Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed4638f5-c536-35d7-8c5d-9dd4685a2f24.roa
File:                     ed4638f5-c536-35d7-8c5d-9dd4685a2f24.roa (raw, json)
Hash identifier:          wt7gbHlmlg81/NzzvEFhNtuAEbs/JJrzXsj3dtuD12M=
Subject key identifier:   18:36:B8:BE:0F:B4:BA:71:84:FA:70:B9:6A:34:18:B4:48:38:4D:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584898D61895CE7EF885976AD600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed4638f5-c536-35d7-8c5d-9dd4685a2f24.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:141c:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:18:95:ce:7e:f8:85:97:6a:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=9dddc679-c65f-49fe-aedd-6c186e4e6b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:e7:3b:0c:bd:78:8d:a7:54:50:de:b7:bb:
                    e2:82:ad:48:0b:08:24:b3:1f:d4:21:2a:6d:44:24:
                    36:05:58:c0:cc:d2:c3:3a:bd:35:04:eb:a0:38:5b:
                    c6:09:80:d9:5a:0b:c5:e2:c0:d9:11:b0:2e:33:5b:
                    90:87:dc:cd:51:3b:c7:ba:85:95:5d:26:53:14:6d:
                    d8:ea:75:83:52:03:7e:07:02:4c:d0:be:32:fd:67:
                    36:55:d1:11:e1:ed:67:43:c5:7c:78:9f:23:d6:0d:
                    4c:c8:63:7c:dd:b2:04:2f:b5:f2:b1:75:c7:be:46:
                    78:3d:3b:74:38:62:8d:91:0f:c6:73:19:81:58:61:
                    b7:10:f7:5e:c1:76:bb:58:3d:fd:1a:e5:b3:93:4e:
                    d6:c2:6a:cf:a5:28:3a:ce:e4:9f:2b:e5:06:c8:f8:
                    b4:73:27:00:e6:70:5a:76:a3:23:f5:55:0d:05:ce:
                    96:0c:ca:5a:16:be:70:96:5e:86:06:db:0c:60:be:
                    31:43:13:14:42:e1:6a:16:f0:b6:f7:1c:b3:31:55:
                    b9:67:18:25:37:0c:9e:42:2d:0e:ed:e5:71:59:76:
                    b0:20:4d:09:12:ea:f9:af:76:b2:0f:2c:34:f5:4a:
                    0c:83:0e:80:d5:07:39:61:a2:75:4a:53:9e:39:cc:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:36:B8:BE:0F:B4:BA:71:84:FA:70:B9:6A:34:18:B4:48:38:4D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed4638f5-c536-35d7-8c5d-9dd4685a2f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6e:da:11:30:de:81:c8:5b:bf:90:4c:90:4f:c1:51:d1:42:
         47:01:56:ac:33:a1:3f:df:3a:97:8a:43:65:89:83:a4:8e:d4:
         5c:3c:e9:8b:f5:32:5b:3c:e3:17:69:54:4a:fb:42:3b:89:af:
         a1:91:cf:ce:4f:c7:17:40:c1:06:c0:5f:10:42:b8:46:7c:93:
         93:90:f5:6e:f2:7d:e7:a5:93:10:30:96:3b:a8:23:cf:3c:c8:
         a8:63:5a:d5:b1:32:2f:27:93:85:77:e4:b7:4b:78:4e:a1:0f:
         ff:5a:06:17:9f:24:05:3a:30:b2:7e:0f:9b:79:d6:48:85:55:
         4d:ab:dd:41:49:b7:2e:1e:b4:06:09:a2:8f:a9:d9:81:e8:ac:
         0e:37:81:cb:ea:99:06:25:c5:e2:3d:9c:94:22:b1:51:c7:7d:
         90:c4:19:e9:43:9b:77:ca:93:15:d4:38:50:b9:d9:c8:f5:f7:
         47:3b:c0:88:a1:ed:3e:60:2f:cd:0c:7f:71:75:24:86:49:df:
         b4:87:43:f1:17:03:33:c9:83:20:93:23:d7:01:2a:2c:7a:06:
         12:bf:dd:cd:7a:da:64:c8:40:fe:05:75:66:d1:e2:27:7d:48:
         b3:fa:c2:63:85:35:e9:85:81:32:f5:78:f8:71:17:d3:ce:de:
         ab:63:49:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiY1hiVzn74hZdq1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
OWRkZGM2NzktYzY1Zi00OWZlLWFlZGQtNmMxODZlNGU2Yjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPjnOwy9eI2nVFDet7vigq1ICwgksx/UISpt
RCQ2BVjAzNLDOr01BOugOFvGCYDZWgvF4sDZEbAuM1uQh9zNUTvHuoWVXSZTFG3Y
6nWDUgN+BwJM0L4y/Wc2VdER4e1nQ8V8eJ8j1g1MyGN83bIEL7XysXXHvkZ4PTt0
OGKNkQ/GcxmBWGG3EPdewXa7WD39GuWzk07WwmrPpSg6zuSfK+UGyPi0cycA5nBa
dqMj9VUNBc6WDMpaFr5wll6GBtsMYL4xQxMUQuFqFvC29xyzMVW5ZxglNwyeQi0O
7eVxWXawIE0JEur5r3ayDyw09UoMgw6A1Qc5YaJ1SlOeOcxKHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBg2uL4PtLpxhPpwuWo0GLRIOE3CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWQ0NjM4ZjUtYzUzNi0z
NWQ3LThjNWQtOWRkNDY4NWEyZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADFu2hEw3oHIW7+QTJBPwVHRQkcBVqwzoT/fOpeKQ2WJg6SO1Fw8
6Yv1Mls84xdpVEr7QjuJr6GRz85PxxdAwQbAXxBCuEZ8k5OQ9W7yfeelkxAwljuo
I888yKhjWtWxMi8nk4V35LdLeE6hD/9aBhefJAU6MLJ+D5t51kiFVU2r3UFJty4e
tAYJoo+p2YHorA43gcvqmQYlxeI9nJQisVHHfZDEGelDm3fKkxXUOFC52cj190c7
wIih7T5gL80Mf3F1JIZJ37SHQ/EXAzPJgyCTI9cBKix6BhK/3c162mTIQP4FdWbR
4id9SLP6wmOFNemFgTL1ePhxF9PO3qtjSZ4=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:58 2025 by rpki-client