Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d7be1ef-153a-3553-9765-0f3544128e72.roa
File:                     3d7be1ef-153a-3553-9765-0f3544128e72.roa (raw, json)
Hash identifier:          eR4bADDzsckNsKixp/nPSosceTLD0IjdrWmvp0LVDDE=
Subject key identifier:   07:4F:21:B2:BD:9E:02:C4:EF:17:21:DA:48:D5:E8:8C:F2:52:13:F8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400D1095ABE3409B47C3220
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d7be1ef-153a-3553-9765-0f3544128e72.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100e:b080::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:d1:09:5a:be:34:09:b4:7c:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=79621c77-8a5d-4e2f-a29a-c1f4f2c44aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:d7:6e:eb:a7:07:f8:77:c9:0c:90:c4:b2:
                    56:8a:6b:88:f2:03:4d:10:ed:d9:a1:c5:fe:91:f6:
                    a2:23:2e:1a:41:48:38:71:4b:07:54:2d:07:57:30:
                    88:27:c0:56:5b:1d:88:19:20:54:23:62:f0:d2:5d:
                    f2:18:9d:08:b9:04:cc:88:71:ff:57:45:de:24:86:
                    1d:26:96:fe:29:09:31:fd:ae:0b:67:71:61:14:5b:
                    4d:a6:2b:8c:7b:3e:14:66:c3:ca:51:cc:40:79:14:
                    f4:fa:19:ba:6e:28:22:b6:dc:58:9f:a6:43:c5:70:
                    5b:b7:8d:23:91:e5:85:4c:65:77:4c:9c:ea:f0:99:
                    e2:c7:06:50:73:ea:98:b4:90:51:ee:fa:97:f3:c1:
                    f7:2e:b9:0e:80:b7:8d:96:70:aa:35:ca:77:ba:b3:
                    d3:17:3b:90:0a:6d:ef:ef:65:3b:be:33:f7:4b:0e:
                    67:08:cf:9b:07:b2:55:bd:8b:da:be:dc:04:ec:b0:
                    2b:55:ce:a3:14:60:9d:fb:14:7e:e9:4a:1f:d0:59:
                    6b:01:5c:26:0c:cb:c2:2f:43:fa:7e:94:8b:a9:0e:
                    43:a7:5f:0c:9a:52:6e:db:12:f1:33:2a:03:cd:2e:
                    89:5f:b0:75:84:64:74:2c:89:bf:ae:2b:4f:5c:bd:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4F:21:B2:BD:9E:02:C4:EF:17:21:DA:48:D5:E8:8C:F2:52:13:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d7be1ef-153a-3553-9765-0f3544128e72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:92:a1:bd:c8:e3:be:24:ab:af:45:fc:2d:ac:65:dc:b6:08:
         04:16:31:00:77:bd:3a:5b:a0:5a:1c:ae:ba:74:68:07:37:29:
         e8:ef:53:e8:5e:fe:84:bb:2a:5c:36:16:48:2e:9b:a5:ec:20:
         49:50:70:b5:28:79:33:ee:ec:47:d3:13:c2:98:74:95:06:8a:
         51:4b:5a:01:df:a2:93:5a:9e:0d:08:3b:77:16:01:7f:1e:2e:
         4e:68:c1:ab:3c:2d:6f:da:17:f3:8f:27:7d:b9:31:14:05:44:
         3a:70:d5:aa:08:3e:eb:04:15:65:89:78:14:7a:66:49:1e:36:
         23:98:3f:74:04:5d:4b:6e:b3:5a:13:db:64:0c:bb:59:71:14:
         de:55:7a:af:a4:31:4b:d2:70:a6:01:6d:40:6e:a2:34:91:73:
         06:6f:bb:fc:2f:91:77:18:44:cc:bf:bb:05:4b:98:81:6f:bf:
         1c:3a:ec:b6:5b:1e:5c:3e:4d:f1:00:19:01:b5:11:52:4d:dc:
         de:e1:15:9c:d1:23:a3:fc:12:0d:74:e9:df:23:3a:26:14:a8:
         f7:47:16:ab:73:07:96:5b:10:75:77:07:c3:cd:02:53:8d:6a:
         24:f0:1b:cc:c5:7e:49:68:4a:85:d6:5b:c9:ee:68:06:d0:b4:
         cd:d7:34:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikANEJWr40CbR8MiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
Nzk2MjFjNzctOGE1ZC00ZTJmLWEyOWEtYzFmNGYyYzQ0YWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSvXbuunB/h3yQyQxLJWimuI8gNNEO3ZocX+
kfaiIy4aQUg4cUsHVC0HVzCIJ8BWWx2IGSBUI2Lw0l3yGJ0IuQTMiHH/V0XeJIYd
Jpb+KQkx/a4LZ3FhFFtNpiuMez4UZsPKUcxAeRT0+hm6bigittxYn6ZDxXBbt40j
keWFTGV3TJzq8JnixwZQc+qYtJBR7vqX88H3LrkOgLeNlnCqNcp3urPTFzuQCm3v
72U7vjP3Sw5nCM+bB7JVvYvavtwE7LArVc6jFGCd+xR+6Uof0FlrAVwmDMvCL0P6
fpSLqQ5Dp18MmlJu2xLxMyoDzS6JX7B1hGR0LIm/ritPXL1m6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAdPIbK9ngLE7xch2kjV6IzyUhP4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Q3YmUxZWYtMTUzYS0z
NTUzLTk3NjUtMGYzNTQ0MTI4ZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDrCA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALKSob3I474kq69F/C2sZdy2CAQWMQB3vTpboFocrrp0aAc3Kejv
U+he/oS7Klw2Fkgum6XsIElQcLUoeTPu7EfTE8KYdJUGilFLWgHfopNang0IO3cW
AX8eLk5owas8LW/aF/OPJ325MRQFRDpw1aoIPusEFWWJeBR6ZkkeNiOYP3QEXUtu
s1oT22QMu1lxFN5Veq+kMUvScKYBbUBuojSRcwZvu/wvkXcYRMy/uwVLmIFvvxw6
7LZbHlw+TfEAGQG1EVJN3N7hFZzRI6P8Eg106d8jOiYUqPdHFqtzB5ZbEHV3B8PN
AlONaiTwG8zFfkloSoXWW8nuaAbQtM3XNM8=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:06:29 2025 by rpki-client