Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b4dc4c9-8412-3bd9-8765-b3167ce1672c.roa
File:                     9b4dc4c9-8412-3bd9-8765-b3167ce1672c.roa (raw, json)
Hash identifier:          x9mtzDwO5/IaL56VCA3eINmPSgFUOHM3JEy+ay6Ctag=
Subject key identifier:   0B:F4:57:F0:15:9B:F2:6E:B8:02:91:F5:CB:6B:F2:E6:2D:5F:2D:44
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB6489C240346F321F4A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b4dc4c9-8412-3bd9-8765-b3167ce1672c.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        2600:1407:a800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:64:89:c2:40:34:6f:32:1f:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=6397e736-7ee5-48cc-82dd-431e54cd3258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:21:69:8c:0c:5a:37:c6:c7:59:92:8e:3a:c9:
                    40:52:f8:3b:91:c8:1d:de:6b:d5:75:45:ad:7c:45:
                    16:28:42:9e:49:f0:64:b8:38:cd:8f:76:2c:41:41:
                    b8:0a:a3:da:e2:2f:78:cf:44:95:78:b4:b5:38:12:
                    57:2a:a0:57:0e:4e:f7:8b:6c:49:39:f8:22:0d:75:
                    63:26:54:80:2e:a8:08:64:0b:e6:c1:55:eb:27:60:
                    71:fc:98:be:c4:d0:b8:c9:60:12:84:c8:8f:1b:4b:
                    6b:9e:21:11:9d:4c:93:bc:92:49:bc:48:75:0c:ac:
                    3e:90:1f:5e:f3:56:12:97:d7:e9:77:7b:af:11:5a:
                    b4:58:1e:38:74:97:04:f8:de:cf:41:88:5f:ae:50:
                    cb:cb:f7:1a:55:85:fd:82:56:7a:9a:c4:39:67:0e:
                    12:5e:13:9b:7f:66:ad:11:80:f8:69:b3:19:5c:aa:
                    a4:46:42:94:a4:de:05:cf:75:e8:86:1d:da:ab:91:
                    05:9a:87:10:e6:c9:7e:10:90:13:8b:a0:fa:bf:28:
                    c3:97:d6:ce:f2:11:00:2b:32:4b:fc:f6:2a:bb:48:
                    4b:f8:28:d0:52:74:be:ce:e0:49:21:69:35:e1:88:
                    13:c5:1b:99:a0:54:a2:4a:d3:de:ae:95:45:6f:fe:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F4:57:F0:15:9B:F2:6E:B8:02:91:F5:CB:6B:F2:E6:2D:5F:2D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b4dc4c9-8412-3bd9-8765-b3167ce1672c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1407:a800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:06:b6:26:82:44:7c:22:c3:ae:8e:e8:ce:29:37:95:e0:
         08:14:a1:ee:da:b5:c4:35:16:65:02:89:3d:67:61:e9:2b:16:
         2d:7a:55:3e:b5:5d:3d:e6:2a:dd:67:14:b3:cb:67:22:28:71:
         0b:03:9c:15:d3:1d:63:b3:11:4f:d8:26:60:68:e1:b0:89:99:
         e5:45:58:bd:d6:2e:27:0e:3c:5c:b5:2d:60:d4:57:b9:7a:52:
         1b:4f:6b:75:d6:3a:8e:cc:7d:7a:26:c0:cd:8d:ab:af:14:f1:
         b0:01:31:4f:bb:0f:13:ba:a4:f2:f7:d4:e2:66:87:f7:c5:a2:
         60:77:04:8b:bd:1e:8c:5f:8c:c2:34:b9:e0:89:45:13:8b:1f:
         b8:aa:d0:02:8a:6a:bc:55:b6:6f:99:09:0f:bc:5c:ce:f4:a0:
         04:d5:70:c2:ac:16:c7:be:06:b1:9b:8b:51:e2:1f:ac:1c:12:
         9d:a3:79:ea:38:67:4a:ce:ef:f1:56:db:d1:05:84:cc:cb:ad:
         63:9c:7d:fb:bb:94:c6:8e:21:00:8b:e4:c8:1c:f6:e2:f5:5e:
         d1:fc:de:55:86:9f:a9:6f:b8:fe:92:b5:36:0b:44:ae:a7:b1:
         b9:f4:78:c5:d3:8f:98:91:ce:74:34:f5:c9:b2:29:97:13:88:
         89:22:d0:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiNq2SJwkA0bzIfSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
NjM5N2U3MzYtN2VlNS00OGNjLTgyZGQtNDMxZTU0Y2QzMjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CFpjAxaN8bHWZKOOslAUvg7kcgd3mvVdUWt
fEUWKEKeSfBkuDjNj3YsQUG4CqPa4i94z0SVeLS1OBJXKqBXDk73i2xJOfgiDXVj
JlSALqgIZAvmwVXrJ2Bx/Ji+xNC4yWAShMiPG0trniERnUyTvJJJvEh1DKw+kB9e
81YSl9fpd3uvEVq0WB44dJcE+N7PQYhfrlDLy/caVYX9glZ6msQ5Zw4SXhObf2at
EYD4abMZXKqkRkKUpN4Fz3Xohh3aq5EFmocQ5sl+EJATi6D6vyjDl9bO8hEAKzJL
/PYqu0hL+CjQUnS+zuBJIWk14YgTxRuZoFSiStPerpVFb/6AQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAv0V/AVm/JuuAKR9ctr8uYtXy1EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWI0ZGM0YzktODQxMi0z
YmQ5LTg3NjUtYjMxNjdjZTE2NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUB6gA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGHMBrYmgkR8IsOujujOKTeV4AgUoe7atcQ1FmUCiT1nYekrFi16
VT61XT3mKt1nFLPLZyIocQsDnBXTHWOzEU/YJmBo4bCJmeVFWL3WLicOPFy1LWDU
V7l6UhtPa3XWOo7MfXomwM2Nq68U8bABMU+7DxO6pPL31OJmh/fFomB3BIu9Hoxf
jMI0ueCJRROLH7iq0AKKarxVtm+ZCQ+8XM70oATVcMKsFse+BrGbi1HiH6wcEp2j
eeo4Z0rO7/FW29EFhMzLrWOcffu7lMaOIQCL5Mgc9uL1XtH83lWGn6lvuP6StTYL
RK6nsbn0eMXTj5iRznQ09cmyKZcTiIki0BM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:32 2025 by rpki-client