Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/fbd6b22c-7bbc-36c9-b4ac-9a627380ef08.roa
File:                     fbd6b22c-7bbc-36c9-b4ac-9a627380ef08.roa (raw, json)
Hash identifier:          dylC5ewjpFKVYXhNGNtRdUb2XWtE4hEWZ42N9QDS6dQ=
Subject key identifier:   4A:96:89:D0:29:BB:E5:25:67:64:17:10:E3:D2:3B:7D:1D:C7:3B:74
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F43285848037A4C5CA84C0DFD38DB6800
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/fbd6b22c-7bbc-36c9-b4ac-9a627380ef08.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     46253
IP address blocks:        209.107.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:4c:5c:a8:4c:0d:fd:38:db:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=096e823b-897e-447c-826e-a54ade7d233f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:75:cc:b5:4a:b5:b9:78:6e:42:ea:f5:8c:
                    0f:a9:11:2a:3b:81:01:d6:d3:f6:72:07:da:da:10:
                    69:88:96:74:ba:a1:0f:31:48:e5:2d:f3:50:fd:1a:
                    50:a2:b0:91:ac:dc:b7:07:37:4c:35:d5:69:0a:33:
                    d0:56:3e:9d:2a:3a:2c:79:b6:f1:25:de:14:5d:08:
                    67:63:e3:0c:7f:bc:19:c7:52:bb:b9:4b:4f:1f:49:
                    04:72:b3:03:f4:06:73:5a:72:33:05:4c:8b:8b:b4:
                    fa:2a:dc:73:ab:ba:8a:27:7d:8d:b1:cf:47:86:71:
                    df:6e:95:fa:e8:35:8c:c1:15:d6:ab:ec:65:2e:3d:
                    f9:e7:c5:99:d6:82:16:90:9d:68:52:3b:ad:16:e5:
                    d5:70:98:e5:79:1f:8a:fa:0a:c6:81:7b:32:30:8c:
                    bd:1f:4a:9a:6f:58:c6:17:0d:dd:76:0c:d9:00:5d:
                    57:77:10:f8:a1:ed:70:40:38:f6:e3:a4:78:18:00:
                    bf:42:7f:83:dc:72:bb:c7:8d:a4:b3:b2:0f:a3:3d:
                    d3:ca:40:69:3c:80:50:5d:84:7d:5d:bb:5f:fe:10:
                    ea:58:c7:89:cc:c2:e0:f8:a1:ba:ea:08:49:94:b8:
                    c8:dc:d7:21:e1:8e:a3:fc:a0:23:a7:87:b5:90:75:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:96:89:D0:29:BB:E5:25:67:64:17:10:E3:D2:3B:7D:1D:C7:3B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/fbd6b22c-7bbc-36c9-b4ac-9a627380ef08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:4d:86:0c:4b:2d:40:37:b4:68:00:04:52:a1:72:58:d7:28:
         cf:72:2d:2a:48:a2:12:af:88:2c:4e:75:62:c8:24:3f:81:9f:
         b0:96:ae:cb:1b:f0:68:d2:89:62:94:c5:5c:1b:f4:2e:06:6b:
         07:68:8b:99:d0:1f:32:22:4f:30:9e:4c:5a:3c:a3:ec:75:7c:
         3c:40:63:ba:b4:f7:7d:1d:e7:e7:17:e9:35:62:23:0e:38:6e:
         d9:36:9e:b0:58:fe:a3:c0:dd:ea:bd:df:61:68:fd:91:7d:5e:
         06:db:2c:f9:05:f9:1f:d3:4e:c7:90:66:43:67:2a:b2:85:5f:
         e3:94:d8:d0:6b:b0:b0:95:bc:f5:5f:9c:b6:7e:11:be:e4:10:
         0b:5f:0b:c1:56:08:c5:fe:9b:a1:f4:bb:c4:23:c5:33:94:3d:
         39:c3:ef:a2:ea:60:2b:7a:20:4f:96:12:3c:f6:de:e6:40:f9:
         61:6d:f7:16:ac:85:7e:d0:4b:0c:25:cd:ed:63:d4:77:43:cd:
         85:82:8f:17:ca:e7:69:3d:cf:70:a6:ea:6d:15:60:39:30:83:
         3d:d4:38:3a:5e:0a:b2:02:5c:90:c8:61:c8:79:bf:cd:d2:6e:
         2d:2c:81:70:32:83:fd:b8:8e:be:b6:6e:19:94:e9:52:1a:40:
         f4:d2:7d:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDekxcqEwN/TjbaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz
OGFhMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MDk2ZTgyM2ItODk3ZS00NDdjLTgyNmUtYTU0YWRlN2QyMzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2p1zLVKtbl4bkLq9YwPqREqO4EB1tP2cgfa
2hBpiJZ0uqEPMUjlLfNQ/RpQorCRrNy3BzdMNdVpCjPQVj6dKjosebbxJd4UXQhn
Y+MMf7wZx1K7uUtPH0kEcrMD9AZzWnIzBUyLi7T6Ktxzq7qKJ32Nsc9HhnHfbpX6
6DWMwRXWq+xlLj3558WZ1oIWkJ1oUjutFuXVcJjleR+K+grGgXsyMIy9H0qab1jG
Fw3ddgzZAF1XdxD4oe1wQDj246R4GAC/Qn+D3HK7x42ks7IPoz3TykBpPIBQXYR9
Xbtf/hDqWMeJzMLg+KG66ghJlLjI3Nch4Y6j/KAjp4e1kHXIzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqWidApu+UlZ2QXEOPSO30dxzt0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk
MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZmJkNmIyMmMtN2JiYy0z
NmM5LWI0YWMtOWE2MjczODBlZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2
ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy
MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4
ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFNhgxLLUA3tGgABFKhcljXKM9yLSpIohKviCxOdWLIJD+Bn7CWrssb
8GjSiWKUxVwb9C4Gawdoi5nQHzIiTzCeTFo8o+x1fDxAY7q0930d5+cX6TViIw44
btk2nrBY/qPA3eq932Fo/ZF9XgbbLPkF+R/TTseQZkNnKrKFX+OU2NBrsLCVvPVf
nLZ+Eb7kEAtfC8FWCMX+m6H0u8QjxTOUPTnD76LqYCt6IE+WEjz23uZA+WFt9xas
hX7QSwwlze1j1HdDzYWCjxfK52k9z3Cm6m0VYDkwgz3UODpeCrICXJDIYch5v83S
bi0sgXAyg/24jr62bhmU6VIaQPTSfSw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:06 2025 by rpki-client