Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa
File:                     4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa (raw, json)
Hash identifier:          rwckfkAdHMIt6NA3uQ0U3rOCMpHqgTxwmOJXtikW290=
Subject key identifier:   DB:9E:95:24:87:49:C3:47:D0:7B:3F:3C:03:2F:F5:75:6E:5A:7A:56
Certificate issuer:       /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Certificate serial:       010D0C9F4328584976A99607EA47637F862FE6B0
Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     46733
IP address blocks:        2602:f9f4:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:96:07:ea:47:63:7f:86:2f:e6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=bf416202-fa4c-426d-85cd-dce4f627a735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:71:db:32:f1:99:6d:78:29:06:c9:2e:75:
                    c3:e3:e5:5d:c9:9d:5c:37:12:95:e5:bc:94:d1:f9:
                    86:c8:3a:05:6e:ed:5e:9f:cf:c2:45:99:4c:c8:04:
                    19:ff:6f:28:4a:d4:96:77:30:b0:86:cf:c3:58:78:
                    63:02:c0:5d:22:66:1f:f4:52:24:47:df:3f:dd:45:
                    80:b4:e5:64:9c:e1:63:a6:b3:e4:37:f0:f4:a4:78:
                    8a:5a:51:3a:82:f3:67:19:eb:6b:80:bd:11:1c:8b:
                    c1:38:3c:0a:f9:f5:ce:ad:a6:ed:40:6a:29:e3:b6:
                    e1:bb:21:e9:b0:96:f9:0c:41:e3:b8:23:4b:53:46:
                    34:2a:7c:a0:3a:0c:6c:14:7c:46:69:9b:17:64:3a:
                    9d:89:b9:16:49:89:b2:39:56:38:6d:7e:da:4f:d8:
                    53:ed:28:c7:ca:98:60:04:78:13:75:d8:2c:64:08:
                    7f:3a:a3:28:a6:cd:bc:d4:69:1a:e6:92:78:53:9f:
                    2e:ad:49:b4:db:08:fa:d1:78:6e:0e:c7:77:b0:61:
                    62:44:9d:c1:48:fd:98:ad:cb:98:05:0f:80:31:25:
                    c0:b4:bf:e3:44:4b:25:eb:3d:0d:b9:28:f8:9d:80:
                    26:37:c1:93:13:5c:75:c0:d6:c4:a7:81:65:85:5c:
                    59:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9E:95:24:87:49:C3:47:D0:7B:3F:3C:03:2F:F5:75:6E:5A:7A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl

            X509v3 Authority Key Identifier:
                keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f4:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:b4:ce:f2:ed:2c:84:0a:81:3f:14:55:a5:71:1e:c4:0c:
         5d:20:94:8a:37:d3:d4:0a:ae:86:20:51:46:73:aa:2f:a5:71:
         ae:ae:22:f7:3a:87:55:ec:70:7d:4f:7c:cf:b8:9d:54:fc:5e:
         09:80:a3:60:1b:45:f1:67:f3:12:e4:92:02:6c:76:b7:f3:f1:
         ff:2c:50:94:7d:e5:35:b2:f5:04:1a:e1:30:db:88:6b:31:c2:
         69:2a:80:4c:98:c7:26:50:94:df:5a:f2:91:cd:d3:07:48:24:
         81:47:50:ec:42:d1:79:80:51:fb:d3:3f:2b:03:f5:77:ed:73:
         67:7d:53:d6:e4:a3:c8:de:a5:91:aa:1c:fe:ca:98:ea:d2:08:
         76:81:a8:3d:2b:ad:f1:61:b2:c0:71:f0:8d:1c:ed:a1:46:b0:
         ff:a3:60:64:e9:80:05:ed:e7:61:b3:60:4d:a0:7f:15:c5:dd:
         d7:60:99:88:9f:3e:da:d5:69:1c:7f:77:21:27:38:d9:3f:db:
         de:00:1f:cc:9c:44:ce:e0:8e:ee:4c:c5:50:8b:0c:07:56:fc:
         32:6e:39:33:95:51:2b:72:f2:57:55:90:f4:19:db:da:54:04:
         a7:c8:19:3b:83:7d:a8:ff:30:14:13:04:5e:9b:da:a7:c3:d4:
         6e:f6:3f:6a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2qZYH6kdjf4Yv5rAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy
N2Y5MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk
YmY0MTYyMDItZmE0Yy00MjZkLTg1Y2QtZGNlNGY2MjdhNzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDNx2zLxmW14KQbJLnXD4+VdyZ1cNxKV5byU
0fmGyDoFbu1en8/CRZlMyAQZ/28oStSWdzCwhs/DWHhjAsBdImYf9FIkR98/3UWA
tOVknOFjprPkN/D0pHiKWlE6gvNnGetrgL0RHIvBODwK+fXOrabtQGop47bhuyHp
sJb5DEHjuCNLU0Y0KnygOgxsFHxGaZsXZDqdibkWSYmyOVY4bX7aT9hT7SjHyphg
BHgTddgsZAh/OqMops281Gka5pJ4U58urUm02wj60XhuDsd3sGFiRJ3BSP2YrcuY
BQ+AMSXAtL/jREsl6z0NuSj4nYAmN8GTE1x1wNbEp4FlhVxZJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNuelSSHScNH0Hs/PAMv9XVuWnpWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh
OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvNGUzYWM4MGYtZWM3MC0z
NzViLTgyOWEtMmNlMTY2ZWQ1ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli
MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx
MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3
ZTVmMTI3ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL59AAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAbitM7y7SyECoE/FFWlcR7EDF0glIo309QKroYgUUZzqi+lca6u
Ivc6h1XscH1PfM+4nVT8XgmAo2AbRfFn8xLkkgJsdrfz8f8sUJR95TWy9QQa4TDb
iGsxwmkqgEyYxyZQlN9a8pHN0wdIJIFHUOxC0XmAUfvTPysD9Xftc2d9U9bko8je
pZGqHP7KmOrSCHaBqD0rrfFhssBx8I0c7aFGsP+jYGTpgAXt52GzYE2gfxXF3ddg
mYifPtrVaRx/dyEnONk/294AH8ycRM7gju5MxVCLDAdW/DJuOTOVUSty8ldVkPQZ
29pUBKfIGTuDfaj/MBQTBF6b2qfD1G72P2o=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net