Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/be6a22b7-c20c-3cc9-b559-7570c3648d78.roa
File:                     be6a22b7-c20c-3cc9-b559-7570c3648d78.roa (raw, json)
Hash identifier:          BSDcTUctrw+8tIzQ0fjMmJm0XIIZsZJYhJGCqTjZECQ=
Subject key identifier:   CB:EF:4F:14:5D:F8:23:0F:A5:78:39:FE:F4:2B:52:4A:26:A4:88:BD
Certificate issuer:       /CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
Certificate serial:       010D0C9F4328584930DE786870D56E1FBFB7DB00
Authority key identifier: 3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/be6a22b7-c20c-3cc9-b559-7570c3648d78.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     2637
IP address blocks:        2610:148::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:78:68:70:d5:6e:1f:bf:b7:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=66f3c1f9-439e-4cd8-a3bb-149260987a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:00:c0:01:3d:34:25:e2:70:54:23:3f:1a:
                    5d:48:60:2a:43:b8:b9:57:62:14:71:d5:7d:f1:6c:
                    66:4b:a3:93:2c:a9:bb:aa:ae:c8:46:0c:7a:fb:68:
                    06:16:c8:a9:33:0b:13:a8:13:34:47:29:fc:ea:26:
                    ec:04:7b:01:82:55:6b:3d:88:f6:ef:d6:28:12:ea:
                    63:47:e7:9c:ea:4c:ed:0f:ca:c5:9e:27:44:be:0a:
                    92:fb:c7:ed:97:ae:07:2c:30:b8:f9:a0:3d:53:04:
                    6c:52:13:93:a7:24:02:c2:fb:05:ef:fc:ae:6b:93:
                    2f:ea:e4:4b:fe:91:a5:5a:da:71:4c:fb:90:96:6d:
                    09:16:d3:29:0b:9b:b6:8d:f2:a6:09:0f:2a:46:59:
                    8c:ca:17:65:d1:de:d7:61:86:22:73:7f:4a:52:75:
                    d2:a7:3e:ab:1c:41:ac:04:14:11:b4:89:96:3c:2b:
                    a8:2a:66:19:d9:25:06:89:81:aa:ee:38:e0:67:1a:
                    20:c0:ff:75:be:20:0f:ea:e6:46:64:c7:7c:12:34:
                    4c:40:1c:6e:1b:72:67:39:d8:7f:00:1b:01:51:d6:
                    cb:47:ac:a1:48:e8:cb:13:8c:bb:ac:a4:3b:e4:aa:
                    96:c9:e0:71:19:d6:39:d0:30:a6:63:49:51:55:be:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:4F:14:5D:F8:23:0F:A5:78:39:FE:F4:2B:52:4A:26:A4:88:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/be6a22b7-c20c-3cc9-b559-7570c3648d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:148::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:52:58:c1:4b:b0:f3:e8:9d:2d:82:d3:8d:6c:5c:e0:88:1a:
         72:09:9e:17:81:0c:a7:86:57:25:c5:2b:85:a6:04:47:76:c9:
         2a:0b:5d:2e:27:af:30:40:db:72:b8:2d:b4:57:ab:e2:6a:29:
         1f:c3:c3:4a:9e:32:28:bb:71:a4:43:1b:75:d7:aa:5e:d1:48:
         ed:9a:5b:5f:69:5b:51:b1:91:6b:d3:f9:95:86:b3:30:f5:dc:
         2c:9a:43:cf:37:de:84:d7:fb:07:42:4a:62:7e:f1:58:ce:2c:
         84:7a:60:c1:bc:95:2f:b2:48:e9:01:95:d6:bb:a6:1d:52:81:
         b8:60:fb:d2:1c:80:b8:c5:97:5e:df:84:87:d6:7b:f7:15:62:
         b2:6d:1a:78:d7:9a:3c:b1:cc:37:1c:93:01:75:04:a1:41:ac:
         84:9b:25:f2:6f:e9:6a:b0:ef:88:ec:ba:10:58:3e:60:9e:91:
         55:37:3e:e7:0a:1a:0b:82:89:ab:52:91:35:ff:f5:5a:0f:1a:
         62:79:e7:d6:aa:e3:e2:0c:b1:a4:11:7c:9e:92:7b:60:a2:b0:
         e2:72:f6:c9:b4:3c:f3:e7:69:8a:99:51:bf:f7:39:ce:04:3b:
         af:18:7f:bd:af:e7:4a:06:9c:f3:0a:27:4f:70:a7:28:f5:8c:
         6e:2f:9a:2e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkw3nhocNVuH7+32wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDMwZDkyY2ItNzRiZC00ZDZkLTlmNzktYmI5M2Y5MWQ4
M2FmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NjZmM2MxZjktNDM5ZS00Y2Q4LWEzYmItMTQ5MjYwOTg3YThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1UAwAE9NCXicFQjPxpdSGAqQ7i5V2IUcdV9
8WxmS6OTLKm7qq7IRgx6+2gGFsipMwsTqBM0Ryn86ibsBHsBglVrPYj279YoEupj
R+ec6kztD8rFnidEvgqS+8ftl64HLDC4+aA9UwRsUhOTpyQCwvsF7/yua5Mv6uRL
/pGlWtpxTPuQlm0JFtMpC5u2jfKmCQ8qRlmMyhdl0d7XYYYic39KUnXSpz6rHEGs
BBQRtImWPCuoKmYZ2SUGiYGq7jjgZxogwP91viAP6uZGZMd8EjRMQBxuG3JnOdh/
ABsBUdbLR6yhSOjLE4y7rKQ75KqWyeBxGdY50DCmY0lRVb4pjQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMvvTxRd+CMPpXg5/vQrUkompIi9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzBk
OTJjYi03NGJkLTRkNmQtOWY3OS1iYjkzZjkxZDgzYWYvYmU2YTIyYjctYzIwYy0z
Y2M5LWI1NTktNzU3MGMzNjQ4ZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDMwZDkyY2ItNzRiZC00ZDZkLTlm
NzktYmI5M2Y5MWQ4M2FmLzAzMGQ5MmNiLTc0YmQtNGQ2ZC05Zjc5LWJiOTNmOTFk
ODNhZi5jcmwwHwYDVR0jBBgwFoAUP6RtTMtvThGAzhFePD4BtF/7g+kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzBkOTJjYi03NGJkLTRkNmQtOWY3OS1iYjkz
ZjkxZDgzYWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhABSDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCGUljBS7Dz6J0tgtONbFzgiBpyCZ4XgQynhlclxSuFpgRHdskqC10u
J68wQNtyuC20V6viaikfw8NKnjIou3GkQxt116pe0UjtmltfaVtRsZFr0/mVhrMw
9dwsmkPPN96E1/sHQkpifvFYziyEemDBvJUvskjpAZXWu6YdUoG4YPvSHIC4xZde
34SH1nv3FWKybRp415o8scw3HJMBdQShQayEmyXyb+lqsO+I7LoQWD5gnpFVNz7n
ChoLgomrUpE1//VaDxpieefWquPiDLGkEXyekntgorDicvbJtDzz52mKmVG/9znO
BDuvGH+9r+dKBpzzCidPcKco9YxuL5ou
-----END CERTIFICATE-----