Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/a876a9ef-80a8-3c52-ada8-01542b4934ea.roa
File:                     a876a9ef-80a8-3c52-ada8-01542b4934ea.roa (raw, json)
Hash identifier:          GQ+3vn/e1AF4h05eey15mHUd5yscsrgUsgyn0C1zCQ0=
Subject key identifier:   5D:CA:A7:67:C2:1B:2B:96:73:A1:6A:68:08:47:82:83:E1:33:95:45
Certificate issuer:       /CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Certificate serial:       010D0C9F432858499AF482E7AD2F41A8F9E67A40
Authority key identifier: 3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/a876a9ef-80a8-3c52-ada8-01542b4934ea.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     150698
IP address blocks:        2602:f9ca:301::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:82:e7:ad:2f:41:a8:f9:e6:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc547da-42a0-43ba-8d2f-21375737b95b
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=8cf124ac-b15c-4424-9560-85e6322cbf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9d:8d:0f:4d:fe:f2:1c:8e:79:99:03:c2:ef:
                    ca:54:21:4a:cf:c3:ff:b1:0f:75:fc:c1:75:33:32:
                    46:b8:04:65:cf:8a:da:f9:8c:ba:b8:63:86:82:3f:
                    42:be:1d:d5:0b:89:ff:2c:c8:b6:98:35:d8:7c:d5:
                    2c:f0:16:4a:52:59:1d:e6:3e:f3:20:3f:2e:3e:e0:
                    2a:21:82:25:8b:01:65:16:ef:57:3c:56:c4:cd:60:
                    b2:a5:b4:a2:7e:95:41:da:14:19:c1:ca:80:eb:ae:
                    d3:6a:67:b5:ae:7d:ec:e9:c5:43:0f:32:bc:d8:e9:
                    7b:36:d2:35:8f:cc:82:56:f1:18:50:62:36:8e:7a:
                    3b:53:c1:5f:0d:96:6f:78:e2:35:0e:40:66:a7:11:
                    47:77:54:cb:61:69:45:3d:fb:fd:37:d6:29:19:1b:
                    5d:c4:0f:e1:6b:0a:e3:23:c1:a4:69:8b:c4:0f:0b:
                    d2:be:9c:ee:6e:6e:c8:0d:1e:77:f7:46:9e:19:d1:
                    90:d4:c5:fd:80:2d:d1:39:cf:77:4a:7d:b9:cf:47:
                    e6:f1:76:ab:65:78:11:2d:e4:80:16:44:fd:b2:92:
                    0d:18:e4:7e:9a:98:d2:2c:33:57:00:bf:1e:0b:5c:
                    df:09:58:5a:a8:2e:ed:65:21:1b:78:17:e2:e3:a3:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CA:A7:67:C2:1B:2B:96:73:A1:6A:68:08:47:82:83:E1:33:95:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/a876a9ef-80a8-3c52-ada8-01542b4934ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ca:301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:da:f8:5b:9e:91:80:26:93:70:e1:d2:83:7b:ee:9d:8a:
         db:6d:87:3e:ce:30:49:0b:5d:66:f5:40:0b:d1:fc:16:e3:6f:
         24:8f:16:b2:1c:62:be:1d:1c:de:95:4f:9a:db:6d:25:87:8b:
         94:ca:e5:f4:31:c9:2e:83:b7:8d:7c:17:53:64:88:0f:65:2d:
         cd:19:8f:55:5f:6a:a0:fb:38:7a:dd:ec:2a:f9:b3:9c:d1:0f:
         c1:c0:0b:9e:56:13:2a:42:50:cf:dc:31:0a:bc:2f:69:64:1a:
         8b:6d:a2:e8:33:78:36:d1:23:4a:cb:a5:ca:b0:06:87:eb:86:
         e0:d3:22:7b:2b:7b:e5:92:b5:c0:6f:aa:1f:62:90:d6:7d:ef:
         71:57:e8:03:ab:21:15:54:20:04:a6:b2:35:40:bc:66:ff:e2:
         1a:95:31:f3:10:99:f7:32:91:9a:ae:5a:4d:97:a1:89:23:b1:
         e7:1b:08:d2:25:c7:bd:e3:cd:f2:2f:cf:77:81:c5:e2:4f:5d:
         bf:26:dc:06:82:9f:f1:fc:11:1f:f6:02:eb:c7:0a:30:35:45:
         8c:19:98:ae:0c:2f:d7:bb:e2:99:66:38:0f:fa:77:38:b7:d8:
         52:7f:bb:87:2d:bf:dd:29:48:9c:ee:51:72:d5:9f:b5:c0:24:
         d7:da:69:35
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEma9ILnrS9BqPnmekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRjNTQ3ZGEtNDJhMC00M2JhLThkMmYtMjEzNzU3Mzdi
OTViMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk
OGNmMTI0YWMtYjE1Yy00NDI0LTk1NjAtODVlNjMyMmNiZjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ2ND03+8hyOeZkDwu/KVCFKz8P/sQ91/MF1
MzJGuARlz4ra+Yy6uGOGgj9Cvh3VC4n/LMi2mDXYfNUs8BZKUlkd5j7zID8uPuAq
IYIliwFlFu9XPFbEzWCypbSifpVB2hQZwcqA667Tame1rn3s6cVDDzK82Ol7NtI1
j8yCVvEYUGI2jno7U8FfDZZveOI1DkBmpxFHd1TLYWlFPfv9N9YpGRtdxA/hawrj
I8GkaYvEDwvSvpzubm7IDR5390aeGdGQ1MX9gC3ROc93Sn25z0fm8XarZXgRLeSA
FkT9spINGOR+mpjSLDNXAL8eC1zfCVhaqC7tZSEbeBfi46ORKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF3Kp2fCGyuWc6FqaAhHgoPhM5VFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZGM1
NDdkYS00MmEwLTQzYmEtOGQyZi0yMTM3NTczN2I5NWIvYTg3NmE5ZWYtODBhOC0z
YzUyLWFkYTgtMDE1NDJiNDkzNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWRjNTQ3ZGEtNDJhMC00M2JhLThk
MmYtMjEzNzU3MzdiOTViLzFkYzU0N2RhLTQyYTAtNDNiYS04ZDJmLTIxMzc1NzM3
Yjk1Yi5jcmwwHwYDVR0jBBgwFoAUPdFWJFGAdUkHGqPBOZsBTwTRz/EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZGM1NDdkYS00MmEwLTQzYmEtOGQyZi0yMTM3
NTczN2I5NWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ygMB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFfc2vhbnpGAJpNw4dKDe+6dittthz7OMEkLXWb1QAvR/BbjbySP
FrIcYr4dHN6VT5rbbSWHi5TK5fQxyS6Dt418F1NkiA9lLc0Zj1VfaqD7OHrd7Cr5
s5zRD8HAC55WEypCUM/cMQq8L2lkGottougzeDbRI0rLpcqwBofrhuDTInsre+WS
tcBvqh9ikNZ973FX6AOrIRVUIASmsjVAvGb/4hqVMfMQmfcykZquWk2XoYkjsecb
CNIlx73jzfIvz3eBxeJPXb8m3AaCn/H8ER/2AuvHCjA1RYwZmK4ML9e74plmOA/6
dzi32FJ/u4ctv90pSJzuUXLVn7XAJNfaaTU=
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:41:28 2025 by rpki-client