Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80f4eb03-e250-377e-a59b-edd6e3cf3200.roa
File:                     80f4eb03-e250-377e-a59b-edd6e3cf3200.roa (raw, json)
Hash identifier:          M30HN24x2kadGEvoF/6+/CpQTHhDcVKSwD9oac0cGqA=
Subject key identifier:   F7:61:85:E8:76:25:4D:89:3C:DC:E1:D3:F8:55:A9:B7:34:91:70:20
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849218437AB672152E0B7819100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80f4eb03-e250-377e-a59b-edd6e3cf3200.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:8056::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:37:ab:67:21:52:e0:b7:81:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=0293d6aa-756c-4a00-82f9-5e26e5d7af5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:0e:f9:dc:98:25:35:f7:7d:15:d7:f0:65:
                    fa:18:d9:a6:eb:f2:cf:d6:ce:5c:ff:4b:b3:5a:5a:
                    96:4b:d6:31:d0:bd:55:56:b6:df:8c:db:ec:2c:cb:
                    a1:64:c8:17:de:4a:9a:af:cf:b9:f7:30:c2:21:30:
                    26:da:04:79:36:72:73:59:cc:d9:4f:b9:2f:ce:4e:
                    03:31:0e:7f:b1:6e:c8:b4:e7:b0:dc:7d:95:4a:59:
                    cc:7d:85:ff:89:16:61:a8:12:9d:f7:6f:ca:b8:a0:
                    77:96:b9:f1:7e:99:55:2b:f8:27:3f:6a:a0:a0:99:
                    f0:3f:54:93:88:2d:64:73:d4:36:ec:63:94:cd:64:
                    a2:50:47:86:91:47:dd:6e:c9:af:4f:4f:ef:d4:2e:
                    97:3e:90:ea:2b:02:cd:20:d1:fa:53:e9:6a:70:2d:
                    e4:81:a8:b3:7e:25:9a:e5:24:48:55:6b:1b:aa:77:
                    81:83:11:7e:33:df:f9:98:76:96:b2:63:e6:e1:9e:
                    74:3c:e4:2c:48:9a:e0:1d:ae:6f:09:3b:56:79:3b:
                    89:0a:e8:99:2f:7d:d3:21:4f:49:9c:06:59:06:28:
                    83:b5:49:92:0c:48:d6:f0:c2:fb:d6:5b:31:6a:dc:
                    fd:90:4a:ef:17:49:cc:19:29:0d:8a:fe:4f:72:f2:
                    71:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:61:85:E8:76:25:4D:89:3C:DC:E1:D3:F8:55:A9:B7:34:91:70:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80f4eb03-e250-377e-a59b-edd6e3cf3200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8056::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:33:58:56:7b:5d:7d:7d:63:87:3f:ef:02:83:78:2c:bc:71:
         b3:a6:58:f5:1c:7f:ab:d2:34:c8:73:ea:94:83:67:75:88:76:
         3b:5d:41:da:61:56:50:5a:af:14:93:38:72:a5:45:93:74:07:
         4d:af:af:8f:9e:4c:b0:17:ee:b8:45:af:a7:6e:81:c9:bf:53:
         07:28:ad:cb:27:b4:ed:f1:ae:e6:1a:47:a2:4e:47:9b:3a:52:
         8d:a0:82:35:cb:fa:81:32:d7:4e:96:43:f7:a0:7a:5f:35:ae:
         c0:89:9a:77:ea:5b:38:63:1f:6f:59:4b:71:27:7f:6e:77:92:
         98:55:c9:f1:d7:02:76:3d:c1:f9:c2:09:f9:61:88:90:12:31:
         98:8c:70:b4:ea:12:17:39:f1:07:b9:fc:8a:8a:af:99:3d:07:
         57:37:85:e8:7e:8a:cd:7e:8a:e7:50:77:41:41:58:2d:ae:e6:
         9d:85:07:26:ad:7d:61:54:56:50:17:08:05:d7:90:6a:90:37:
         f0:4c:19:fe:7d:0e:32:be:0d:b3:77:5d:f5:c9:47:15:0c:3b:
         98:44:58:ef:36:59:51:5a:ed:e9:89:4b:4f:32:be:21:39:f3:
         88:bf:03:fc:51:00:80:93:d2:a7:ca:ea:12:0e:f1:21:84:e4:
         63:23:ec:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDerZyFS4LeBkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
MDI5M2Q2YWEtNzU2Yy00YTAwLTgyZjktNWUyNmU1ZDdhZjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNUO+dyYJTX3fRXX8GX6GNmm6/LP1s5c/0uz
WlqWS9Yx0L1VVrbfjNvsLMuhZMgX3kqar8+59zDCITAm2gR5NnJzWczZT7kvzk4D
MQ5/sW7ItOew3H2VSlnMfYX/iRZhqBKd92/KuKB3lrnxfplVK/gnP2qgoJnwP1ST
iC1kc9Q27GOUzWSiUEeGkUfdbsmvT0/v1C6XPpDqKwLNINH6U+lqcC3kgaizfiWa
5SRIVWsbqneBgxF+M9/5mHaWsmPm4Z50POQsSJrgHa5vCTtWeTuJCuiZL33TIU9J
nAZZBiiDtUmSDEjW8ML71lsxatz9kErvF0nMGSkNiv5PcvJxcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPdhheh2JU2JPNzh0/hVqbc0kXAgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODBmNGViMDMtZTI1MC0z
NzdlLWE1OWItZWRkNmUzY2YzMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABMzWFZ7XX19Y4c/7wKDeCy8cbOmWPUcf6vSNMhz6pSDZ3WIdjtd
QdphVlBarxSTOHKlRZN0B02vr4+eTLAX7rhFr6dugcm/UwcorcsntO3xruYaR6JO
R5s6Uo2ggjXL+oEy106WQ/egel81rsCJmnfqWzhjH29ZS3Enf253kphVyfHXAnY9
wfnCCflhiJASMZiMcLTqEhc58Qe5/IqKr5k9B1c3heh+is1+iudQd0FBWC2u5p2F
ByatfWFUVlAXCAXXkGqQN/BMGf59DjK+DbN3XfXJRxUMO5hEWO82WVFa7emJS08y
viE584i/A/xRAICT0qfK6hIO8SGE5GMj7KA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:28 2025 by rpki-client