Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
File:                     8f4129be-42f4-3968-aff2-2e4ca695144b.roa (raw, json)
Hash identifier:          5Ul5XyvVz8X2PnKbJDE9rVvcBG9AQpNXlrs09karOpI=
Subject key identifier:   BD:55:42:87:CD:58:A8:60:7B:96:8A:5F:5E:86:30:99:57:32:C3:71
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00695315FF32A9279954C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80b6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:95:31:5f:f3:2a:92:79:95:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=1712fe4d-b454-496b-90ce-fe6f7a9d5a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:f3:71:16:66:85:3d:d6:82:a2:11:b0:ca:
                    d2:b8:81:ce:fd:1d:26:b5:b3:a1:8a:cc:28:b8:9e:
                    f5:54:91:3d:a7:79:03:d2:92:de:83:a7:99:0b:ce:
                    c0:47:c4:9f:e7:c1:14:76:f6:6c:c7:80:f0:4b:bd:
                    3d:47:f1:5b:b4:91:84:d7:0f:f0:0c:fb:cc:77:a0:
                    2c:f3:f7:4c:82:64:7e:74:64:73:f8:03:03:fd:24:
                    c5:d7:be:d9:da:17:ba:d6:3b:59:53:16:27:53:bf:
                    f8:2c:de:d9:3c:a1:f6:6e:03:c4:03:ad:42:f2:8a:
                    23:49:88:30:bd:65:84:de:52:4d:d3:b5:53:80:e1:
                    96:9a:9f:ad:49:61:3e:97:a1:9d:ee:25:f4:b7:b9:
                    9f:72:b8:50:14:f6:dc:71:5c:3a:df:b9:8f:30:7d:
                    86:14:c0:1c:fd:ea:c3:ad:a9:c6:95:d1:c5:f5:37:
                    0b:51:fd:98:94:c8:50:65:c0:c0:11:e9:35:13:6b:
                    5e:c7:ff:48:a2:df:5b:0b:e5:d6:fc:ce:3b:e5:a7:
                    21:a3:c0:28:ae:15:e1:b0:af:64:0d:65:ec:5c:86:
                    f1:9c:fd:dc:2c:a4:98:77:4a:3f:77:be:b9:50:0f:
                    c6:46:60:df:3b:85:e5:e7:09:b8:5e:32:a7:fd:6b:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:55:42:87:CD:58:A8:60:7B:96:8A:5F:5E:86:30:99:57:32:C3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:7a:58:1c:02:e9:64:5b:fc:4c:fe:e5:1a:f9:83:f1:53:
         2a:39:f3:34:b9:3b:0e:a2:79:f4:5a:9d:ed:e0:fa:b9:ec:bf:
         04:fa:8a:4c:41:0a:a6:77:a5:41:0f:45:c0:80:e9:6e:78:5d:
         f9:ec:3e:99:9a:ed:71:e0:54:23:44:6d:1a:ff:46:d5:5e:10:
         83:b3:fd:19:66:67:54:40:a1:91:90:44:2a:dc:fa:1c:6f:7e:
         58:d3:06:01:c9:c9:7a:45:b3:33:12:0c:ce:65:fc:7a:89:ff:
         a2:88:78:d3:c0:ab:63:1e:91:f2:70:5c:1f:50:ae:04:72:63:
         1c:09:f3:9a:ba:0e:5e:82:95:b3:4b:f8:ba:1f:bf:36:59:de:
         39:be:66:fd:45:65:ff:71:df:ee:50:a6:e5:99:9a:db:d0:44:
         f0:cf:12:ce:49:32:07:34:33:c1:20:5e:23:52:9c:87:b8:09:
         cf:5f:f2:20:2c:cb:17:d8:41:2c:39:e4:ab:cc:6f:b5:2f:89:
         27:54:cb:f9:e9:71:43:63:0e:dd:9f:44:c5:19:e4:ba:a9:ec:
         44:6d:5d:2d:71:dd:9c:09:4a:f3:34:ad:f5:29:59:74:d5:ad:
         8f:76:c6:80:de:2e:44:8c:f4:60:c4:2e:e1:4e:5d:b5:0c:6d:
         eb:0e:24:59
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjgBpUxX/MqknmVTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
MTcxMmZlNGQtYjQ1NC00OTZiLTkwY2UtZmU2ZjdhOWQ1YTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFnzcRZmhT3WgqIRsMrSuIHO/R0mtbOhiswo
uJ71VJE9p3kD0pLeg6eZC87AR8Sf58EUdvZsx4DwS709R/FbtJGE1w/wDPvMd6As
8/dMgmR+dGRz+AMD/STF177Z2he61jtZUxYnU7/4LN7ZPKH2bgPEA61C8oojSYgw
vWWE3lJN07VTgOGWmp+tSWE+l6Gd7iX0t7mfcrhQFPbccVw637mPMH2GFMAc/erD
ranGldHF9TcLUf2YlMhQZcDAEek1E2tex/9Iot9bC+XW/M475acho8AorhXhsK9k
DWXsXIbxnP3cLKSYd0o/d765UA/GRmDfO4Xl5wm4XjKn/WuJTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL1VQofNWKhge5aKX16GMJlXMsNxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGY0MTI5YmUtNDJmNC0z
OTY4LWFmZjItMmU0Y2E2OTUxNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYC2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGwgelgcAulkW/xM/uUa+YPxUyo58zS5Ow6iefRane3g+rnsvwT6
ikxBCqZ3pUEPRcCA6W54XfnsPpma7XHgVCNEbRr/RtVeEIOz/RlmZ1RAoZGQRCrc
+hxvfljTBgHJyXpFszMSDM5l/HqJ/6KIeNPAq2MekfJwXB9QrgRyYxwJ85q6Dl6C
lbNL+LofvzZZ3jm+Zv1FZf9x3+5QpuWZmtvQRPDPEs5JMgc0M8EgXiNSnIe4Cc9f
8iAsyxfYQSw55KvMb7UviSdUy/npcUNjDt2fRMUZ5Lqp7ERtXS1x3ZwJSvM0rfUp
WXTVrY92xoDeLkSM9GDELuFOXbUMbesOJFk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:35 2025 by rpki-client