Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa
File:                     dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa (raw, json)
Hash identifier:          lF1WXeqpn+sgnETOSypGxcg6u5CUVMulnKnfdLqu6yA=
Subject key identifier:   F6:C9:9E:3A:B1:4E:15:AB:CE:EA:37:5A:10:6F:67:6C:62:E8:43:8C
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F432858489B04FDFA19AD9EB9EE78B160
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa
Signing time:             Mon 20 Jan 2025 08:47:14 +0000
ROA not before:           Mon 20 Jan 2025 08:47:14 +0000
ROA not after:            Sun 20 Apr 2025 07:47:14 +0000
asID:                     13737
IP address blocks:        2604:7580:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:04:fd:fa:19:ad:9e:b9:ee:78:b1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Jan 20 08:47:14 2025 GMT
            Not After : Apr 20 07:47:14 2025 GMT
        Subject: CN=5886725c-0e46-4b11-a590-746436948a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:29:e4:a2:f1:1c:e4:cc:60:45:cd:dd:c9:cb:
                    93:34:a5:94:54:e7:b8:a5:eb:64:ac:61:62:bf:b1:
                    05:22:71:e6:e4:13:98:c0:88:e2:1d:1b:72:aa:ce:
                    1e:4b:90:8a:fd:79:32:76:00:9f:bb:9c:98:57:e3:
                    1b:fc:7d:a6:4f:1e:96:df:fd:0d:aa:57:8b:03:b5:
                    dc:4d:04:3e:c0:85:94:ad:d8:15:34:9a:37:3d:10:
                    a3:1a:52:d1:a9:f3:d5:43:50:5a:d5:61:99:1a:03:
                    bb:4b:02:b8:e3:7d:65:d1:3a:8e:5d:33:5e:4a:d1:
                    7d:f5:5d:15:ea:5d:d8:7c:85:85:bd:2c:b1:78:a1:
                    41:4a:6c:b4:35:41:21:35:da:ff:61:df:55:6d:43:
                    2b:55:86:18:bb:b3:70:b2:0c:51:a1:69:b6:69:0a:
                    51:7e:f9:ef:5a:fa:af:b8:0c:74:91:e0:40:1f:93:
                    21:d3:6c:f9:89:d2:74:da:5f:86:eb:2f:47:33:11:
                    c4:47:48:14:0e:42:22:90:83:29:73:be:15:8c:1c:
                    87:3d:aa:7e:a4:91:a5:a7:11:dc:f5:9a:98:eb:4e:
                    d1:d3:c9:fb:87:25:3a:e4:25:12:b1:f0:da:15:9a:
                    8c:c3:ae:12:91:6f:83:95:54:30:c5:50:00:cb:b2:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C9:9E:3A:B1:4E:15:AB:CE:EA:37:5A:10:6F:67:6C:62:E8:43:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7580:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:14:41:55:fb:a4:65:ce:5e:72:3b:2f:ac:0c:6f:d7:2e:04:
         a0:ac:f9:20:d9:c2:67:9c:07:72:80:4e:20:32:9f:41:db:99:
         96:cf:06:49:51:b7:aa:3f:dd:9e:b3:b1:09:33:73:65:88:5d:
         19:43:c3:ca:af:4c:c2:fb:51:c0:42:d5:61:51:eb:5a:24:aa:
         b0:c7:91:56:28:2f:d4:39:16:eb:bf:6b:04:76:19:a8:ac:8c:
         75:49:c5:ab:4f:c6:9b:d5:78:9a:03:48:b1:ca:f9:1c:e8:18:
         20:11:4d:c0:88:39:fd:95:30:c4:b0:4a:fa:22:24:77:73:f6:
         e0:ec:bd:48:68:1d:02:08:8a:8a:49:63:31:ad:06:6d:60:4c:
         9a:69:9b:ee:3b:21:f0:eb:62:04:34:f7:30:70:eb:45:62:13:
         88:d5:fa:c8:42:8e:2d:60:35:f5:6b:81:3f:ab:43:92:7f:08:
         fc:b5:db:bf:3c:19:df:f2:93:3b:a6:4d:fc:ee:2c:b2:dd:b0:
         79:13:30:70:ee:15:7a:28:89:d4:d7:d6:39:32:6f:01:2d:72:
         6a:b5:f3:19:3a:6a:8a:8a:48:46:af:97:d6:0c:a0:5b:01:3c:
         42:8d:f1:b1:5b:d0:a6:06:75:6c:9f:7d:f5:05:40:e8:3b:29:
         0b:89:0b:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEibBP36Ga2eue54sWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4
N2ZmMB4XDTI1MDEyMDA4NDcxNFoXDTI1MDQyMDA3NDcxNFowLzEtMCsGA1UEAxMk
NTg4NjcyNWMtMGU0Ni00YjExLWE1OTAtNzQ2NDM2OTQ4YThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhinkovEc5MxgRc3dycuTNKWUVOe4petkrGFi
v7EFInHm5BOYwIjiHRtyqs4eS5CK/XkydgCfu5yYV+Mb/H2mTx6W3/0NqleLA7Xc
TQQ+wIWUrdgVNJo3PRCjGlLRqfPVQ1Ba1WGZGgO7SwK4431l0TqOXTNeStF99V0V
6l3YfIWFvSyxeKFBSmy0NUEhNdr/Yd9VbUMrVYYYu7NwsgxRoWm2aQpRfvnvWvqv
uAx0keBAH5Mh02z5idJ02l+G6y9HMxHER0gUDkIikIMpc74VjByHPap+pJGlpxHc
9ZqY607R08n7hyU65CUSsfDaFZqMw64SkW+DlVQwxVAAy7LIpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPbJnjqxThWrzuo3WhBvZ2xi6EOMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1
YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvZGFkYjhiOTEtYWU5YS0z
ZTRjLTlhOGMtMDZmYWVkZTZjNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5
NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl
ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi
OGVjZTg3ZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgR1gAAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA4UQVX7pGXOXnI7L6wMb9cuBKCs+SDZwmecB3KATiAyn0HbmZbP
BklRt6o/3Z6zsQkzc2WIXRlDw8qvTML7UcBC1WFR61okqrDHkVYoL9Q5Fuu/awR2
GaisjHVJxatPxpvVeJoDSLHK+RzoGCARTcCIOf2VMMSwSvoiJHdz9uDsvUhoHQII
iopJYzGtBm1gTJppm+47IfDrYgQ09zBw60ViE4jV+shCji1gNfVrgT+rQ5J/CPy1
2788Gd/ykzumTfzuLLLdsHkTMHDuFXooidTX1jkybwEtcmq18xk6aoqKSEavl9YM
oFsBPEKN8bFb0KYGdWyfffUFQOg7KQuJCxA=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:26 2025 by rpki-client