Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa
File:                     bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa (raw, json)
Hash identifier:          +maW981PchcyufoHBwrXOOTl811lbaYqITkJm30tIBk=
Subject key identifier:   97:30:8E:FB:31:63:FE:14:94:77:10:BD:D3:CF:EA:D2:EE:EB:1D:D7
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584965E97A67ED72DE67E3586940
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     396356
IP address blocks:        2607:6b80:41::/48 maxlen: 48
                          2607:6b80:42::/48 maxlen: 48
                          2607:6b80:43::/48 maxlen: 48
                          2607:6b80:44::/48 maxlen: 48
                          2607:6b80:45::/48 maxlen: 48
                          2607:6b80:46::/48 maxlen: 48
                          2607:6b80:47::/48 maxlen: 48
                          2607:6b80:48::/48 maxlen: 48
                          2607:6b80:4a::/48 maxlen: 48
                          2607:6b80:53::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7a:67:ed:72:de:67:e3:58:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=0aa99d23-5ab9-45cd-98e6-0ca2fb5ade59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:8b:e8:db:09:60:5a:05:6d:19:4e:02:8e:
                    99:49:20:71:c4:d2:f1:fb:be:b3:9b:5d:f7:b6:e9:
                    7e:2e:ca:55:25:fa:a0:e6:15:fa:82:8b:d2:5b:ec:
                    9e:7c:90:c1:94:9e:43:80:0f:77:ea:fc:9a:19:9b:
                    7b:6d:5d:73:a9:b5:bf:25:99:8d:34:1e:17:55:2a:
                    8c:75:0d:98:5d:67:71:84:ff:be:05:31:f0:de:44:
                    1b:b5:d3:72:1b:78:06:b0:24:31:a9:f9:e1:bc:48:
                    71:ec:ef:97:49:31:64:aa:2b:00:50:d9:2d:bc:63:
                    1d:ae:65:d1:01:11:a2:66:32:44:0b:4d:ff:43:00:
                    c4:d6:48:d3:ae:1d:27:79:39:1a:fe:65:46:3b:02:
                    2b:34:c2:76:e8:ce:b3:3f:d6:8b:d3:88:14:25:5d:
                    96:28:bc:f2:7d:2d:c8:77:f9:6e:aa:b1:98:31:8f:
                    22:c6:04:eb:0f:b0:8e:0e:a6:a1:be:7c:b9:2b:77:
                    d7:99:eb:78:2d:cc:20:8c:1e:d8:cc:ab:38:21:81:
                    d1:f7:20:d7:92:54:34:43:16:f4:da:f1:10:ca:de:
                    60:30:52:63:73:09:8a:1e:20:1d:36:51:3f:e7:f5:
                    9b:b0:02:0c:1a:31:30:e2:bd:ec:b6:ba:4f:2c:01:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:8E:FB:31:63:FE:14:94:77:10:BD:D3:CF:EA:D2:EE:EB:1D:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:41::-2607:6b80:48:ffff:ffff:ffff:ffff:ffff
                  2607:6b80:4a::/48
                  2607:6b80:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8a:49:6c:9a:d9:54:51:5b:86:26:1f:55:15:3a:98:40:a9:
         3d:3d:e1:b3:4d:33:31:a3:58:d4:ad:6e:1a:86:10:ef:83:4d:
         fb:1a:07:3e:38:6c:9b:30:32:b9:8f:a4:12:7c:2f:76:ee:2f:
         d2:61:c4:58:a0:86:49:06:ec:26:29:69:6f:51:82:14:af:17:
         aa:17:65:d1:0c:99:b3:ff:8f:a7:77:b7:9d:9f:93:2d:0b:ba:
         cd:fd:85:86:a4:93:d5:9c:e0:ce:d2:9e:0c:0d:c2:1a:6b:ad:
         9b:b6:a7:e7:b8:76:7d:a0:c1:5d:24:4e:43:b5:b0:6d:97:e7:
         da:d1:36:7a:05:56:d8:5e:0b:61:23:37:8e:32:b8:25:86:a0:
         98:ae:3b:01:20:d2:2b:24:f2:7b:a1:56:0e:cf:e6:75:c1:ef:
         db:56:64:45:09:45:b0:d3:e5:bc:62:c1:3d:4b:5f:3d:5a:f0:
         7e:e0:99:7a:77:61:08:1c:60:9a:80:9f:4e:37:02:1b:2d:85:
         3e:9e:e7:20:09:b4:88:58:a1:0a:cd:1e:33:63:56:04:7f:db:
         66:01:b7:95:f5:2f:c4:57:4e:a4:af:f2:31:6a:5c:eb:2e:d9:
         dd:fa:61:fb:cd:19:2b:96:0f:c0:45:78:2b:d8:8e:b1:21:df:
         41:1b:aa:12
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEll6Xpn7XLeZ+NYaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk
MGFhOTlkMjMtNWFiOS00NWNkLTk4ZTYtMGNhMmZiNWFkZTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMeL6NsJYFoFbRlOAo6ZSSBxxNLx+76zm133
tul+LspVJfqg5hX6govSW+yefJDBlJ5DgA936vyaGZt7bV1zqbW/JZmNNB4XVSqM
dQ2YXWdxhP++BTHw3kQbtdNyG3gGsCQxqfnhvEhx7O+XSTFkqisAUNktvGMdrmXR
ARGiZjJEC03/QwDE1kjTrh0neTka/mVGOwIrNMJ26M6zP9aL04gUJV2WKLzyfS3I
d/luqrGYMY8ixgTrD7CODqahvny5K3fXmet4LcwgjB7YzKs4IYHR9yDXklQ0Qxb0
2vEQyt5gMFJjcwmKHiAdNlE/5/WbsAIMGjEw4r3strpPLAHCXwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFJcwjvsxY/4UlHcQvdPP6tLu6x3XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvYmM1YWIwMDEtMjBmOC0z
ZGQ0LTg3NWItYTFkZjlkMDYwZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwAmB2uA
AEEDBwAmB2uAAEgDBwAmB2uAAEoDBwAmB2uAAFMwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaIpJbJrZVFFb
hiYfVRU6mECpPT3hs00zMaNY1K1uGoYQ74NN+xoHPjhsmzAyuY+kEnwvdu4v0mHE
WKCGSQbsJilpb1GCFK8Xqhdl0QyZs/+Pp3e3nZ+TLQu6zf2FhqST1ZzgztKeDA3C
Gmutm7an57h2faDBXSROQ7WwbZfn2tE2egVW2F4LYSM3jjK4JYagmK47ASDSKyTy
e6FWDs/mdcHv21ZkRQlFsNPlvGLBPUtfPVrwfuCZendhCBxgmoCfTjcCGy2FPp7n
IAm0iFihCs0eM2NWBH/bZgG3lfUvxFdOpK/yMWpc6y7Z3fph+80ZK5YPwEV4K9iO
sSHfQRuqEg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:15 2025 by rpki-client on console.sobornost.net