Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16/f5ab775f-6f5b-3b03-9c35-1aaaae613603.roa
File:                     f5ab775f-6f5b-3b03-9c35-1aaaae613603.roa (raw, json)
Hash identifier:          JZA7WELpCGHP9Z31Zzn87/fuIJ38OD+hcq9Jrdib7XI=
Subject key identifier:   3A:F0:FA:1D:CA:73:D7:55:EB:92:D2:F8:0E:8E:AC:0E:75:8F:68:E7
Certificate issuer:       /CN=0abf034d-0709-423c-9216-fae257040e16
Certificate serial:       010D0C9F432858495C2439379C418006D256B280
Authority key identifier: 83:CA:38:A4:54:72:74:FE:82:BC:A6:92:C9:F5:5D:0A:F9:CB:B1:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16/f5ab775f-6f5b-3b03-9c35-1aaaae613603.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     4385
IP address blocks:        2620:8d:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:39:37:9c:41:80:06:d2:56:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abf034d-0709-423c-9216-fae257040e16
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=bd4088f2-cc00-45ad-857d-ba0d31ff1910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:c3:07:9b:e9:54:a4:3c:b4:ea:56:45:12:
                    61:3b:a9:2c:01:23:7a:f5:ff:95:62:23:b2:0c:4f:
                    74:fd:da:2f:47:c7:9d:35:f0:24:76:d5:d4:3f:0c:
                    d1:d0:92:79:13:a8:27:09:07:ed:a9:fd:8c:cd:c8:
                    70:f0:69:d8:cd:01:99:a3:ea:74:3b:92:95:ab:29:
                    6c:1a:91:59:89:01:34:48:e2:6c:bd:3b:32:9a:17:
                    bf:6f:5f:aa:b9:59:e1:73:10:b7:bd:cc:60:7d:dc:
                    41:e4:f8:4a:bc:42:10:a7:19:b2:81:41:94:7d:3e:
                    e4:7e:98:4e:47:44:dc:73:9c:e2:1d:8d:a6:4d:65:
                    ad:18:08:2b:f4:94:05:f2:71:a9:c4:e0:8a:90:8b:
                    40:56:28:99:da:90:4f:34:57:59:98:8e:f0:50:a9:
                    b1:4b:33:a6:7b:0e:57:4d:e5:a4:5d:30:91:87:4c:
                    f9:01:b8:39:73:ee:4f:dc:37:94:92:59:60:b7:2f:
                    6c:b4:a0:2c:37:0d:70:37:dd:5e:12:a1:39:82:be:
                    fc:09:03:f8:d4:f9:4a:e2:be:40:23:aa:56:b7:83:
                    b4:71:02:1d:44:08:d5:c4:45:83:14:cb:94:6d:bd:
                    50:05:52:e2:4b:cb:6c:20:30:4d:b2:24:6f:23:42:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F0:FA:1D:CA:73:D7:55:EB:92:D2:F8:0E:8E:AC:0E:75:8F:68:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16/f5ab775f-6f5b-3b03-9c35-1aaaae613603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16/0abf034d-0709-423c-9216-fae257040e16.crl

            X509v3 Authority Key Identifier:
                keyid:83:CA:38:A4:54:72:74:FE:82:BC:A6:92:C9:F5:5D:0A:F9:CB:B1:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8d:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:25:d3:e1:93:c4:28:a2:e3:48:79:e6:91:1e:75:3c:6a:
         04:27:c9:22:d3:1b:2d:b9:36:fa:d0:36:70:12:b0:b0:c5:61:
         4a:97:12:f6:55:b3:3e:ed:6c:9d:a4:a8:03:8a:01:f7:8a:4d:
         8f:00:74:9d:11:db:aa:64:7a:25:0f:7c:ce:73:a7:79:ab:79:
         c9:6b:c1:78:37:8f:04:64:b8:ce:90:80:1b:5b:92:ba:97:97:
         47:56:84:5a:77:2b:3f:98:9a:2b:f9:3d:c1:eb:48:8d:62:27:
         b9:7f:4c:69:f9:82:59:90:36:56:b1:21:87:1f:7a:ef:d4:c2:
         f6:2d:89:c1:f9:f7:5a:78:6e:83:3b:8c:74:a7:08:e6:93:2f:
         9c:f9:0a:18:b9:fc:f5:11:aa:2f:95:af:74:15:14:61:1a:15:
         89:ab:d5:bc:05:10:ac:dc:73:b9:ea:26:a8:0a:87:5e:67:be:
         9b:80:4b:ef:65:12:0e:6c:bc:57:35:4a:90:bd:46:67:da:47:
         6c:fa:f4:27:f5:8a:0f:02:d4:04:9c:85:c4:18:92:6f:e3:6e:
         7c:6f:8b:3e:ef:b0:51:ed:84:d2:1b:bf:58:0e:b7:a7:18:5b:
         63:1b:9a:0b:bb:3c:4c:59:61:a9:f4:fb:08:9c:27:39:0e:f0:
         3a:dd:a5:22
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJDk3nEGABtJWsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiZjAzNGQtMDcwOS00MjNjLTkyMTYtZmFlMjU3MDQw
ZTE2MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
YmQ0MDg4ZjItY2MwMC00NWFkLTg1N2QtYmEwZDMxZmYxOTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryjDB5vpVKQ8tOpWRRJhO6ksASN69f+VYiOy
DE90/dovR8edNfAkdtXUPwzR0JJ5E6gnCQftqf2Mzchw8GnYzQGZo+p0O5KVqyls
GpFZiQE0SOJsvTsymhe/b1+quVnhcxC3vcxgfdxB5PhKvEIQpxmygUGUfT7kfphO
R0Tcc5ziHY2mTWWtGAgr9JQF8nGpxOCKkItAViiZ2pBPNFdZmI7wUKmxSzOmew5X
TeWkXTCRh0z5Abg5c+5P3DeUkllgty9stKAsNw1wN91eEqE5gr78CQP41PlK4r5A
I6pWt4O0cQIdRAjVxEWDFMuUbb1QBVLiS8tsIDBNsiRvI0JcuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDrw+h3Kc9dV65LS+A6OrA51j2jnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYWJm
MDM0ZC0wNzA5LTQyM2MtOTIxNi1mYWUyNTcwNDBlMTYvZjVhYjc3NWYtNmY1Yi0z
YjAzLTljMzUtMWFhYWFlNjEzNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGFiZjAzNGQtMDcwOS00MjNjLTky
MTYtZmFlMjU3MDQwZTE2LzBhYmYwMzRkLTA3MDktNDIzYy05MjE2LWZhZTI1NzA0
MGUxNi5jcmwwHwYDVR0jBBgwFoAUg8o4pFRydP6CvKaSyfVdCvnLsSkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYWJmMDM0ZC0wNzA5LTQyM2MtOTIxNi1mYWUy
NTcwNDBlMTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAjYAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHFsJdPhk8QoouNIeeaRHnU8agQnySLTGy25NvrQNnASsLDFYUqX
EvZVsz7tbJ2kqAOKAfeKTY8AdJ0R26pkeiUPfM5zp3mreclrwXg3jwRkuM6QgBtb
krqXl0dWhFp3Kz+Ymiv5PcHrSI1iJ7l/TGn5glmQNlaxIYcfeu/UwvYticH591p4
boM7jHSnCOaTL5z5Chi5/PURqi+Vr3QVFGEaFYmr1bwFEKzcc7nqJqgKh15nvpuA
S+9lEg5svFc1SpC9RmfaR2z69Cf1ig8C1ASchcQYkm/jbnxviz7vsFHthNIbv1gO
t6cYW2Mbmgu7PExZYan0+wicJzkO8DrdpSI=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net