Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf001d1-949e-3a48-a12e-f2aded9a40ad.roa
File:                     9bf001d1-949e-3a48-a12e-f2aded9a40ad.roa (raw, json)
Hash identifier:          8hJovfWe0kwVBr2SsVnQT4ZIL+y/ec6q8i1On9JcaqA=
Subject key identifier:   D6:7C:C9:C6:AF:D3:42:C9:28:D8:9C:7A:47:58:C4:52:06:10:A3:20
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2481A263FC97FCC426C300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf001d1-949e-3a48-a12e-f2aded9a40ad.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1000:b090::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:81:a2:63:fc:97:fc:c4:26:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=edb5d21a-6ebd-4612-9604-13dab6242d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:ad:d1:5e:a7:33:c1:92:3d:62:da:93:a0:
                    08:1c:0b:0a:72:63:fe:24:a0:ac:43:24:d6:aa:cc:
                    7e:02:1f:8c:05:e0:ec:34:56:b7:38:16:9d:2d:13:
                    f0:27:d4:ff:ac:1a:d6:a5:68:f9:10:7f:5a:a5:91:
                    d5:53:c6:23:72:12:fb:04:d9:26:b7:d0:0f:5f:9f:
                    03:62:f1:97:a0:bf:9c:4d:83:2b:8e:b1:e5:ab:01:
                    dd:f8:c2:5a:27:b6:af:4f:d9:d5:8e:c7:5a:56:bb:
                    5f:5d:96:ec:aa:5a:05:cb:3c:44:ae:c9:67:2e:31:
                    f0:73:4c:07:53:af:91:cd:8a:2b:82:e6:03:62:8f:
                    fb:8e:de:8c:e2:36:c1:fe:aa:cc:09:35:b6:4c:cb:
                    a3:f2:22:97:cc:b9:9a:b3:6a:b0:39:18:9d:04:9c:
                    2c:a9:6e:8c:a0:3e:5b:b2:70:17:ff:88:a3:b0:51:
                    71:ed:d0:06:57:c0:59:6c:f3:eb:ec:17:30:73:63:
                    82:8f:7a:84:4f:3b:5b:62:95:b0:0c:9c:0c:f9:4d:
                    0b:ec:71:d1:a6:a9:c9:b6:be:c8:1b:55:b6:26:e7:
                    26:5e:ea:b3:96:3d:2a:3b:fd:b5:fb:d0:d6:47:ae:
                    a2:eb:3d:10:5c:e4:68:3d:6b:8c:30:7e:4f:01:d7:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7C:C9:C6:AF:D3:42:C9:28:D8:9C:7A:47:58:C4:52:06:10:A3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bf001d1-949e-3a48-a12e-f2aded9a40ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f0:c2:d2:b6:8a:9a:56:bd:e1:3b:21:6f:16:d4:d4:06:de:
         32:36:a0:00:49:cb:fc:fb:76:68:a6:c1:84:82:c0:67:62:19:
         e1:a1:4a:6c:42:a7:c0:4c:f3:71:b1:21:e5:88:71:a7:16:59:
         c6:cf:f5:ba:e6:40:4c:8d:ad:34:92:5f:05:e9:e9:e2:9e:c8:
         14:03:fe:68:57:c9:6e:64:45:65:89:35:11:75:fe:b7:34:94:
         89:42:46:15:de:a9:48:83:73:85:3d:80:b1:a3:1b:9e:5b:79:
         a4:f7:19:05:49:f9:97:f7:0a:d3:15:c3:52:39:44:0b:2c:4e:
         10:78:b4:d8:c2:57:1d:01:c8:36:88:14:2e:cf:5b:9e:25:5a:
         cc:98:e8:f6:6f:14:fd:c9:04:b0:26:19:2a:8c:84:b7:97:a9:
         77:da:5f:42:8b:0b:19:d3:9a:e4:21:7e:f2:79:80:9f:a8:14:
         b1:58:9f:a5:f8:90:a8:c9:5b:f1:2d:09:ef:d4:91:25:4f:d2:
         5a:d5:2a:03:7d:c4:94:71:da:2a:fe:5f:5a:77:6c:da:3d:a8:
         fd:46:49:f9:09:22:06:2b:77:db:2f:99:22:c5:06:55:4e:04:
         fd:db:9d:a1:4a:0e:08:33:b7:19:ac:c4:65:b5:c2:e9:b0:ca:
         bf:95:2c:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIGiY/yX/MQmwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ZWRiNWQyMWEtNmViZC00NjEyLTk2MDQtMTNkYWI2MjQyZDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmqt0V6nM8GSPWLak6AIHAsKcmP+JKCsQyTW
qsx+Ah+MBeDsNFa3OBadLRPwJ9T/rBrWpWj5EH9apZHVU8YjchL7BNkmt9APX58D
YvGXoL+cTYMrjrHlqwHd+MJaJ7avT9nVjsdaVrtfXZbsqloFyzxErslnLjHwc0wH
U6+RzYorguYDYo/7jt6M4jbB/qrMCTW2TMuj8iKXzLmas2qwORidBJwsqW6MoD5b
snAX/4ijsFFx7dAGV8BZbPPr7Bcwc2OCj3qETztbYpWwDJwM+U0L7HHRpqnJtr7I
G1W2JucmXuqzlj0qO/21+9DWR66i6z0QXORoPWuMMH5PAddXVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNZ8ycav00LJKNicekdYxFIGEKMgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWJmMDAxZDEtOTQ5ZS0z
YTQ4LWExMmUtZjJhZGVkOWE0MGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQALCQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE3wwtK2ippWveE7IW8W1NQG3jI2oABJy/z7dmimwYSCwGdiGeGh
SmxCp8BM83GxIeWIcacWWcbP9brmQEyNrTSSXwXp6eKeyBQD/mhXyW5kRWWJNRF1
/rc0lIlCRhXeqUiDc4U9gLGjG55beaT3GQVJ+Zf3CtMVw1I5RAssThB4tNjCVx0B
yDaIFC7PW54lWsyY6PZvFP3JBLAmGSqMhLeXqXfaX0KLCxnTmuQhfvJ5gJ+oFLFY
n6X4kKjJW/EtCe/UkSVP0lrVKgN9xJRx2ir+X1p3bNo9qP1GSfkJIgYrd9svmSLF
BlVOBP3bnaFKDggztxmsxGW1wumwyr+VLDk=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:52 2025 by rpki-client on console.sobornost.net