Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/6246498c-93f9-3ea9-a731-d9d089253344.roa
File:                     6246498c-93f9-3ea9-a731-d9d089253344.roa (raw, json)
Hash identifier:          xlfoeyHKlApGTKL/XllhmS8UUyF+ct21CrRk5Ng+MfY=
Subject key identifier:   BE:B4:4C:D0:73:50:6B:90:05:62:A4:0B:E5:06:2E:31:94:75:41:9C
Certificate issuer:       /CN=10f2956f-ded7-4edb-b293-ea6f94fbf58b
Certificate serial:       010D0C9F4328584976A9962D54FC564F93EE1F00
Authority key identifier: F9:14:EF:F9:4B:E3:88:06:AB:0A:CD:4E:05:E4:3B:9D:C1:DD:46:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/6246498c-93f9-3ea9-a731-d9d089253344.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     0
IP address blocks:        2607:1780:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:96:2d:54:fc:56:4f:93:ee:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f2956f-ded7-4edb-b293-ea6f94fbf58b
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=661fe23b-ebdf-4db5-9ec0-c989c7371e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:ba:42:0f:13:b9:5e:73:1a:d6:eb:af:3c:
                    fb:4b:57:5f:ec:33:67:6e:bc:6e:3b:1e:d4:cc:e8:
                    4b:48:28:bc:0b:8f:30:d8:81:fe:d5:2b:d1:7b:d2:
                    1f:0a:96:f1:e1:dd:da:61:23:e6:93:7d:21:a2:ae:
                    dd:73:28:bf:53:d8:7b:d1:4e:6c:09:0b:ba:bc:15:
                    2c:22:1e:db:4a:0c:06:c7:5b:08:27:2c:03:c2:02:
                    01:8e:0a:74:a9:04:27:d7:a9:51:ce:f9:19:e5:57:
                    51:a2:3b:18:c7:98:9a:62:8e:7a:e3:96:b1:67:89:
                    c9:1c:a4:cb:c3:f3:6e:f8:4c:da:94:fc:ac:ec:2b:
                    43:af:8e:70:22:ba:4a:7d:d4:f0:4a:83:91:cd:94:
                    31:16:5e:69:61:de:28:47:fd:9b:f8:16:22:5a:d1:
                    33:fe:3d:97:0e:22:25:53:4d:ef:23:96:f7:90:ca:
                    de:8c:4e:7e:57:99:46:4c:33:fe:bb:5a:2b:3a:54:
                    2e:49:2b:f6:5c:1a:1f:52:45:67:85:c1:46:d8:c3:
                    0a:4f:da:d6:b6:78:1e:58:b0:ef:b0:c3:65:85:d1:
                    ff:b3:d5:1d:ab:b6:59:ed:93:8a:1c:f7:57:fc:9e:
                    0a:25:5b:88:0d:cc:17:77:a2:9c:83:ae:7d:40:f8:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B4:4C:D0:73:50:6B:90:05:62:A4:0B:E5:06:2E:31:94:75:41:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/6246498c-93f9-3ea9-a731-d9d089253344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/10f2956f-ded7-4edb-b293-ea6f94fbf58b.crl

            X509v3 Authority Key Identifier:
                keyid:F9:14:EF:F9:4B:E3:88:06:AB:0A:CD:4E:05:E4:3B:9D:C1:DD:46:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1780:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2b:97:8b:d1:64:d1:11:30:f0:fa:ee:7a:d2:bc:99:fe:9c:
         8a:8b:1b:71:7b:06:c0:08:ef:b3:5a:ec:08:2b:83:48:1f:70:
         8b:f1:ca:e9:72:d4:50:80:31:e9:fc:81:20:a6:18:f7:81:af:
         48:e8:e0:da:72:0a:32:8b:b0:54:77:5b:bb:eb:1a:8e:84:a8:
         2d:1c:a7:1b:c0:bd:44:f5:b0:4f:01:19:8e:b4:bd:33:f3:28:
         31:aa:c8:b7:75:1a:10:5b:47:4f:64:e6:3e:4a:80:6b:5a:dd:
         6e:2c:21:81:67:0a:47:f6:0c:10:ff:60:ec:13:6a:c5:13:08:
         53:c0:df:bc:1e:64:1b:6a:f0:d2:32:da:82:e0:a7:33:b8:cc:
         9c:9f:5a:73:2f:05:f7:f0:97:10:f8:96:48:f5:b8:e0:6b:f5:
         18:e3:cb:27:04:2e:6c:e0:e5:2f:2d:88:3b:5e:6c:9a:cf:51:
         97:1f:11:23:5a:ac:87:f5:36:ee:5e:54:16:60:ef:50:66:b6:
         ca:20:6c:fe:93:3c:d2:e6:63:c5:a6:c1:29:f2:c7:78:7f:7f:
         b7:d0:6e:c0:c0:43:9a:cf:4a:10:bc:1b:94:99:4a:9b:3b:b5:
         63:f3:4d:12:33:c9:86:5c:8e:35:c2:72:41:ff:dd:9f:30:98:
         5c:ce:42:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2qZYtVPxWT5PuHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTBmMjk1NmYtZGVkNy00ZWRiLWIyOTMtZWE2Zjk0ZmJm
NThiMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk
NjYxZmUyM2ItZWJkZi00ZGI1LTllYzAtYzk4OWM3MzcxZTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZO6Qg8TuV5zGtbrrzz7S1df7DNnbrxuOx7U
zOhLSCi8C48w2IH+1SvRe9IfCpbx4d3aYSPmk30hoq7dcyi/U9h70U5sCQu6vBUs
Ih7bSgwGx1sIJywDwgIBjgp0qQQn16lRzvkZ5VdRojsYx5iaYo5645axZ4nJHKTL
w/Nu+EzalPys7CtDr45wIrpKfdTwSoORzZQxFl5pYd4oR/2b+BYiWtEz/j2XDiIl
U03vI5b3kMrejE5+V5lGTDP+u1orOlQuSSv2XBofUkVnhcFG2MMKT9rWtngeWLDv
sMNlhdH/s9Udq7ZZ7ZOKHPdX/J4KJVuIDcwXd6Kcg659QPjDHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL60TNBzUGuQBWKkC+UGLjGUdUGcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMGYy
OTU2Zi1kZWQ3LTRlZGItYjI5My1lYTZmOTRmYmY1OGIvNjI0NjQ5OGMtOTNmOS0z
ZWE5LWE3MzEtZDlkMDg5MjUzMzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTBmMjk1NmYtZGVkNy00ZWRiLWIy
OTMtZWE2Zjk0ZmJmNThiLzEwZjI5NTZmLWRlZDctNGVkYi1iMjkzLWVhNmY5NGZi
ZjU4Yi5jcmwwHwYDVR0jBBgwFoAU+RTv+UvjiAarCs1OBeQ7ncHdRiowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMGYyOTU2Zi1kZWQ3LTRlZGItYjI5My1lYTZm
OTRmYmY1OGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcXgIAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFsrl4vRZNERMPD67nrSvJn+nIqLG3F7BsAI77Na7Agrg0gfcIvx
yuly1FCAMen8gSCmGPeBr0jo4NpyCjKLsFR3W7vrGo6EqC0cpxvAvUT1sE8BGY60
vTPzKDGqyLd1GhBbR09k5j5KgGta3W4sIYFnCkf2DBD/YOwTasUTCFPA37weZBtq
8NIy2oLgpzO4zJyfWnMvBffwlxD4lkj1uOBr9RjjyycELmzg5S8tiDtebJrPUZcf
ESNarIf1Nu5eVBZg71BmtsogbP6TPNLmY8WmwSnyx3h/f7fQbsDAQ5rPShC8G5SZ
Sps7tWPzTRIzyYZcjjXCckH/3Z8wmFzOQsY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net