Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/005f5344-a550-335e-b752-433dc39d5f9a.roa
File:                     005f5344-a550-335e-b752-433dc39d5f9a.roa (raw, json)
Hash identifier:          qaLPQ5H154cqan2BlNaBMDIScGtOdETo4r4KorqZMLQ=
Subject key identifier:   6B:96:F4:88:93:72:9D:49:37:7F:FB:AF:F6:EF:F0:10:B4:7C:94:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB3E9F221FB3D71DC675E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/005f5344-a550-335e-b752-433dc39d5f9a.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     701
IP address blocks:        2600:4040:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:3e:9f:22:1f:b3:d7:1d:c6:75:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=bcb033cc-f43a-4910-91e0-12541b87a177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:fd:a5:6c:62:84:47:d8:a2:68:20:26:2c:
                    8b:5e:ee:77:75:98:4d:35:cf:15:53:ab:d6:b8:0b:
                    ab:b8:48:90:33:e7:77:44:52:20:c8:ac:23:3d:22:
                    0c:c3:0f:d4:10:27:8b:12:23:3f:2f:29:23:31:a8:
                    ad:03:dd:0c:94:29:e5:40:54:45:86:ff:e8:ad:9f:
                    a5:00:13:70:74:0d:fe:23:96:8c:cd:b3:dc:c9:63:
                    10:78:7c:88:17:0a:30:e1:f6:d6:d3:81:07:4e:a8:
                    56:fb:20:46:29:83:97:ce:9c:d6:a3:da:42:ee:8b:
                    12:9b:11:33:d1:6f:0b:f1:52:84:21:ef:53:b5:d2:
                    f6:93:1a:42:e3:ef:b1:56:7a:31:8c:91:39:e9:b8:
                    75:06:9a:6a:d0:f6:6c:08:08:3b:7f:2b:cc:4c:74:
                    cf:49:dc:4b:90:d2:3e:2e:be:6b:40:66:34:02:01:
                    9d:32:37:b8:41:e2:b7:bc:a6:ca:fd:04:cd:98:fd:
                    32:ce:08:9f:a8:b3:18:39:4e:fc:5c:d5:68:cb:e7:
                    23:44:00:f8:09:9c:5d:c3:25:fb:c7:18:87:70:e4:
                    18:db:e8:fa:e9:e2:7b:74:46:0d:7f:f4:d3:0d:b9:
                    18:e0:21:e9:b6:6d:8e:f6:85:83:6c:83:97:6c:1e:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:96:F4:88:93:72:9D:49:37:7F:FB:AF:F6:EF:F0:10:B4:7C:94:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/005f5344-a550-335e-b752-433dc39d5f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:2d:a3:78:72:c0:d2:f3:2f:3e:14:c4:68:1c:b7:de:2b:a5:
         bf:38:4d:9a:53:94:f7:b3:2b:04:ca:f2:9f:7c:98:aa:32:42:
         2e:ca:3f:d3:78:62:90:3c:1d:0d:86:c2:2f:f4:ee:57:03:25:
         03:71:ff:99:cb:e2:98:fb:92:86:f1:c8:db:d3:44:56:67:4b:
         46:2d:09:1f:c3:1f:1c:e8:91:7b:b8:f2:0e:82:ff:f7:3e:5d:
         8c:c2:d6:8a:30:77:cb:f0:78:86:c2:6b:a7:34:6e:4d:8c:a6:
         69:9a:77:c0:24:7e:16:ef:e0:6e:d1:3d:45:f3:7d:b4:50:75:
         c5:ab:3c:32:6c:31:4a:78:65:fd:07:38:45:0c:be:0e:84:ab:
         f9:9e:5b:d6:02:c7:b0:19:53:b0:7c:f7:4d:33:9f:eb:ff:28:
         f5:f6:2d:bc:a6:46:c8:ad:e8:e4:43:34:89:74:4e:a1:c2:66:
         32:ef:66:8a:ef:fd:a6:26:05:99:7e:15:b7:db:38:f4:9f:a5:
         78:e9:ee:e9:14:45:c9:21:37:03:4d:45:f9:46:67:2d:18:80:
         a4:0f:e3:43:9f:1b:5a:ff:28:ce:91:1a:88:75:9e:64:85:f6:
         b2:a1:8b:18:28:05:58:d1:04:b0:e3:25:aa:54:39:a3:a5:53:
         57:23:ef:0c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEh86z6fIh+z1x3GdeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
YmNiMDMzY2MtZjQzYS00OTEwLTkxZTAtMTI1NDFiODdhMTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKb9pWxihEfYomggJiyLXu53dZhNNc8VU6vW
uAuruEiQM+d3RFIgyKwjPSIMww/UECeLEiM/LykjMaitA90MlCnlQFRFhv/orZ+l
ABNwdA3+I5aMzbPcyWMQeHyIFwow4fbW04EHTqhW+yBGKYOXzpzWo9pC7osSmxEz
0W8L8VKEIe9TtdL2kxpC4++xVnoxjJE56bh1Bppq0PZsCAg7fyvMTHTPSdxLkNI+
Lr5rQGY0AgGdMje4QeK3vKbK/QTNmP0yzgifqLMYOU78XNVoy+cjRAD4CZxdwyX7
xxiHcOQY2+j66eJ7dEYNf/TTDbkY4CHptm2O9oWDbIOXbB7KMwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGuW9IiTcp1JN3/7r/bv8BC0fJS/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDA1ZjUzNDQtYTU1MC0z
MzVlLWI3NTItNDMzZGMzOWQ1ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgBAQDAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXi2jeHLA0vMvPhTEaBy33iulvzhNmlOU97MrBMryn3yYqjJCLso/
03hikDwdDYbCL/TuVwMlA3H/mcvimPuShvHI29NEVmdLRi0JH8MfHOiRe7jyDoL/
9z5djMLWijB3y/B4hsJrpzRuTYymaZp3wCR+Fu/gbtE9RfN9tFB1xas8MmwxSnhl
/Qc4RQy+DoSr+Z5b1gLHsBlTsHz3TTOf6/8o9fYtvKZGyK3o5EM0iXROocJmMu9m
iu/9piYFmX4Vt9s49J+leOnu6RRFySE3A01F+UZnLRiApA/jQ58bWv8ozpEaiHWe
ZIX2sqGLGCgFWNEEsOMlqlQ5o6VTVyPvDA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:10 2025 by rpki-client