Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3636f0bc-cd17-38c4-a6b3-ad1b6d595ef6.roa
File:                     3636f0bc-cd17-38c4-a6b3-ad1b6d595ef6.roa (raw, json)
Hash identifier:          saf6iJeTzSghRnzra1l04LieEFqeUN56K7YbEw9rEnk=
Subject key identifier:   13:93:CB:07:1C:59:ED:E5:96:53:19:4A:BD:09:9C:CA:79:CD:45:C9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A136209230186B8529003D40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3636f0bc-cd17-38c4-a6b3-ad1b6d595ef6.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1405:8400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:20:92:30:18:6b:85:29:00:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=6012d6b5-880c-422c-bd54-36a861738b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c6:64:5c:6b:1e:71:47:1a:72:93:aa:2f:b8:
                    95:60:40:e7:2b:39:98:79:82:93:f0:51:71:fc:bd:
                    67:11:b8:dc:c0:99:44:f0:52:b1:4a:1b:74:e5:80:
                    64:1d:cb:19:42:52:ca:c0:21:16:94:2f:52:1a:87:
                    ac:db:8f:d7:02:ca:b0:b5:ea:10:6e:6e:ae:93:6c:
                    9e:94:34:fa:29:f2:86:11:a5:c8:22:fd:67:c3:bd:
                    fd:02:38:ac:a7:53:5c:42:b3:31:66:64:68:96:20:
                    81:77:c4:ad:e3:25:a8:c8:19:00:e0:b1:f5:1f:97:
                    f3:c9:79:62:24:a3:b9:c4:f4:aa:2b:28:49:02:c0:
                    e7:68:52:2a:a8:e6:2b:12:7e:80:d3:80:04:55:0d:
                    95:10:8e:6e:00:83:f6:b0:96:1d:4c:66:54:04:f4:
                    ad:10:1c:87:8b:eb:a7:11:d4:aa:b2:e1:42:b6:4a:
                    be:eb:7f:f3:92:3c:03:ef:4c:81:e1:a7:1b:76:88:
                    6e:77:be:96:64:57:81:74:66:cc:d1:9e:77:54:cc:
                    f1:86:73:cf:5e:33:af:dd:2d:56:18:25:41:87:35:
                    bf:b2:7b:09:92:c3:01:e0:9b:b5:1a:21:bc:b6:e4:
                    80:17:6d:4e:75:7d:d8:e7:32:f9:85:14:a0:04:1a:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:93:CB:07:1C:59:ED:E5:96:53:19:4A:BD:09:9C:CA:79:CD:45:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3636f0bc-cd17-38c4-a6b3-ad1b6d595ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:8400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:2b:23:df:d3:13:a6:74:28:29:d3:5b:4c:b8:af:08:1e:
         12:e7:32:75:8d:c7:77:3e:54:35:f2:e6:8b:53:b0:81:4a:09:
         bd:b2:9b:61:34:b8:77:b0:bd:23:b9:83:48:df:87:18:68:76:
         aa:d8:4e:cb:5c:ad:ae:49:78:1f:b7:91:07:1e:44:8c:6b:d8:
         61:71:63:ab:83:ec:5b:18:73:8e:86:22:8c:a8:26:32:f7:0e:
         78:40:58:44:12:1e:3d:fd:31:62:8d:73:98:08:e8:09:84:16:
         35:f9:a9:f9:8f:5c:d2:12:33:e6:3c:d6:23:f0:bc:90:37:6c:
         be:c9:de:ba:ed:c0:49:b5:b5:4c:b3:67:40:70:bc:f0:6a:84:
         16:6f:0b:24:ce:b0:f5:31:0b:86:90:09:f2:ce:9f:97:b7:9a:
         7f:1c:67:76:af:2f:60:d7:58:ad:d5:c1:bd:8c:f9:c6:1c:a3:
         70:95:a6:1d:37:3a:fa:c8:14:76:5a:34:d0:45:1c:f9:4a:ec:
         93:11:94:01:83:cc:a0:47:d0:f7:98:5c:53:c5:3d:5e:54:ec:
         c9:de:97:aa:b4:04:48:7f:97:b0:a9:f3:66:99:a7:2c:2a:95:
         09:33:91:6a:e4:d5:94:84:da:d8:f0:b5:d0:b8:8c:bd:42:25:
         f2:4d:d9:d4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNiCSMBhrhSkAPUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
NjAxMmQ2YjUtODgwYy00MjJjLWJkNTQtMzZhODYxNzM4YjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMZkXGsecUcacpOqL7iVYEDnKzmYeYKT8FFx
/L1nEbjcwJlE8FKxSht05YBkHcsZQlLKwCEWlC9SGoes24/XAsqwteoQbm6uk2ye
lDT6KfKGEaXIIv1nw739Ajisp1NcQrMxZmRoliCBd8St4yWoyBkA4LH1H5fzyXli
JKO5xPSqKyhJAsDnaFIqqOYrEn6A04AEVQ2VEI5uAIP2sJYdTGZUBPStEByHi+un
EdSqsuFCtkq+63/zkjwD70yB4acbdohud76WZFeBdGbM0Z53VMzxhnPPXjOv3S1W
GCVBhzW/snsJksMB4Ju1GiG8tuSAF21OdX3Y5zL5hRSgBBrecQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBOTywccWe3lllMZSr0JnMp5zUXJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzYzNmYwYmMtY2QxNy0z
OGM0LWE2YjMtYWQxYjZkNTk1ZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBYQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG5VKyPf0xOmdCgp01tMuK8IHhLnMnWNx3c+VDXy5otTsIFKCb2y
m2E0uHewvSO5g0jfhxhodqrYTstcra5JeB+3kQceRIxr2GFxY6uD7FsYc46GIoyo
JjL3DnhAWEQSHj39MWKNc5gI6AmEFjX5qfmPXNISM+Y81iPwvJA3bL7J3rrtwEm1
tUyzZ0BwvPBqhBZvCyTOsPUxC4aQCfLOn5e3mn8cZ3avL2DXWK3Vwb2M+cYco3CV
ph03OvrIFHZaNNBFHPlK7JMRlAGDzKBH0PeYXFPFPV5U7Mnel6q0BEh/l7Cp82aZ
pywqlQkzkWrk1ZSE2tjwtdC4jL1CJfJN2dQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:02 2025 by rpki-client