Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
File:                     7472e233-c3ae-37b8-a8be-ec2b234930bb.roa (raw, json)
Hash identifier:          MNbPTMgFJ+ILzMnjZNbl7QsolQxpR7U4O0LGL4KHqo8=
Subject key identifier:   31:D6:D5:93:CC:29:40:CD:64:64:C1:9C:04:41:49:62:59:CF:22:5F
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584886B0818DA0A6C9DE53E80500
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     46450
IP address blocks:        2606:3580::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:81:8d:a0:a6:c9:de:53:e8:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=2ac5e155-644a-4728-9543-828206c95140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:fb:a9:77:6c:a2:cc:b9:59:86:9d:1c:dd:
                    ad:8d:c1:97:da:c0:0d:d7:94:52:c0:56:48:a3:24:
                    d6:b0:c1:29:db:b6:2b:b7:d9:34:11:67:9f:27:9e:
                    0f:bc:b1:10:bf:90:a9:52:85:1a:85:2d:e1:cf:cc:
                    7f:14:f5:30:f6:96:8a:4d:ce:55:92:29:36:38:e3:
                    bb:d8:bc:31:27:91:b7:96:51:f2:aa:53:d6:1c:1d:
                    de:4f:53:b7:28:56:52:1f:94:58:d0:0c:9a:6b:91:
                    cf:66:37:a6:cd:78:26:4d:b5:b4:a9:70:a8:66:3c:
                    5b:94:eb:33:a9:73:60:b5:31:74:2a:03:d9:29:84:
                    ba:4f:38:01:2d:34:5b:f3:45:d0:ba:bc:3b:d3:0d:
                    d1:07:2e:48:4b:c2:bc:4a:9f:36:60:c5:26:25:a3:
                    b9:e6:76:dd:2c:25:36:14:1d:6c:04:48:4b:6b:b9:
                    ce:25:a1:2c:52:f9:8c:2d:14:0b:64:2e:5c:42:59:
                    a3:20:2e:73:5b:40:47:10:79:d5:e9:b3:58:5f:b5:
                    53:4e:6b:ff:0d:b8:d7:0d:c8:ac:7a:95:cb:ed:8f:
                    8a:49:46:5c:b1:89:bf:f8:5e:e8:d1:2c:bd:4e:d8:
                    92:aa:8b:bc:e7:b6:87:ef:2a:39:ab:10:39:0f:27:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D6:D5:93:CC:29:40:CD:64:64:C1:9C:04:41:49:62:59:CF:22:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:6e:a9:7c:af:3c:74:c5:bf:f2:83:14:ae:0b:4a:39:2e:6b:
         b7:7a:e6:f9:93:72:7c:75:db:d8:3e:82:22:8a:cf:c9:74:cd:
         2d:aa:0b:7a:63:2a:c6:1e:90:93:9d:34:66:2e:e2:d6:61:be:
         33:6e:28:37:a0:9b:b8:36:00:22:d7:f2:d0:b0:9a:da:6f:e7:
         4a:03:01:bf:ef:0c:7f:d7:54:cb:e9:8b:8a:4f:67:76:f6:5f:
         14:33:5f:52:93:c8:46:51:bd:f3:53:81:28:d0:88:4f:e0:2d:
         7b:74:ee:86:38:f5:1a:d0:c5:05:44:61:50:d7:b0:26:de:fc:
         31:4e:05:ca:3e:b3:8f:c6:1e:41:c3:d1:fe:97:19:25:f5:5d:
         13:cc:b8:1f:d0:9d:b5:8f:7f:2b:ad:37:a6:82:b4:27:3d:d7:
         67:da:09:46:dc:f3:e7:28:50:2f:47:40:00:e7:a2:20:0a:72:
         a5:7f:58:78:4d:f3:94:93:bd:72:61:55:87:d4:99:f6:a3:65:
         6f:bf:88:77:c8:eb:c6:47:43:d1:2a:c8:50:1c:ee:18:b2:68:
         24:aa:0e:3a:12:e5:19:75:b6:34:33:f1:70:dc:39:c2:cb:4a:
         5c:d8:fb:44:6e:a3:6a:f5:ff:3b:c0:f3:36:cf:99:98:dd:0c:
         b5:59:cd:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiGsIGNoKbJ3lPoBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5
ZGMyMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk
MmFjNWUxNTUtNjQ0YS00NzI4LTk1NDMtODI4MjA2Yzk1MTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5H7qXdsosy5WYadHN2tjcGX2sAN15RSwFZI
oyTWsMEp27Yrt9k0EWefJ54PvLEQv5CpUoUahS3hz8x/FPUw9paKTc5Vkik2OOO7
2LwxJ5G3llHyqlPWHB3eT1O3KFZSH5RY0Ayaa5HPZjemzXgmTbW0qXCoZjxblOsz
qXNgtTF0KgPZKYS6TzgBLTRb80XQurw70w3RBy5IS8K8Sp82YMUmJaO55nbdLCU2
FB1sBEhLa7nOJaEsUvmMLRQLZC5cQlmjIC5zW0BHEHnV6bNYX7VTTmv/DbjXDcis
epXL7Y+KSUZcsYm/+F7o0Sy9TtiSqou857aH7yo5qxA5DydQRwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDHW1ZPMKUDNZGTBnARBSWJZzyJfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw
MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvNzQ3MmUyMzMtYzNhZS0z
N2I4LWE4YmUtZWMyYjIzNDkzMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3
YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0
OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh
ZWY1NDlkYzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY1gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCvbql8rzx0xb/ygxSuC0o5Lmu3eub5k3J8ddvYPoIiis/JdM0tqgt6
YyrGHpCTnTRmLuLWYb4zbig3oJu4NgAi1/LQsJrab+dKAwG/7wx/11TL6YuKT2d2
9l8UM19Sk8hGUb3zU4Eo0IhP4C17dO6GOPUa0MUFRGFQ17Am3vwxTgXKPrOPxh5B
w9H+lxkl9V0TzLgf0J21j38rrTemgrQnPddn2glG3PPnKFAvR0AA56IgCnKlf1h4
TfOUk71yYVWH1Jn2o2Vvv4h3yOvGR0PRKshQHO4Ysmgkqg46EuUZdbY0M/Fw3DnC
y0pc2PtEbqNq9f87wPM2z5mY3Qy1Wc3f
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:02 2025 by rpki-client