Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/06f41e6d-6678-3834-9f70-d8ccd6fbbf82.roa
File:                     06f41e6d-6678-3834-9f70-d8ccd6fbbf82.roa (raw, json)
Hash identifier:          SWoOGPR5ivhXoDNKKTciZ/J2TFfLnt3e82I2rWMp/gs=
Subject key identifier:   E9:A2:7A:BB:5D:80:31:4E:1E:17:C0:13:EE:95:2F:DB:BC:C9:AC:75
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F432858494B6409B6580326BF23E73680
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/06f41e6d-6678-3834-9f70-d8ccd6fbbf82.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     8011
IP address blocks:        2631:2000::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:09:b6:58:03:26:bf:23:e7:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=e6ed96bf-d458-429e-8351-9a825935a3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:8a:22:31:e7:65:f5:dc:86:91:49:0b:84:
                    39:b7:c8:df:87:dc:db:2b:43:44:a1:ce:27:20:c1:
                    69:df:fc:4a:32:74:cd:39:98:ea:1a:e2:ed:b4:4e:
                    c8:5d:40:da:77:ec:5e:9a:9d:a8:8c:2c:a7:97:1f:
                    33:3f:3c:49:2a:2f:f0:ed:42:ef:c4:8b:7c:e2:ee:
                    11:af:45:02:65:9b:c0:a6:fc:3d:78:ad:f4:d0:69:
                    6c:12:00:6a:ef:ea:c8:78:16:ad:59:93:ef:5f:0c:
                    4b:3a:df:81:bc:92:52:79:35:dd:47:96:08:d0:b8:
                    ee:25:ae:34:c9:f6:fd:1e:d0:bd:91:39:2c:4c:33:
                    4f:98:17:fc:18:db:2f:83:30:23:9d:cb:f1:40:3e:
                    87:7a:b6:c4:0e:ec:f9:67:68:cf:0a:8d:75:ef:71:
                    41:fd:b3:97:6a:52:19:92:4c:7b:d2:97:db:90:09:
                    00:79:2b:66:a4:06:4b:59:ff:11:6b:e1:1f:30:c8:
                    34:18:26:f5:ef:4c:76:e3:68:f4:06:47:f9:4c:e0:
                    2d:f1:30:be:ca:c4:d3:96:02:72:9a:26:8e:0a:d8:
                    87:ef:dc:1d:fe:aa:a4:3e:07:99:04:83:f5:26:d1:
                    59:28:83:17:96:58:df:15:37:0e:6e:97:c9:61:d0:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A2:7A:BB:5D:80:31:4E:1E:17:C0:13:EE:95:2F:DB:BC:C9:AC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/06f41e6d-6678-3834-9f70-d8ccd6fbbf82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:68:82:85:74:f5:7d:cd:17:45:36:9b:8f:50:74:32:2b:cb:
         fc:dc:a1:18:e2:d6:c8:ba:3f:b8:8d:fd:5f:d6:e8:b6:17:68:
         e5:73:72:df:95:ff:c1:87:23:b2:fd:88:72:25:16:7a:51:c0:
         9b:dc:83:2a:cc:60:ce:ff:18:27:83:5c:38:f7:1c:54:3c:26:
         8e:36:3f:1b:f7:d4:68:bf:0d:48:00:4a:8d:c1:e8:41:70:b9:
         cd:60:1c:2e:43:77:72:a0:8f:7d:be:5e:04:af:9c:dc:4b:49:
         fb:9a:b2:96:c1:dd:4f:29:78:27:d5:d8:ec:ea:7f:72:a7:bf:
         b9:c9:af:6d:d1:cf:28:e0:ef:c6:15:5d:c7:b2:3c:68:dd:73:
         de:1f:a9:0f:91:ab:9c:e3:4e:92:ea:18:f0:a2:c8:c6:c5:4c:
         df:6a:c7:ac:aa:85:64:a5:73:7a:ef:ef:5f:6d:f4:3b:b6:c1:
         6e:0f:c4:93:50:07:c4:5e:6f:f4:9f:b8:b1:ef:06:8d:76:06:
         88:dc:2d:38:7b:33:bb:3a:4f:20:24:d7:80:76:2a:51:0f:a2:
         c2:e9:18:80:4e:67:08:f0:60:e9:02:91:d6:06:bf:3b:30:8a:
         47:06:f8:40:e2:23:02:48:61:30:eb:17:a4:9f:a5:84:fe:db:
         41:56:c5:72
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZAm2WAMmvyPnNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
ZTZlZDk2YmYtZDQ1OC00MjllLTgzNTEtOWE4MjU5MzVhM2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntaKIjHnZfXchpFJC4Q5t8jfh9zbK0NEoc4n
IMFp3/xKMnTNOZjqGuLttE7IXUDad+xemp2ojCynlx8zPzxJKi/w7ULvxIt84u4R
r0UCZZvApvw9eK300GlsEgBq7+rIeBatWZPvXwxLOt+BvJJSeTXdR5YI0LjuJa40
yfb9HtC9kTksTDNPmBf8GNsvgzAjncvxQD6HerbEDuz5Z2jPCo1173FB/bOXalIZ
kkx70pfbkAkAeStmpAZLWf8Ra+EfMMg0GCb170x242j0Bkf5TOAt8TC+ysTTlgJy
miaOCtiH79wd/qqkPgeZBIP1JtFZKIMXlljfFTcObpfJYdC5rwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOmiertdgDFOHhfAE+6VL9u8yax1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMDZmNDFlNmQtNjY3OC0z
ODM0LTlmNzAtZDhjY2Q2ZmJiZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJjEgADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAGaIKFdPV9zRdFNpuPUHQyK8v83KEY4tbIuj+4jf1f1ui2F2jlc3Lf
lf/BhyOy/YhyJRZ6UcCb3IMqzGDO/xgng1w49xxUPCaONj8b99Rovw1IAEqNwehB
cLnNYBwuQ3dyoI99vl4Er5zcS0n7mrKWwd1PKXgn1djs6n9yp7+5ya9t0c8o4O/G
FV3Hsjxo3XPeH6kPkauc406S6hjwosjGxUzfasesqoVkpXN67+9fbfQ7tsFuD8ST
UAfEXm/0n7ix7waNdgaI3C04ezO7Ok8gJNeAdipRD6LC6RiATmcI8GDpApHWBr87
MIpHBvhA4iMCSGEw6xekn6WE/ttBVsVy
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:22:07 2025 by rpki-client