Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d21d251-4939-30c3-98d8-9a7c334ec43e.roa
File:                     3d21d251-4939-30c3-98d8-9a7c334ec43e.roa (raw, json)
Hash identifier:          qKX5B5KHafeocmkXiKqqg955I11lz886SfVYEXtI2OI=
Subject key identifier:   4D:91:B3:6A:93:5E:49:88:64:CD:BE:C1:19:8B:F0:AC:15:FD:E4:7C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848FD56A3CA91D3D61292704500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d21d251-4939-30c3-98d8-9a7c334ec43e.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     12222
IP address blocks:        2001:4878:2141::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:a3:ca:91:d3:d6:12:92:70:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=85034625-64b4-462b-9581-d64338041b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:56:01:32:6d:74:37:a1:39:59:75:e4:c7:94:
                    db:0b:1b:2e:ec:7e:52:86:05:10:c6:38:96:d5:75:
                    c4:f2:6e:15:ca:c9:23:e8:72:93:b5:6c:18:dc:80:
                    91:1d:41:cd:c0:69:5f:c0:a9:11:7e:c5:93:09:fb:
                    48:a3:a6:5d:64:90:11:2f:81:96:07:30:61:51:c4:
                    ab:ac:58:a0:39:8f:97:3c:96:5b:10:be:7a:03:4a:
                    ff:1c:04:c9:1b:9d:b5:d6:6e:66:ef:25:bf:0b:52:
                    da:7a:e7:00:ac:8a:e5:91:c8:aa:dd:03:a1:1d:7e:
                    68:b6:cd:d9:41:40:fa:70:3d:75:2f:34:ed:e7:1f:
                    1b:14:8e:b5:1d:9f:c6:ed:1a:f4:cc:d9:6b:ef:c2:
                    ee:6a:29:b3:c9:52:7f:7e:73:6f:fe:22:40:c9:2e:
                    b5:00:e3:90:7e:62:fb:60:0c:95:32:65:e2:ee:45:
                    c3:58:29:aa:38:93:05:3e:45:5c:66:c9:b2:1e:10:
                    8c:0e:c5:cb:3c:b5:cd:0e:b5:c8:9c:aa:84:1e:8a:
                    d5:5c:9e:5a:1c:ae:50:44:01:1a:d9:49:58:cd:9b:
                    ca:e6:da:ce:c2:1f:8d:b7:f7:32:03:c3:5c:c6:d2:
                    a3:38:7d:d0:8b:f0:eb:e2:b2:5c:9d:2c:b3:bc:6a:
                    41:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:91:B3:6A:93:5E:49:88:64:CD:BE:C1:19:8B:F0:AC:15:FD:E4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d21d251-4939-30c3-98d8-9a7c334ec43e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2141::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:5c:70:92:6e:25:19:51:30:fd:24:29:25:93:93:fd:13:53:
         42:cb:a2:0a:3a:67:9a:95:e0:ac:18:1f:fe:1f:cb:7e:3e:ea:
         77:5c:90:f0:ec:25:ba:c6:b2:74:ba:f1:e2:a4:27:37:a6:93:
         c0:9a:e1:5c:f1:a0:ab:ee:9f:48:a3:fa:c7:e6:2f:94:f9:02:
         76:46:3b:b9:30:f1:4e:b2:4c:34:ba:0e:cc:73:4d:1c:7c:55:
         23:35:af:2c:a4:54:cd:a6:4b:e2:de:36:e5:1c:f6:87:39:c4:
         64:c9:a6:da:65:6f:94:2a:31:8a:bc:0d:7a:a1:42:bd:55:76:
         60:37:14:fe:c1:df:83:59:dc:50:9f:f9:1d:ea:c0:bf:1d:e1:
         35:1f:48:ee:de:38:9d:13:75:f9:d6:f8:5d:f0:6d:db:30:38:
         b8:be:bc:49:33:f6:9b:f5:d5:e3:94:fc:53:e8:b0:88:4d:b9:
         5c:a9:e1:09:ef:14:89:17:dd:a4:66:39:3f:67:eb:5d:85:09:
         7b:2e:8e:9e:a5:9a:c0:60:fa:4f:e0:c9:46:67:76:dc:9b:0e:
         23:f0:9e:a4:56:60:2c:26:e6:ad:f6:fb:2d:68:ed:49:ad:7b:
         02:d2:91:a1:be:d8:7f:26:23:e2:21:1e:be:29:72:42:f8:1f:
         91:db:64:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VqPKkdPWEpJwRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODUwMzQ2MjUtNjRiNC00NjJiLTk1ODEtZDY0MzM4MDQxYjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFYBMm10N6E5WXXkx5TbCxsu7H5ShgUQxjiW
1XXE8m4Vyskj6HKTtWwY3ICRHUHNwGlfwKkRfsWTCftIo6ZdZJARL4GWBzBhUcSr
rFigOY+XPJZbEL56A0r/HATJG5211m5m7yW/C1LaeucArIrlkciq3QOhHX5ots3Z
QUD6cD11LzTt5x8bFI61HZ/G7Rr0zNlr78LuaimzyVJ/fnNv/iJAyS61AOOQfmL7
YAyVMmXi7kXDWCmqOJMFPkVcZsmyHhCMDsXLPLXNDrXInKqEHorVXJ5aHK5QRAEa
2UlYzZvK5trOwh+Nt/cyA8NcxtKjOH3Qi/Dr4rJcnSyzvGpBcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE2Rs2qTXkmIZM2+wRmL8KwV/eR8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QyMWQyNTEtNDkzOS0z
MGMzLTk4ZDgtOWE3YzMzNGVjNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCFB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGtccJJuJRlRMP0kKSWTk/0TU0LLogo6Z5qV4KwYH/4fy34+6ndc
kPDsJbrGsnS68eKkJzemk8Ca4VzxoKvun0ij+sfmL5T5AnZGO7kw8U6yTDS6Dsxz
TRx8VSM1ryykVM2mS+LeNuUc9oc5xGTJptplb5QqMYq8DXqhQr1VdmA3FP7B34NZ
3FCf+R3qwL8d4TUfSO7eOJ0TdfnW+F3wbdswOLi+vEkz9pv11eOU/FPosIhNuVyp
4QnvFIkX3aRmOT9n612FCXsujp6lmsBg+k/gyUZndtybDiPwnqRWYCwm5q32+y1o
7UmtewLSkaG+2H8mI+IhHr4pckL4H5HbZHw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:27 2025 by rpki-client