Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07463446-78ab-3b30-a37e-9486ec61014c.roa
File:                     07463446-78ab-3b30-a37e-9486ec61014c.roa (raw, json)
Hash identifier:          lS7mgL1PvoELVRb7YNg3hPw9qqCmkERyfc1PFXqLFm8=
Subject key identifier:   CF:D9:29:35:38:98:3D:29:17:97:E0:35:87:F4:8B:6B:48:C7:60:DD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00672E5788DA007E1932510
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07463446-78ab-3b30-a37e-9486ec61014c.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8142::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:72:e5:78:8d:a0:07:e1:93:25:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=b8087281-ae6b-4a3f-a80b-f6430a2e3ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ab:7f:11:d1:35:01:a4:22:51:0a:98:2f:8a:
                    79:b0:f0:a0:3a:dc:b3:28:6e:50:ea:12:9a:7b:c7:
                    b8:e3:0b:f6:0a:96:63:f6:8d:bc:39:f3:2a:5e:cf:
                    01:03:53:0f:a0:8a:2d:18:f1:1a:a5:88:9c:1f:1b:
                    3f:ac:79:09:62:0f:f0:15:e9:e4:43:4e:fd:87:8d:
                    b5:18:74:e0:d3:9f:04:e3:6c:f7:33:bb:99:2b:f3:
                    5d:1b:3e:9b:e7:03:a1:35:01:51:d2:17:03:18:9f:
                    30:7c:fa:0e:8f:3f:ce:42:c0:3c:4a:63:98:0e:3c:
                    62:10:9c:5a:fd:f6:e6:dc:fc:39:e7:06:90:d6:57:
                    02:f8:bb:fa:ec:13:8f:93:f9:47:c8:be:2a:51:bf:
                    47:f4:c2:62:cd:bc:9a:25:0d:c5:c8:f8:f4:f9:a1:
                    8a:79:2b:21:18:d9:72:8f:bc:3b:6c:03:1a:0d:40:
                    3c:1a:64:d0:78:97:47:a1:46:80:0d:87:66:6e:41:
                    62:16:11:c5:b0:04:1a:1b:b4:db:2d:a4:bb:cd:49:
                    8e:01:38:51:30:43:97:4d:a5:c6:50:d2:f0:da:55:
                    4d:aa:10:a3:c7:07:f1:c8:c5:15:3f:01:59:73:50:
                    88:b0:79:bd:31:f0:1b:48:42:61:47:9c:b4:6d:04:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:29:35:38:98:3D:29:17:97:E0:35:87:F4:8B:6B:48:C7:60:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07463446-78ab-3b30-a37e-9486ec61014c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8142::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:8f:00:90:99:f2:fe:89:49:c4:0f:81:bb:af:5e:44:49:
         d9:e8:78:bf:e6:12:54:e5:59:6a:f3:79:28:2a:d1:20:50:34:
         3a:24:4a:6e:e2:c6:2b:5d:e7:6c:44:b5:2f:5b:0b:28:68:e3:
         e4:15:c2:e4:a3:f7:80:c0:de:cd:ce:09:07:12:bf:df:fc:c6:
         35:47:ce:a9:c2:1d:8d:72:54:1e:3e:26:35:97:51:6b:22:13:
         2f:95:25:ed:79:9b:6f:6e:16:c3:86:b1:a3:36:cd:f1:3c:31:
         28:c0:54:6d:9e:8b:42:1b:b4:19:db:9a:bb:6d:93:a5:d9:d1:
         be:51:a5:e2:8b:12:45:20:ea:80:24:8b:34:ae:c4:0c:26:f9:
         ed:44:8c:05:d6:db:83:52:bb:1a:5b:45:1a:7a:f2:58:b3:3f:
         03:01:68:a5:e2:52:b0:16:e8:3b:56:22:53:5c:5f:86:3b:35:
         dc:89:72:1e:2b:62:20:ff:73:9a:20:c9:a3:a2:a1:63:1e:25:
         c9:8c:6f:7a:4a:8e:75:4c:24:39:25:a0:b1:2a:d8:b8:96:47:
         a6:b8:cf:da:e2:89:66:f1:11:71:22:e6:a8:df:b3:44:ee:4c:
         e8:6e:05:30:56:62:68:62:d4:f3:d9:a1:30:6e:51:d5:1e:fa:
         a4:1a:04:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjgBnLleI2gB+GTJRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
YjgwODcyODEtYWU2Yi00YTNmLWE4MGItZjY0MzBhMmUzY2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKt/EdE1AaQiUQqYL4p5sPCgOtyzKG5Q6hKa
e8e44wv2CpZj9o28OfMqXs8BA1MPoIotGPEapYicHxs/rHkJYg/wFenkQ079h421
GHTg058E42z3M7uZK/NdGz6b5wOhNQFR0hcDGJ8wfPoOjz/OQsA8SmOYDjxiEJxa
/fbm3Pw55waQ1lcC+Lv67BOPk/lHyL4qUb9H9MJizbyaJQ3FyPj0+aGKeSshGNly
j7w7bAMaDUA8GmTQeJdHoUaADYdmbkFiFhHFsAQaG7TbLaS7zUmOAThRMEOXTaXG
UNLw2lVNqhCjxwfxyMUVPwFZc1CIsHm9MfAbSEJhR5y0bQScqwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM/ZKTU4mD0pF5fgNYf0i2tIx2DdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMDc0NjM0NDYtNzhhYi0z
YjMwLWEzN2UtOTQ4NmVjNjEwMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYFC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEk8jwCQmfL+iUnED4G7r15ESdnoeL/mElTlWWrzeSgq0SBQNDok
Sm7ixitd52xEtS9bCyho4+QVwuSj94DA3s3OCQcSv9/8xjVHzqnCHY1yVB4+JjWX
UWsiEy+VJe15m29uFsOGsaM2zfE8MSjAVG2ei0IbtBnbmrttk6XZ0b5RpeKLEkUg
6oAkizSuxAwm+e1EjAXW24NSuxpbRRp68lizPwMBaKXiUrAW6DtWIlNcX4Y7NdyJ
ch4rYiD/c5ogyaOioWMeJcmMb3pKjnVMJDkloLEq2LiWR6a4z9riiWbxEXEi5qjf
s0TuTOhuBTBWYmhi1PPZoTBuUdUe+qQaBDQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:57 2025 by rpki-client