Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa
File:                     354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa (raw, json)
Hash identifier:          kcc4T8U/kFGpPOER9kQLGrxe7KYBJzhvwQV8LX096/c=
Subject key identifier:   4B:5E:0D:4C:C7:EA:7D:26:49:85:55:FB:95:79:84:03:A5:F0:AB:4C
Certificate issuer:       /CN=467861ee-0aa8-4688-af94-7d540e2ddc56
Certificate serial:       010D0C9F43285848E59BCAF2CAA1583CECD02F80
Authority key identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     400529
IP address blocks:        2602:fabf::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:ca:f2:ca:a1:58:3c:ec:d0:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467861ee-0aa8-4688-af94-7d540e2ddc56
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=00d1c577-ced3-458d-98cd-5df21784cab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:c1:db:81:4c:8c:8d:0a:e0:a0:67:b7:d6:
                    18:b7:3c:72:67:ef:bf:23:2e:0c:88:77:f1:3c:a5:
                    d8:4b:7f:b8:d0:cb:11:19:fc:0c:8f:9f:a9:d0:29:
                    43:3a:32:57:03:1a:2f:9c:f4:c9:4b:41:7c:e6:64:
                    c6:2f:fa:22:87:5b:f3:2e:55:b2:57:e3:5e:4f:85:
                    87:87:e1:47:39:8e:8d:b7:91:5a:f4:7c:45:66:30:
                    72:5b:ac:92:f1:ef:27:4d:25:42:b7:a6:55:35:35:
                    e8:50:63:8c:5b:83:19:d1:dd:9b:a8:46:be:16:5c:
                    cc:65:ca:ce:ce:cb:ba:c5:b8:b8:52:a2:33:62:ba:
                    01:69:00:ab:1f:52:b4:3a:97:1c:43:1b:21:0e:cb:
                    10:d2:26:12:5d:dd:17:60:af:93:f1:fc:b3:03:84:
                    cf:7e:c2:1b:0f:e1:f0:27:62:31:8d:f2:af:be:a1:
                    00:79:97:01:28:32:67:6b:d9:9b:36:4c:60:62:80:
                    3b:ff:db:98:6a:a5:35:97:92:c6:a4:a2:ba:b1:12:
                    71:da:0f:09:77:14:e4:bd:8b:c0:b5:ec:5c:47:1d:
                    3f:a2:00:b2:32:41:51:f0:35:a7:32:f4:e2:35:e1:
                    c9:a3:78:ea:d6:0c:8e:4b:33:cf:cc:29:8e:c8:3d:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5E:0D:4C:C7:EA:7D:26:49:85:55:FB:95:79:84:03:A5:F0:AB:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl

            X509v3 Authority Key Identifier:
                keyid:13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fabf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e3:bc:6e:c5:ad:ea:01:ab:a0:8f:8c:aa:b8:c2:1a:55:1a:
         01:b1:42:98:28:28:43:33:11:21:3d:88:b7:99:5d:9b:a9:e5:
         82:41:d2:58:ad:da:85:00:72:26:36:d3:6d:92:6b:ce:0b:ca:
         b0:97:67:b4:34:23:19:c0:5a:d4:be:d5:d0:4f:0b:77:ed:af:
         0a:6d:cb:9a:e4:3d:ca:a0:f6:16:4c:6f:57:f9:4f:04:fb:2d:
         a5:5b:09:d5:92:45:33:56:7f:47:56:13:01:dc:89:35:ff:34:
         4a:41:43:f2:81:8a:b1:cc:cc:4b:b7:cd:90:9a:f7:7f:07:2c:
         b1:19:43:d6:23:6a:e9:ee:7b:92:3f:9e:50:71:98:bd:f1:cf:
         22:35:5d:dc:c1:4e:f3:4b:3b:77:e4:6b:f3:58:93:57:cf:7a:
         da:da:80:60:92:55:99:85:76:9d:0c:73:1b:29:31:d2:74:75:
         74:cf:9f:12:c1:76:1f:62:fe:79:83:91:c0:ac:a7:19:8e:f8:
         9f:51:9b:63:f2:24:0d:a7:a6:ea:54:6b:60:25:f6:16:a9:fd:
         4d:ed:b4:6a:5e:a2:7d:40:6a:18:ec:e7:09:5b:92:d9:b6:6f:
         de:f6:8a:ac:fd:be:9f:65:98:50:e0:2b:42:04:e2:d8:a4:41:
         fd:4a:c4:d6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjlm8ryyqFYPOzQL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY3ODYxZWUtMGFhOC00Njg4LWFmOTQtN2Q1NDBlMmRk
YzU2MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MDBkMWM1NzctY2VkMy00NThkLTk4Y2QtNWRmMjE3ODRjYWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/TB24FMjI0K4KBnt9YYtzxyZ++/Iy4MiHfx
PKXYS3+40MsRGfwMj5+p0ClDOjJXAxovnPTJS0F85mTGL/oih1vzLlWyV+NeT4WH
h+FHOY6Nt5Fa9HxFZjByW6yS8e8nTSVCt6ZVNTXoUGOMW4MZ0d2bqEa+FlzMZcrO
zsu6xbi4UqIzYroBaQCrH1K0OpccQxshDssQ0iYSXd0XYK+T8fyzA4TPfsIbD+Hw
J2IxjfKvvqEAeZcBKDJna9mbNkxgYoA7/9uYaqU1l5LGpKK6sRJx2g8JdxTkvYvA
texcRx0/ogCyMkFR8DWnMvTiNeHJo3jq1gyOSzPPzCmOyD2IZwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEteDUzH6n0mSYVV+5V5hAOl8KtMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Njc4
NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0MGUyZGRjNTYvMzU0YmY5NDYtZTNmNC0z
ZDI2LWEyNjAtNDZhYjg2YTdjZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDY3ODYxZWUtMGFhOC00Njg4LWFm
OTQtN2Q1NDBlMmRkYzU2LzQ2Nzg2MWVlLTBhYTgtNDY4OC1hZjk0LTdkNTQwZTJk
ZGM1Ni5jcmwwHwYDVR0jBBgwFoAUEy8O6mK1t8eq7wnVPlRbTVP6/U0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80Njc4NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0
MGUyZGRjNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6vwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAjOO8bsWt6gGroI+MqrjCGlUaAbFCmCgoQzMRIT2It5ldm6nlgkHS
WK3ahQByJjbTbZJrzgvKsJdntDQjGcBa1L7V0E8Ld+2vCm3LmuQ9yqD2FkxvV/lP
BPstpVsJ1ZJFM1Z/R1YTAdyJNf80SkFD8oGKsczMS7fNkJr3fwcssRlD1iNq6e57
kj+eUHGYvfHPIjVd3MFO80s7d+Rr81iTV8962tqAYJJVmYV2nQxzGykx0nR1dM+f
EsF2H2L+eYORwKynGY74n1GbY/IkDaem6lRrYCX2Fqn9Te20al6ifUBqGOznCVuS
2bZv3vaKrP2+n2WYUOArQgTi2KRB/UrE1g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:45 2025 by rpki-client