Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa
File:                     510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa (raw, json)
Hash identifier:          n0DOqElfXa6zVhADm9iHgsJTCl36DkiZ2hgyYcEjDXk=
Subject key identifier:   1D:68:7B:63:12:6C:22:E1:28:16:84:C3:28:FC:B2:93:FD:52:78:F1
Certificate issuer:       /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Certificate serial:       010D0C9F43285848C6E6368D58431B3B972D1400
Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     0
IP address blocks:        206.71.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:36:8d:58:43:1b:3b:97:2d:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=a98e386a-d6e5-4557-b8cd-769dd31c071f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:95:45:a0:04:e7:a9:24:a9:e8:66:3d:1c:
                    55:6d:82:29:1b:66:25:e2:9c:7e:b2:ce:7f:0a:17:
                    a7:04:30:e4:87:a2:28:93:f3:8c:b6:ff:8c:87:e3:
                    3f:23:62:ca:e1:d3:fa:f3:d2:77:67:7d:c3:74:61:
                    b5:12:c7:10:5c:8d:a2:55:b3:9c:2f:c2:a1:56:75:
                    e8:8c:2e:88:4f:e7:fc:b3:71:9b:f9:58:8e:9e:db:
                    35:ea:51:1e:c4:7c:12:2a:a2:5c:2d:ea:64:6f:cc:
                    18:69:f3:6e:1b:53:af:ae:50:d4:4d:85:45:e0:7e:
                    32:db:d8:68:a5:b5:0a:9f:b2:9d:7c:da:3d:c4:f4:
                    a8:5b:56:b9:f4:4d:82:f9:59:da:7c:02:5f:70:e7:
                    ca:a1:c8:80:c2:dd:38:62:be:b5:ca:af:eb:b1:0f:
                    10:38:12:b1:9a:f1:92:0b:00:d0:e2:18:54:ca:42:
                    ec:c3:6f:a9:6b:e5:7d:84:3b:4e:3d:7a:43:f8:0c:
                    3c:d6:93:a7:7c:92:9d:b6:d7:ef:45:1e:1e:73:66:
                    58:32:2d:2c:74:17:b5:db:40:82:31:b1:bc:32:72:
                    3b:2b:69:10:7d:23:59:67:91:5d:06:20:5c:f2:65:
                    5a:a5:a8:aa:98:11:66:39:77:db:c0:2b:9b:5f:c5:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:68:7B:63:12:6C:22:E1:28:16:84:C3:28:FC:B2:93:FD:52:78:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:72:96:08:f7:7d:68:25:10:2f:15:0a:b6:06:b4:df:4b:9b:
         c9:fd:ab:46:28:a7:a6:ad:1e:0b:0d:4e:7f:30:c4:9a:b5:0f:
         7d:26:74:1c:d0:71:78:b2:99:40:70:f4:9d:ca:c0:a9:f4:04:
         06:a9:d2:fa:f0:e8:80:5c:2f:f6:88:e2:26:6b:7d:39:4f:30:
         72:f0:a1:a2:11:21:c9:92:53:43:29:5f:31:6c:2c:ce:30:c8:
         6e:2c:7f:a0:22:02:a8:79:64:87:e3:ff:0e:70:9c:48:35:7a:
         69:75:f6:82:72:a6:ce:b6:ed:02:62:e9:e8:8b:f8:c3:90:39:
         ca:35:bc:cd:ed:05:0e:cc:f0:17:36:c0:47:9e:a4:b9:7e:e5:
         45:c7:68:08:cf:e6:ce:c3:63:7a:0f:cd:1b:ab:00:b9:0e:32:
         13:90:fa:3f:95:dd:5d:7b:6c:1f:30:75:b3:db:13:79:c4:0a:
         94:fb:3e:91:c0:fa:ee:b8:c5:dc:ea:f5:84:89:47:de:88:4e:
         06:54:3d:50:e2:b8:7f:4e:c9:2d:55:d6:e4:13:3a:0f:c9:4f:
         b5:de:63:35:4e:53:2a:0b:3d:94:b8:c1:81:81:b4:7f:f1:44:
         9c:ba:93:40:11:6a:4d:65:68:6a:88:75:a4:06:19:be:5b:a5:
         4b:63:34:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jaNWEMbO5ctFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy
MmQ2MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
YTk4ZTM4NmEtZDZlNS00NTU3LWI4Y2QtNzY5ZGQzMWMwNzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq06VRaAE56kkqehmPRxVbYIpG2Yl4px+ss5/
ChenBDDkh6Iok/OMtv+Mh+M/I2LK4dP689J3Z33DdGG1EscQXI2iVbOcL8KhVnXo
jC6IT+f8s3Gb+ViOnts16lEexHwSKqJcLepkb8wYafNuG1OvrlDUTYVF4H4y29ho
pbUKn7KdfNo9xPSoW1a59E2C+VnafAJfcOfKociAwt04Yr61yq/rsQ8QOBKxmvGS
CwDQ4hhUykLsw2+pa+V9hDtOPXpD+Aw81pOnfJKdttfvRR4ec2ZYMi0sdBe120CC
MbG8MnI7K2kQfSNZZ5FdBiBc8mVapaiqmBFmOXfbwCubX8UfmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1oe2MSbCLhKBaEwyj8spP9UnjxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2
NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvNTEwYjllZjQtNjQzYS0z
Y2ZjLWJiMDgtYmNiMzIxMTMwYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh
OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw
MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1
MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkcMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOpylgj3fWglEC8VCrYGtN9Lm8n9q0Yop6atHgsNTn8wxJq1D30mdBzQ
cXiymUBw9J3KwKn0BAap0vrw6IBcL/aI4iZrfTlPMHLwoaIRIcmSU0MpXzFsLM4w
yG4sf6AiAqh5ZIfj/w5wnEg1eml19oJyps627QJi6eiL+MOQOco1vM3tBQ7M8Bc2
wEeepLl+5UXHaAjP5s7DY3oPzRurALkOMhOQ+j+V3V17bB8wdbPbE3nECpT7PpHA
+u64xdzq9YSJR96ITgZUPVDiuH9OyS1V1uQTOg/JT7XeYzVOUyoLPZS4wYGBtH/x
RJy6k0ARak1laGqIdaQGGb5bpUtjNJE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:51 2025 by rpki-client