrxZzVnIFhVPQ+AKd8E8z0tV405TTUtvXM/MRy
slzpetVNZvmyUBXuljV7hEBCvpHxQ1glD2FGl8Q70yaAX3xaqpqEBpSrI17oyo+u
YwH5GYzfRDw6ebOAVGnB3T1gm/XLLGaA
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:25 2025 by rpki-client