Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa
File:                     a34bb302-49e0-3e41-8a06-b70ec4051c38.roa (raw, json)
Hash identifier:          UBaICk+63cEcrD1TL5F979qlAAE+9JgvEnniweNUxhM=
Subject key identifier:   00:9F:FA:7A:B9:EE:7C:08:EA:D1:1F:02:A2:63:CF:4B:3A:E4:A8:68
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584944693036CF87F1FD7F9724A0
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     13807
IP address blocks:        2604:c80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:30:36:cf:87:f1:fd:7f:97:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=c36dc7d7-7882-44f4-bd87-fc8632245dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dc:64:89:75:ae:3d:8a:01:40:f0:9a:f9:b2:
                    45:6c:58:49:01:b3:3b:d9:cf:ca:22:ff:fe:6c:af:
                    d4:2a:49:fc:16:54:da:7b:25:04:03:1b:a9:54:d2:
                    44:b2:b4:8c:17:da:6f:85:66:a6:2f:34:b6:e8:9f:
                    7a:58:72:b6:5f:9e:4f:4c:c2:db:6e:55:44:08:bc:
                    7b:6c:55:51:1c:b3:57:68:a0:fa:29:6f:6c:0f:97:
                    e3:4f:ff:d7:82:b9:03:1a:46:a3:52:f2:7c:9f:be:
                    9f:ea:0b:5e:70:13:23:9a:2c:80:89:b6:7e:90:87:
                    f0:ba:2f:40:f9:af:08:39:4a:8d:48:e4:e9:43:06:
                    fe:da:66:9f:70:19:2a:23:de:60:96:e3:12:c0:72:
                    12:b5:9e:af:27:05:a1:fb:3a:c0:03:97:7e:b5:99:
                    92:c1:0f:82:a3:05:98:0a:03:d1:10:f2:fb:04:ff:
                    88:d4:2f:37:83:03:8a:44:eb:c2:dd:04:9b:ba:85:
                    d8:2c:0f:69:dc:fc:ba:f4:36:6d:69:19:0f:65:bc:
                    61:81:9a:87:5d:a2:6f:2b:66:0d:4d:b6:2b:d0:6d:
                    e3:13:11:d2:2b:7d:c4:ea:36:50:71:06:9d:4f:c0:
                    56:f3:0e:ee:3d:0d:49:97:1d:07:eb:2d:45:81:ac:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9F:FA:7A:B9:EE:7C:08:EA:D1:1F:02:A2:63:CF:4B:3A:E4:A8:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:00:19:d9:51:9d:31:c5:d8:35:6d:e1:7f:27:b1:20:05:1e:
         54:3a:ac:18:72:a7:bd:a1:12:98:70:0e:d9:1c:cf:29:eb:c2:
         a2:00:44:08:c0:d9:af:6d:a3:03:f8:35:4f:8d:de:62:ad:df:
         ea:5f:71:d4:3d:ff:4d:d3:4f:a9:89:18:22:b0:da:25:12:84:
         17:8f:45:e4:0f:28:01:6f:4a:4b:6a:ba:80:96:c0:c9:b2:c1:
         47:8c:06:39:c7:9a:98:fd:fc:63:e0:1d:c4:68:ec:bb:89:8e:
         37:d9:f6:34:07:5f:e5:56:2a:5e:16:f9:62:93:fa:75:62:3a:
         80:b0:88:84:52:3e:16:b7:98:8f:cf:71:df:43:a0:46:1e:36:
         21:f8:16:6b:5e:7f:05:23:c5:82:4c:b1:3f:24:45:23:82:e0:
         1e:ff:7c:b3:d6:de:83:59:49:e0:d5:e5:79:35:70:63:51:dc:
         93:f1:bd:12:8c:dd:41:99:31:1f:f2:79:32:81:2f:a3:d6:82:
         d5:09:7a:7d:78:3e:3c:27:64:c1:d7:9e:c9:83:b5:10:c9:01:
         49:ca:3d:16:4d:e1:98:8f:71:5e:33:cc:82:db:dd:2e:b9:7f:
         95:e5:fd:bb:ae:59:4b:27:76:45:01:85:28:b0:59:e5:8b:a7:
         2c:ad:23:5b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElEaTA2z4fx/X+XJKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
YzM2ZGM3ZDctNzg4Mi00NGY0LWJkODctZmM4NjMyMjQ1ZGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidxkiXWuPYoBQPCa+bJFbFhJAbM72c/KIv/+
bK/UKkn8FlTaeyUEAxupVNJEsrSMF9pvhWamLzS26J96WHK2X55PTMLbblVECLx7
bFVRHLNXaKD6KW9sD5fjT//XgrkDGkajUvJ8n76f6gtecBMjmiyAibZ+kIfwui9A
+a8IOUqNSOTpQwb+2mafcBkqI95gluMSwHIStZ6vJwWh+zrAA5d+tZmSwQ+CowWY
CgPREPL7BP+I1C83gwOKROvC3QSbuoXYLA9p3Py69DZtaRkPZbxhgZqHXaJvK2YN
TbYr0G3jExHSK33E6jZQcQadT8BW8w7uPQ1Jlx0H6y1FgazWbwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFACf+nq57nwI6tEfAqJjz0s65KhoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYTM0YmIzMDItNDllMC0z
ZTQxLThhMDYtYjcwZWM0MDUxYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQMgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC7ABnZUZ0xxdg1beF/J7EgBR5UOqwYcqe9oRKYcA7ZHM8p68KiAEQI
wNmvbaMD+DVPjd5ird/qX3HUPf9N00+piRgisNolEoQXj0XkDygBb0pLarqAlsDJ
ssFHjAY5x5qY/fxj4B3EaOy7iY432fY0B1/lVipeFvlik/p1YjqAsIiEUj4Wt5iP
z3HfQ6BGHjYh+BZrXn8FI8WCTLE/JEUjguAe/3yz1t6DWUng1eV5NXBjUdyT8b0S
jN1BmTEf8nkygS+j1oLVCXp9eD48J2TB157Jg7UQyQFJyj0WTeGYj3FeM8yC290u
uX+V5f27rllLJ3ZFAYUosFnli6csrSNb
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:50 2025 by rpki-client