Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba6a0c20-74a7-35f6-b032-7f97e0465d86.roa
File:                     ba6a0c20-74a7-35f6-b032-7f97e0465d86.roa (raw, json)
Hash identifier:          i73yqPKnzLhlv6vg7TxbEu8YD1Ja+BrQGoZgvYl1EUk=
Subject key identifier:   69:A9:CD:40:0E:BA:77:9D:4F:46:F6:D7:CA:B3:F8:90:42:DA:B0:D1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC3009E3E9A751D7A13D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba6a0c20-74a7-35f6-b032-7f97e0465d86.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3360
IP address blocks:        2607:f028:131::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:30:09:e3:e9:a7:51:d7:a1:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=6b380630-ecb9-47db-a46c-2b5b7a0b2ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:fa:5c:6b:49:d7:66:dd:32:99:20:8c:2b:
                    36:ab:7b:bf:75:35:60:29:9f:1e:a5:80:e3:7c:ec:
                    75:c4:60:1c:e1:63:1a:3c:b0:74:ef:4f:bf:42:1c:
                    ee:43:0a:4f:17:86:19:0c:10:bb:96:ac:8a:eb:73:
                    c3:41:4a:67:1a:ea:e9:45:b4:26:9a:7c:cd:76:1a:
                    9f:35:92:12:c6:54:33:d3:ee:e6:fe:e4:2e:a9:b7:
                    cd:f3:ad:f2:f5:a3:79:6b:0c:a2:13:0a:bb:87:e6:
                    c3:b4:ba:c6:18:2e:53:81:78:40:f4:c4:7f:f4:19:
                    4d:fb:63:b6:be:34:98:55:ef:a8:30:16:1d:74:ed:
                    3d:8f:f1:54:ef:f8:20:16:81:b6:16:02:66:39:ec:
                    40:90:20:e6:67:6b:ef:80:f7:d6:77:17:f8:a2:97:
                    5e:d6:21:5b:7f:f7:2f:08:e9:85:92:f9:3d:38:45:
                    38:af:e5:b7:e1:fb:b9:30:7b:39:68:6f:d9:80:7d:
                    23:00:e9:c6:f3:04:c4:fe:14:db:0b:92:51:88:38:
                    72:0a:bf:3d:c1:2a:14:d0:0d:d4:81:77:f3:cb:2b:
                    72:f5:9a:2c:54:c8:d4:28:22:e3:89:fe:2e:30:9b:
                    c6:29:e6:4b:f1:1e:b7:aa:c3:bd:ce:c2:f0:a7:4f:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:CD:40:0E:BA:77:9D:4F:46:F6:D7:CA:B3:F8:90:42:DA:B0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba6a0c20-74a7-35f6-b032-7f97e0465d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:131::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:10:ba:77:63:48:89:b0:b3:09:d9:86:dc:e5:6b:df:fc:05:
         7a:fb:d4:7b:53:2f:37:61:83:2e:3b:01:94:0a:e3:bc:f9:d2:
         33:32:3a:d9:c6:e1:75:b8:45:b5:6c:33:c8:7c:1a:8f:21:84:
         57:cd:de:fd:c2:8c:90:b4:56:90:71:02:da:92:83:33:4a:1c:
         d4:1b:4a:c9:f9:7c:7c:b2:a4:20:a4:d1:c3:ba:25:06:be:c1:
         1b:64:6c:24:71:3f:e5:9f:2a:da:0a:ca:0a:6f:65:23:fc:e9:
         97:87:89:c3:af:db:ca:02:a7:58:22:b2:7f:65:7c:5d:e8:d2:
         09:1e:9c:32:8e:30:af:43:bb:60:1a:2a:1b:82:98:4a:18:72:
         6b:38:c1:ab:7a:58:db:42:e4:dd:01:5d:9f:b6:02:65:36:83:
         fc:4b:10:1b:fd:b5:bf:7c:0e:7c:4d:b6:3a:f1:06:ce:cc:10:
         01:8b:12:3f:c8:87:af:99:6a:83:99:41:4f:3e:38:96:c8:8b:
         63:88:c5:6c:7e:6e:0e:a7:1f:8a:4d:b2:38:20:27:cf:d4:12:
         0b:20:d3:38:1f:0d:82:16:14:9e:a3:31:7d:0a:05:1c:11:9e:
         6b:cb:83:a5:82:ab:0d:ad:0e:ca:ad:37:da:69:ab:d3:56:bd:
         cd:05:63:bd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrDAJ4+mnUdehPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
NmIzODA2MzAtZWNiOS00N2RiLWE0NmMtMmI1YjdhMGIyYWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopT6XGtJ12bdMpkgjCs2q3u/dTVgKZ8epYDj
fOx1xGAc4WMaPLB070+/QhzuQwpPF4YZDBC7lqyK63PDQUpnGurpRbQmmnzNdhqf
NZISxlQz0+7m/uQuqbfN863y9aN5awyiEwq7h+bDtLrGGC5TgXhA9MR/9BlN+2O2
vjSYVe+oMBYddO09j/FU7/ggFoG2FgJmOexAkCDmZ2vvgPfWdxf4opde1iFbf/cv
COmFkvk9OEU4r+W34fu5MHs5aG/ZgH0jAOnG8wTE/hTbC5JRiDhyCr89wSoU0A3U
gXfzyyty9ZosVMjUKCLjif4uMJvGKeZL8R63qsO9zsLwp0+HsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGmpzUAOunedT0b218qz+JBC2rDRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmE2YTBjMjAtNzRhNy0z
NWY2LWIwMzItN2Y5N2UwNDY1ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI8QundjSImwswnZhtzla9/8BXr71HtTLzdhgy47AZQK47z50jMy
OtnG4XW4RbVsM8h8Go8hhFfN3v3CjJC0VpBxAtqSgzNKHNQbSsn5fHyypCCk0cO6
JQa+wRtkbCRxP+WfKtoKygpvZSP86ZeHicOv28oCp1gisn9lfF3o0gkenDKOMK9D
u2AaKhuCmEoYcms4wat6WNtC5N0BXZ+2AmU2g/xLEBv9tb98DnxNtjrxBs7MEAGL
Ej/Ih6+ZaoOZQU8+OJbIi2OIxWx+bg6nH4pNsjggJ8/UEgsg0zgfDYIWFJ6jMX0K
BRwRnmvLg6WCqw2tDsqtN9ppq9NWvc0FY70=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:19 2025 by rpki-client