Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa
File:                     a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa (raw, json)
Hash identifier:          U+GP2AsSozJY05oo3OyOqUQe0plQVLf73Ku97a4eqXE=
Subject key identifier:   53:D6:CD:C0:42:35:D6:44:CA:EE:EB:A9:C3:E7:96:F3:9F:52:E7:F9
Certificate issuer:       /CN=a68d2f38-09d2-4f0c-b179-52244e19fa2a
Certificate serial:       010D0C9F432858492A80570938D0B3759AC47BF0
Authority key identifier: 30:77:84:8C:FD:82:E6:3A:05:8B:32:1C:76:68:7E:FA:27:F5:04:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa
Signing time:             Wed 12 Mar 2025 18:16:22 +0000
ROA not before:           Wed 12 Mar 2025 18:16:22 +0000
ROA not after:            Tue 10 Jun 2025 18:16:22 +0000
asID:                     401219
IP address blocks:        2602:f881::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2a:80:57:09:38:d0:b3:75:9a:c4:7b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68d2f38-09d2-4f0c-b179-52244e19fa2a
        Validity
            Not Before: Mar 12 18:16:22 2025 GMT
            Not After : Jun 10 18:16:22 2025 GMT
        Subject: CN=1679158c-4772-4176-acb9-9a8fc5858827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:55:a6:63:82:ad:2b:5a:06:14:27:13:27:
                    b5:ae:96:ab:08:b1:56:d3:ae:b9:dd:19:20:eb:d3:
                    a6:01:cd:80:e9:71:e9:6a:b9:71:46:1d:39:35:c2:
                    9a:00:aa:0f:5e:bf:6a:4a:d7:51:ac:c5:56:25:30:
                    b9:3e:f5:cb:1a:3f:72:2b:93:22:ae:55:3d:48:bd:
                    b3:de:0c:e6:e3:03:63:06:59:44:ab:ae:ff:07:56:
                    d6:00:ce:d4:43:25:9e:c5:1c:5f:ad:d0:39:d4:fa:
                    cd:2c:31:54:65:52:41:49:0b:a3:8d:15:d6:6c:81:
                    e2:25:ea:53:0b:7f:52:12:01:0c:65:7a:a5:6e:d5:
                    04:bf:c0:17:59:ad:65:2b:8f:d9:00:e2:a1:d9:0b:
                    c0:5c:de:6c:34:32:f6:b8:b5:70:4c:c0:09:2d:c8:
                    c0:3a:47:52:37:32:d6:e9:ce:89:11:11:c7:2b:cc:
                    59:aa:08:6d:f1:e9:66:1a:08:d0:fe:93:4f:52:a6:
                    71:63:2b:82:7c:07:09:0f:a6:2b:5a:f0:2d:66:50:
                    78:d5:02:63:51:98:16:d3:e4:8c:ff:b7:90:4f:96:
                    7f:eb:bd:3a:1a:7d:7e:b5:a1:b7:62:9a:67:54:93:
                    ac:d9:32:a8:ac:ac:ab:2f:82:25:50:84:43:56:67:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D6:CD:C0:42:35:D6:44:CA:EE:EB:A9:C3:E7:96:F3:9F:52:E7:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a68d2f38-09d2-4f0c-b179-52244e19fa2a.crl

            X509v3 Authority Key Identifier:
                keyid:30:77:84:8C:FD:82:E6:3A:05:8B:32:1C:76:68:7E:FA:27:F5:04:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f881::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b6:be:9f:24:9e:18:9c:15:0a:4a:ea:50:52:1e:43:19:2e:
         7c:9c:06:7f:f8:ea:3c:a2:ea:1b:db:50:ab:de:a5:44:54:8d:
         48:6d:4c:6b:e9:af:7c:9c:a2:b4:f8:22:e9:61:16:24:b0:27:
         c4:d5:4f:43:c1:ae:2c:fc:6f:e7:36:21:2e:2f:4f:2c:2f:27:
         ae:db:95:25:31:c7:5f:07:78:4d:11:d9:3a:85:6b:71:dc:56:
         00:68:f2:45:23:4b:29:e7:67:ec:88:2a:c4:6c:31:34:0c:c4:
         ae:a2:02:2c:36:4d:c0:54:66:5e:75:d7:74:e4:4f:80:1a:35:
         b3:f3:19:e1:1d:7d:a5:34:d9:c0:88:62:5c:88:d3:43:c4:1c:
         27:21:67:6c:74:c2:da:85:ca:bc:13:2a:1e:3a:6d:92:38:dd:
         a9:be:92:f6:64:75:55:cc:8c:6c:24:16:63:d9:23:a4:82:88:
         c7:64:21:fe:ff:e3:2e:c3:7e:07:0a:d3:7c:a8:82:bc:31:bf:
         ce:a4:fb:08:c2:5a:11:aa:b4:21:fc:39:a0:44:b3:2f:33:94:
         e6:3f:9d:da:23:f4:1b:a5:46:fe:27:0b:b9:1a:53:be:ca:c3:
         ac:25:d3:04:f4:e6:4c:21:ae:68:3e:7d:07:23:da:f7:55:84:
         bd:f1:da:a7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkqgFcJONCzdZrEe/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTY4ZDJmMzgtMDlkMi00ZjBjLWIxNzktNTIyNDRlMTlm
YTJhMB4XDTI1MDMxMjE4MTYyMloXDTI1MDYxMDE4MTYyMlowLzEtMCsGA1UEAxMk
MTY3OTE1OGMtNDc3Mi00MTc2LWFjYjktOWE4ZmM1ODU4ODI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywBVpmOCrStaBhQnEye1rparCLFW06653Rkg
69OmAc2A6XHparlxRh05NcKaAKoPXr9qStdRrMVWJTC5PvXLGj9yK5MirlU9SL2z
3gzm4wNjBllEq67/B1bWAM7UQyWexRxfrdA51PrNLDFUZVJBSQujjRXWbIHiJepT
C39SEgEMZXqlbtUEv8AXWa1lK4/ZAOKh2QvAXN5sNDL2uLVwTMAJLcjAOkdSNzLW
6c6JERHHK8xZqght8elmGgjQ/pNPUqZxYyuCfAcJD6YrWvAtZlB41QJjUZgW0+SM
/7eQT5Z/6706Gn1+taG3YppnVJOs2TKorKyrL4IlUIRDVmfo+wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFPWzcBCNdZEyu7rqcPnlvOfUuf5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNjhk
MmYzOC0wOWQyLTRmMGMtYjE3OS01MjI0NGUxOWZhMmEvYTU5ZjhlNmYtOTMzMC0z
YTRmLTg2NGEtMjFlNzIyYzBlYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTY4ZDJmMzgtMDlkMi00ZjBjLWIx
NzktNTIyNDRlMTlmYTJhL2E2OGQyZjM4LTA5ZDItNGYwYy1iMTc5LTUyMjQ0ZTE5
ZmEyYS5jcmwwHwYDVR0jBBgwFoAUMHeEjP2C5joFizIcdmh++if1BAYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNjhkMmYzOC0wOWQyLTRmMGMtYjE3OS01MjI0
NGUxOWZhMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4gQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYLa+nySeGJwVCkrqUFIeQxkufJwGf/jqPKLqG9tQq96lRFSNSG1M
a+mvfJyitPgi6WEWJLAnxNVPQ8GuLPxv5zYhLi9PLC8nrtuVJTHHXwd4TRHZOoVr
cdxWAGjyRSNLKedn7IgqxGwxNAzErqICLDZNwFRmXnXXdORPgBo1s/MZ4R19pTTZ
wIhiXIjTQ8QcJyFnbHTC2oXKvBMqHjptkjjdqb6S9mR1VcyMbCQWY9kjpIKIx2Qh
/v/jLsN+BwrTfKiCvDG/zqT7CMJaEaq0Ifw5oESzLzOU5j+d2iP0G6VG/icLuRpT
vsrDrCXTBPTmTCGuaD59ByPa91WEvfHapw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:28 2025 by rpki-client