Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa
File:                     c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa (raw, json)
Hash identifier:          tL/eB6EWSgB8CWkk2Bh3xCIdJgjUQ8ZFwtiPNWSkCRs=
Subject key identifier:   D3:CC:4F:44:06:4A:61:81:55:F1:04:4A:C3:F1:87:37:F4:2A:E8:7C
Certificate issuer:       /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Certificate serial:       010D0C9F432858491ED6E6762612F42D8392F0C0
Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     981
IP address blocks:        2605:ac40:40::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e6:76:26:12:f4:2d:83:92:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=f95ccede-eb55-4e8c-8f6b-92a45a131a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:4c:ff:e3:95:bc:1e:eb:ea:ce:0f:b7:df:
                    e7:d8:60:80:71:ae:0b:6d:4e:2a:bc:95:26:d4:34:
                    72:26:35:b3:4f:3e:d5:97:4d:64:ad:ff:36:52:97:
                    4b:91:e8:27:03:f0:73:82:2f:50:00:82:d6:b6:eb:
                    2c:08:8d:8e:ae:6a:1a:4c:fd:f9:c5:33:de:b9:ba:
                    9c:86:90:6f:29:40:03:2b:07:d9:f2:d4:92:58:a2:
                    a8:34:5d:7b:03:0f:58:10:8d:2e:a9:70:d5:d4:54:
                    9b:48:f4:42:1f:15:8d:f2:48:65:00:40:3a:81:e9:
                    61:08:c7:7e:c9:45:0a:09:95:b8:46:3d:27:ab:a1:
                    7b:0c:91:4b:74:65:6e:44:c4:c3:8a:55:a3:6a:e5:
                    66:95:8f:65:7b:52:07:a9:c7:82:86:57:92:49:dd:
                    62:65:08:80:bb:f7:80:3c:28:ce:7d:b6:8e:bf:d4:
                    c3:16:12:21:c2:df:6f:27:71:ee:fc:61:cd:bd:df:
                    82:f9:12:dc:c7:f3:58:1a:70:48:7e:99:b6:b4:32:
                    00:85:41:7d:11:dd:14:bc:e3:5c:d8:61:1f:5e:5d:
                    4e:b5:aa:a8:61:f4:76:25:49:99:dd:97:5c:92:75:
                    c9:c3:e7:24:19:1c:b9:e0:b0:85:ac:3b:b3:63:ed:
                    21:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CC:4F:44:06:4A:61:81:55:F1:04:4A:C3:F1:87:37:F4:2A:E8:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl

            X509v3 Authority Key Identifier:
                keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ac40:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4e:3b:85:a0:68:a0:7c:64:15:3d:c7:bc:84:6f:a1:4e:5a:
         6e:50:af:71:72:66:c3:2c:dd:15:d2:01:a3:92:5f:20:00:94:
         2f:36:ad:cc:0e:cd:bf:b6:d8:37:9a:15:39:18:6e:92:85:9f:
         88:b4:29:68:46:c5:b4:1f:2d:02:4e:3a:71:69:31:75:8a:4f:
         34:41:15:52:7d:81:85:65:f4:a4:e8:0c:07:db:74:d4:de:0f:
         1d:6d:23:83:16:d5:62:87:5e:f2:f6:5c:27:ad:6c:ae:7d:3d:
         ad:c5:54:54:7f:e2:b0:04:81:e9:df:24:f2:8a:72:52:e4:f5:
         62:2b:8c:5d:c3:4c:e1:81:61:0b:8f:88:a8:e6:14:f6:51:43:
         87:f3:a1:de:ef:46:7d:e4:42:84:bd:2f:15:fd:e5:e9:aa:93:
         43:99:cf:09:7c:dd:79:c8:b3:26:a0:d2:b4:32:c6:26:d8:d3:
         dd:86:31:da:08:21:1b:53:91:dc:e2:a7:0f:6f:39:68:31:e6:
         a1:f6:bf:7b:bd:ed:62:de:55:e1:94:63:8f:c1:0d:62:0d:fb:
         ae:bc:1a:f9:07:97:79:80:00:69:c9:ad:a3:68:3b:62:29:0c:
         b5:0a:0f:55:ea:f3:9d:30:96:f7:05:a1:51:23:4c:98:fa:10:
         74:53:8e:24
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1uZ2JhL0LYOS8MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm
YTMxMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
Zjk1Y2NlZGUtZWI1NS00ZThjLThmNmItOTJhNDVhMTMxYTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjelM/+OVvB7r6s4Pt9/n2GCAca4LbU4qvJUm
1DRyJjWzTz7Vl01krf82UpdLkegnA/Bzgi9QAILWtussCI2OrmoaTP35xTPeubqc
hpBvKUADKwfZ8tSSWKKoNF17Aw9YEI0uqXDV1FSbSPRCHxWN8khlAEA6gelhCMd+
yUUKCZW4Rj0nq6F7DJFLdGVuRMTDilWjauVmlY9le1IHqceChleSSd1iZQiAu/eA
PCjOfbaOv9TDFhIhwt9vJ3Hu/GHNvd+C+RLcx/NYGnBIfpm2tDIAhUF9Ed0UvONc
2GEfXl1OtaqoYfR2JUmZ3ZdcknXJw+ckGRy54LCFrDuzY+0hVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNPMT0QGSmGBVfEESsPxhzf0Kuh8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm
YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYzZiOTlhNzgtMjlhNi0z
NjJiLTgxN2YtNTdkZDUzYjJlM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4
ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi
ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3
NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQABA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFxOO4WgaKB8ZBU9x7yEb6FOWm5Qr3FyZsMs3RXSAaOSXyAAlC82
rcwOzb+22DeaFTkYbpKFn4i0KWhGxbQfLQJOOnFpMXWKTzRBFVJ9gYVl9KToDAfb
dNTeDx1tI4MW1WKHXvL2XCetbK59Pa3FVFR/4rAEgenfJPKKclLk9WIrjF3DTOGB
YQuPiKjmFPZRQ4fzod7vRn3kQoS9LxX95emqk0OZzwl83XnIsyag0rQyxibY092G
MdoIIRtTkdzipw9vOWgx5qH2v3u97WLeVeGUY4/BDWIN+668GvkHl3mAAGnJraNo
O2IpDLUKD1Xq850wlvcFoVEjTJj6EHRTjiQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:23 2025 by rpki-client