Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/25b58291-455e-37c7-900e-654b6a637a7d.roa
File:                     25b58291-455e-37c7-900e-654b6a637a7d.roa (raw, json)
Hash identifier:          SbVqG+gXRBv6o0iLvvJG9tiFDeE7y1W/3YVbMf/EtgM=
Subject key identifier:   9B:AC:79:12:DF:06:60:F6:5F:40:5E:76:82:32:CD:59:48:F3:A3:57
Certificate issuer:       /CN=db3a4466-554c-4a7d-9803-eceac12519bb
Certificate serial:       010D0C9F43285849674EF6109EE7CBF4946B8900
Authority key identifier: DF:C1:84:7A:4C:76:6B:D7:EB:4D:50:5D:47:52:BC:DF:54:A4:70:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/25b58291-455e-37c7-900e-654b6a637a7d.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     401065
IP address blocks:        2602:f8ec::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f6:10:9e:e7:cb:f4:94:6b:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db3a4466-554c-4a7d-9803-eceac12519bb
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=4f1aa24f-b18d-4386-9bbf-b4dffae08b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:32:3f:97:28:fc:c7:8f:19:b7:a0:02:c3:7a:
                    95:52:bd:8e:cb:c1:61:57:3e:22:3c:15:5f:87:78:
                    b7:d2:b1:b9:9c:a0:e8:91:6c:2c:50:3e:7a:13:3d:
                    76:6c:66:e9:40:a4:95:8d:b2:ec:ab:36:59:f1:1c:
                    95:db:5c:27:55:9d:55:95:be:c0:e1:28:2f:98:8f:
                    1c:d6:b0:bf:c6:ea:6e:23:ba:35:0e:6f:29:8e:07:
                    88:e8:21:1d:2e:74:db:8c:5d:1d:59:bd:61:b9:bf:
                    d5:dc:13:b1:97:85:f2:91:ff:1a:c7:25:9a:43:95:
                    fb:64:02:fb:6f:3c:b4:0d:69:77:19:04:f3:3c:97:
                    33:98:27:14:a9:31:e1:b3:48:a7:f6:08:1a:34:82:
                    17:74:bc:de:fe:23:e7:fd:ac:22:e8:64:84:67:8c:
                    04:e9:e8:7f:7f:22:ff:c0:b5:aa:4e:b5:4d:2b:03:
                    b9:e6:0d:38:d6:28:a0:2f:f7:5f:8a:a6:24:ac:f0:
                    0c:09:cc:9e:fa:2a:97:56:1c:5f:71:49:24:6a:71:
                    3b:e3:4d:94:f0:36:20:89:66:09:6e:ea:7a:d2:32:
                    f0:40:36:62:80:1a:ef:de:eb:d0:aa:24:4f:16:69:
                    2f:2c:23:1a:fd:40:69:90:44:2c:b6:c5:78:f1:3a:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AC:79:12:DF:06:60:F6:5F:40:5E:76:82:32:CD:59:48:F3:A3:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/25b58291-455e-37c7-900e-654b6a637a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/db3a4466-554c-4a7d-9803-eceac12519bb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:C1:84:7A:4C:76:6B:D7:EB:4D:50:5D:47:52:BC:DF:54:A4:70:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ec::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:ec:60:08:c8:bc:eb:ce:9e:a7:c7:4c:a0:ab:e4:e4:77:
         22:c6:19:42:53:7f:e7:cb:3d:24:5d:94:78:71:b8:63:cb:4f:
         63:ea:57:de:f4:69:6e:22:6f:7d:55:d5:e1:5e:25:44:cf:29:
         6f:f4:14:e5:94:47:a4:44:09:7d:d5:f3:3b:c2:40:8d:c5:f7:
         b1:07:9b:29:57:37:8b:f2:19:0d:87:08:da:27:45:21:a1:ff:
         e5:68:60:38:ee:df:45:27:7b:1b:89:3c:8b:b8:b8:55:86:b4:
         b2:b8:1d:b7:5f:05:94:e5:1a:8f:7b:ff:8e:7a:d2:29:f1:d2:
         57:05:52:eb:46:a9:63:42:e8:43:4a:c8:07:df:b2:a6:0c:ac:
         d6:32:92:d7:0b:03:ff:24:fc:1e:1f:e1:89:8a:d7:06:16:b3:
         34:cc:84:f1:21:fe:bb:70:af:20:b2:4e:f7:fb:14:8d:fd:6c:
         66:24:38:08:61:46:43:5d:70:4c:c1:66:eb:f9:4c:a1:60:25:
         00:c2:9c:85:45:cd:75:7f:31:10:98:61:a2:98:c2:50:da:f4:
         23:19:cc:f0:4d:fb:3f:55:6a:a5:a9:3e:fd:51:b5:61:99:c0:
         2f:ff:75:66:fb:1a:ee:6e:ab:d5:99:4c:43:47:4a:0f:7f:f0:
         21:e2:87:27
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElnTvYQnufL9JRriQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIzYTQ0NjYtNTU0Yy00YTdkLTk4MDMtZWNlYWMxMjUx
OWJiMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk
NGYxYWEyNGYtYjE4ZC00Mzg2LTliYmYtYjRkZmZhZTA4YjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DI/lyj8x48Zt6ACw3qVUr2Oy8FhVz4iPBVf
h3i30rG5nKDokWwsUD56Ez12bGbpQKSVjbLsqzZZ8RyV21wnVZ1Vlb7A4SgvmI8c
1rC/xupuI7o1Dm8pjgeI6CEdLnTbjF0dWb1hub/V3BOxl4Xykf8axyWaQ5X7ZAL7
bzy0DWl3GQTzPJczmCcUqTHhs0in9ggaNIIXdLze/iPn/awi6GSEZ4wE6eh/fyL/
wLWqTrVNKwO55g041iigL/dfiqYkrPAMCcye+iqXVhxfcUkkanE7402U8DYgiWYJ
bup60jLwQDZigBrv3uvQqiRPFmkvLCMa/UBpkEQstsV48Tq3KQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJuseRLfBmD2X0BedoIyzVlI86NXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kYjNh
NDQ2Ni01NTRjLTRhN2QtOTgwMy1lY2VhYzEyNTE5YmIvMjViNTgyOTEtNDU1ZS0z
N2M3LTkwMGUtNjU0YjZhNjM3YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGIzYTQ0NjYtNTU0Yy00YTdkLTk4
MDMtZWNlYWMxMjUxOWJiL2RiM2E0NDY2LTU1NGMtNGE3ZC05ODAzLWVjZWFjMTI1
MTliYi5jcmwwHwYDVR0jBBgwFoAU38GEekx2a9frTVBdR1K831SkcDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kYjNhNDQ2Ni01NTRjLTRhN2QtOTgwMy1lY2Vh
YzEyNTE5YmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL47AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbejsYAjIvOvOnqfHTKCr5OR3IsYZQlN/58s9JF2UeHG4Y8tPY+pX
3vRpbiJvfVXV4V4lRM8pb/QU5ZRHpEQJfdXzO8JAjcX3sQebKVc3i/IZDYcI2idF
IaH/5WhgOO7fRSd7G4k8i7i4VYa0srgdt18FlOUaj3v/jnrSKfHSVwVS60apY0Lo
Q0rIB9+ypgys1jKS1wsD/yT8Hh/hiYrXBhazNMyE8SH+u3CvILJO9/sUjf1sZiQ4
CGFGQ11wTMFm6/lMoWAlAMKchUXNdX8xEJhhopjCUNr0IxnM8E37P1Vqpak+/VG1
YZnAL/91Zvsa7m6r1ZlMQ0dKD3/wIeKHJw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:23 2025 by rpki-client on console.sobornost.net