Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d15608ab-fec8-3fd0-bd02-a9938da01004.roa
File:                     d15608ab-fec8-3fd0-bd02-a9938da01004.roa (raw, json)
Hash identifier:          OlRWWtOJQOyLbm4OaV5yZiSDEQD35lPb6UQdMyuMoEI=
Subject key identifier:   21:C1:AA:13:ED:F0:50:34:28:21:E7:F7:D7:6D:BD:6C:76:39:22:29
Certificate issuer:       /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial:       010D0C9F4328584902EBFA1AD0EA4532C8E65C20
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d15608ab-fec8-3fd0-bd02-a9938da01004.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     55002
IP address blocks:        2001:500:103::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:fa:1a:d0:ea:45:32:c8:e6:5c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=8581ab29-a2b7-48f6-8c8e-8baa3e340ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:58:69:e5:71:b0:2e:77:17:25:2e:b7:e1:e7:
                    88:d4:04:93:22:10:01:9f:4a:66:6d:b5:e0:a6:21:
                    47:aa:f0:ce:1b:8a:cb:82:aa:4c:2e:b7:cf:5a:f1:
                    42:33:28:34:5a:68:77:6b:be:94:f0:d6:3c:90:e4:
                    90:8b:0a:4c:e9:aa:22:eb:5c:de:f6:52:f1:0d:89:
                    4c:4a:1a:cc:64:cf:e8:7e:d2:ac:ba:c7:8d:80:ba:
                    ea:5c:fb:24:10:8e:bc:8f:19:fe:bc:51:e9:95:bd:
                    9e:50:81:f2:62:ab:b0:f2:e7:34:4e:42:2c:2a:32:
                    a3:8b:51:6c:4f:66:b7:b5:bc:4c:d3:38:97:27:1f:
                    22:3d:d1:cc:b5:66:5d:3c:93:69:ca:e6:ba:90:bb:
                    2d:04:92:23:1e:41:70:4b:ba:d9:93:6c:68:eb:87:
                    88:0c:b6:64:bd:b0:bd:6b:8d:f1:a6:cc:09:04:18:
                    5c:23:8c:3e:64:75:fb:4e:16:f5:8f:b0:16:14:88:
                    55:c8:fc:99:2e:6b:cc:57:b8:44:b4:78:b4:8d:0e:
                    54:69:48:12:d7:a3:f3:79:61:59:2f:0d:82:c3:53:
                    d0:8f:8a:0c:69:9c:b7:d8:a0:53:19:80:73:eb:08:
                    18:fa:a9:c0:10:db:46:8b:b1:32:1c:93:e3:83:cc:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C1:AA:13:ED:F0:50:34:28:21:E7:F7:D7:6D:BD:6C:76:39:22:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d15608ab-fec8-3fd0-bd02-a9938da01004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:d6:18:37:93:02:67:92:ef:13:93:02:25:a4:54:ff:bf:c5:
         9d:79:35:6a:22:8b:78:0f:67:7f:bc:a3:a0:d2:3e:1b:8e:02:
         70:cd:a0:2a:a6:4e:6e:c7:02:d5:1a:25:76:82:e2:d4:e6:1b:
         d2:39:b6:27:6f:e8:be:60:39:67:4c:6e:08:61:de:32:8f:97:
         98:3b:d7:2c:47:b3:ad:0a:0f:ac:4b:c9:49:1a:4d:8c:4d:ac:
         dd:86:c6:62:0f:a6:4f:c3:ea:03:a5:ba:43:39:52:79:2a:87:
         93:5f:57:ad:fd:6c:86:05:f9:51:40:37:a7:9f:21:04:80:2d:
         cf:cc:29:22:81:0d:19:fd:2e:3c:c2:4d:0f:e1:fb:e6:fd:7a:
         59:13:66:1e:ee:12:8a:90:73:b6:58:57:79:6c:97:52:1f:4c:
         c1:08:98:04:c2:f7:8b:44:c3:70:f3:01:ef:4e:7f:d4:73:81:
         ac:a2:0e:6f:94:33:87:b2:00:7b:1c:32:44:33:6b:35:d5:93:
         1b:76:e5:bb:22:4f:e9:b0:7c:f1:7c:1e:22:14:fe:a8:49:5c:
         1b:94:f4:43:1a:f0:78:3a:b6:f8:fd:b2:af:6e:8a:c3:1c:03:
         5d:ea:a3:ce:51:a0:c7:c3:89:86:f5:e5:24:09:b6:53:30:f8:
         7f:6a:03:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC6/oa0OpFMsjmXCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJiYmYyOTctMDc5ZC00YzkxLTkzNDEtMTI5N2U3ODhj
MzI1MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
ODU4MWFiMjktYTJiNy00OGY2LThjOGUtOGJhYTNlMzQwZmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81hp5XGwLncXJS634eeI1ASTIhABn0pmbbXg
piFHqvDOG4rLgqpMLrfPWvFCMyg0Wmh3a76U8NY8kOSQiwpM6aoi61ze9lLxDYlM
ShrMZM/oftKsuseNgLrqXPskEI68jxn+vFHplb2eUIHyYquw8uc0TkIsKjKji1Fs
T2a3tbxM0ziXJx8iPdHMtWZdPJNpyua6kLstBJIjHkFwS7rZk2xo64eIDLZkvbC9
a43xpswJBBhcI4w+ZHX7Thb1j7AWFIhVyPyZLmvMV7hEtHi0jQ5UaUgS16PzeWFZ
Lw2Cw1PQj4oMaZy32KBTGYBz6wgY+qnAENtGi7EyHJPjg8yfywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCHBqhPt8FA0KCHn99dtvWx2OSIpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJi
ZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3ZTc4OGMzMjUvZDE1NjA4YWItZmVjOC0z
ZmQwLWJkMDItYTk5MzhkYTAxMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDJiYmYyOTctMDc5ZC00YzkxLTkz
NDEtMTI5N2U3ODhjMzI1L2QyYmJmMjk3LTA3OWQtNGM5MS05MzQxLTEyOTdlNzg4
YzMyNS5jcmwwHwYDVR0jBBgwFoAUFYvl0Qfxf8fPbbFdLUnwwCx4NMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJiZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3
ZTc4OGMzMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAED
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL3WGDeTAmeS7xOTAiWkVP+/xZ15NWoii3gPZ3+8o6DSPhuOAnDN
oCqmTm7HAtUaJXaC4tTmG9I5tidv6L5gOWdMbghh3jKPl5g71yxHs60KD6xLyUka
TYxNrN2GxmIPpk/D6gOlukM5Unkqh5NfV639bIYF+VFAN6efIQSALc/MKSKBDRn9
LjzCTQ/h++b9elkTZh7uEoqQc7ZYV3lsl1IfTMEImATC94tEw3DzAe9Of9Rzgayi
Dm+UM4eyAHscMkQzazXVkxt25bsiT+mwfPF8HiIU/qhJXBuU9EMa8Hg6tvj9sq9u
isMcA13qo85RoMfDiYb15SQJtlMw+H9qAx8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:36 2025 by rpki-client