Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c4283e4-997f-3190-95b0-ae06019916da.roa
File:                     7c4283e4-997f-3190-95b0-ae06019916da.roa (raw, json)
Hash identifier:          /6D6OG16eR5eoGGKItzoacz6qGvU/Nm69f/Jnpdgyrc=
Subject key identifier:   CA:24:23:5D:C4:57:CA:50:08:0C:82:9D:1A:EC:36:ED:B9:0D:55:81
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858487FB5EB5D4AF759F686F58040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c4283e4-997f-3190-95b0-ae06019916da.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     393880
IP address blocks:        2001:470:266::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:eb:5d:4a:f7:59:f6:86:f5:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=93804991-5514-4b14-9905-87dd6f894e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:1b:26:a6:90:14:46:3d:d4:e1:34:73:5d:
                    f3:b7:79:49:22:b3:78:95:80:e3:f7:ed:b8:72:e5:
                    11:45:6b:8f:61:73:f8:71:14:99:b2:53:ec:1b:c7:
                    73:0a:92:5e:28:d9:4e:54:e5:69:7e:59:54:6f:af:
                    e5:05:d3:6e:63:37:ee:98:94:59:36:1f:29:4c:cd:
                    2a:bb:99:e4:c0:75:a6:08:b1:91:ee:21:0d:b8:dd:
                    81:45:cb:97:d0:11:2b:b9:d8:74:d8:80:cb:e7:93:
                    64:1b:55:40:b3:71:33:64:35:ab:4d:dc:c8:4f:be:
                    5a:6e:aa:5e:3d:46:b0:d8:3d:49:a1:34:24:82:20:
                    e9:2d:3a:70:c9:a8:19:c7:f2:cb:d7:e3:ff:63:9a:
                    50:0e:6a:72:83:d0:84:04:45:50:59:e5:82:c2:9a:
                    31:19:d3:57:ae:f5:9a:8d:24:28:65:4b:50:fa:60:
                    37:83:57:8a:85:12:dd:e3:88:f2:3c:3c:fe:ce:46:
                    a2:24:54:d8:df:a8:b5:6b:32:12:9b:0a:6a:5d:f0:
                    32:8b:2f:b9:8f:ad:55:d7:d2:53:27:d0:af:3c:55:
                    9c:22:cc:5a:fb:2b:05:ae:ed:f4:e0:4a:85:98:5e:
                    96:10:1a:89:bf:96:d0:4f:7a:4b:dd:aa:ec:44:c4:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:24:23:5D:C4:57:CA:50:08:0C:82:9D:1A:EC:36:ED:B9:0D:55:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c4283e4-997f-3190-95b0-ae06019916da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:266::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:02:87:ad:0f:7f:3f:87:fc:8d:03:6b:e3:4e:cb:d5:6f:
         ee:ac:cc:d2:f7:46:9d:b5:1f:16:b2:c1:e8:8e:00:d8:92:cc:
         4f:44:ad:4c:c1:11:65:f4:52:17:29:4c:0a:fe:ce:21:01:93:
         f5:dd:fe:31:27:39:e9:d5:e9:0f:02:72:38:fe:7b:37:63:5c:
         d5:c1:54:c0:ef:31:25:75:90:9d:4b:f3:9d:f8:98:d9:fc:5d:
         bf:41:58:b2:bb:61:dd:82:21:8c:93:2e:79:bf:58:51:ef:26:
         80:42:c7:d8:22:b1:5f:c1:69:1f:dd:aa:73:c4:90:29:93:b6:
         df:3c:e0:70:35:a8:6f:ac:50:54:e8:86:b3:ed:1e:eb:ea:ac:
         e9:d7:e2:9b:16:1f:1f:50:45:37:44:9b:18:e1:47:0d:17:64:
         21:95:fa:01:9a:09:b2:6d:9c:1d:7d:ce:21:8b:7b:6d:a9:40:
         8d:72:00:4a:65:4d:ed:44:8b:23:45:aa:92:e8:f1:22:17:e0:
         eb:10:4e:1c:1d:72:16:ec:c2:46:a6:7a:33:f1:0d:14:f1:42:
         fd:5f:95:57:dc:14:5a:a5:c7:c0:da:db:62:05:72:d2:43:44:
         6e:31:96:ea:d8:15:5e:d6:4c:5b:55:2d:1a:da:56:4f:e6:77:
         41:87:02:40
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh/tetdSvdZ9ob1gEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
OTM4MDQ5OTEtNTUxNC00YjE0LTk5MDUtODdkZDZmODk0ZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH4bJqaQFEY91OE0c13zt3lJIrN4lYDj9+24
cuURRWuPYXP4cRSZslPsG8dzCpJeKNlOVOVpfllUb6/lBdNuYzfumJRZNh8pTM0q
u5nkwHWmCLGR7iENuN2BRcuX0BErudh02IDL55NkG1VAs3EzZDWrTdzIT75abqpe
PUaw2D1JoTQkgiDpLTpwyagZx/LL1+P/Y5pQDmpyg9CEBEVQWeWCwpoxGdNXrvWa
jSQoZUtQ+mA3g1eKhRLd44jyPDz+zkaiJFTY36i1azISmwpqXfAyiy+5j61V19JT
J9CvPFWcIsxa+ysFru304EqFmF6WEBqJv5bQT3pL3arsRMQ+PQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMokI13EV8pQCAyCnRrsNu25DVWBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2M0MjgzZTQtOTk3Zi0z
MTkwLTk1YjAtYWUwNjAxOTkxNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGO1AoetD38/h/yNA2vjTsvVb+6szNL3Rp21HxayweiOANiSzE9E
rUzBEWX0UhcpTAr+ziEBk/Xd/jEnOenV6Q8Ccjj+ezdjXNXBVMDvMSV1kJ1L8534
mNn8Xb9BWLK7Yd2CIYyTLnm/WFHvJoBCx9gisV/BaR/dqnPEkCmTtt884HA1qG+s
UFTohrPtHuvqrOnX4psWHx9QRTdEmxjhRw0XZCGV+gGaCbJtnB19ziGLe22pQI1y
AEplTe1EiyNFqpLo8SIX4OsQThwdchbswkamejPxDRTxQv1flVfcFFqlx8Da22IF
ctJDRG4xlurYFV7WTFtVLRraVk/md0GHAkA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:19 2025 by rpki-client