Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9e1788ff-7b46-3f2f-be90-735de54b62ca.roa
File:                     9e1788ff-7b46-3f2f-be90-735de54b62ca.roa (raw, json)
Hash identifier:          PoZKnzMjy5Q5yM5fpeZIpJZv09jYbjmR1jK7sndhHSA=
Subject key identifier:   3D:9D:6C:D7:55:55:8F:8E:06:B1:87:BD:90:43:36:6E:00:A9:70:EE
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858483B50142DDA348DF7A781F300
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9e1788ff-7b46-3f2f-be90-735de54b62ca.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     4237
IP address blocks:        20.139.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:14:2d:da:34:8d:f7:a7:81:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=41c8464f-0261-434b-818c-daba0fd4a145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:72:82:2c:38:8e:b3:d8:29:81:23:e8:b8:
                    a7:71:92:93:bc:2f:d1:d6:f5:23:1c:ff:51:80:81:
                    95:a4:72:60:a6:18:55:da:6b:2e:32:73:ff:7c:fd:
                    1d:44:57:c0:4a:a6:d9:9e:4e:73:78:1e:03:af:2d:
                    62:64:9c:8c:9c:25:d0:1f:55:63:0d:cf:8d:e7:27:
                    07:84:a7:a5:18:23:09:95:ca:4f:55:53:6a:dc:1c:
                    08:6a:19:53:1c:8e:11:95:a1:e9:1c:73:cc:a4:3a:
                    99:6b:fb:d9:c7:ae:19:0e:96:60:49:c1:2d:c6:31:
                    0d:d5:84:1c:7c:5b:e0:b2:4c:0b:3d:f4:7e:59:04:
                    ee:f9:1f:d5:23:40:27:ac:53:76:2d:5d:c8:59:f8:
                    39:52:cd:f7:92:12:d5:c3:8f:3d:31:6e:29:b1:9d:
                    b8:4a:76:86:b2:fc:fc:4e:79:a1:92:8b:cd:df:76:
                    31:0e:7a:21:12:68:fc:9d:16:4d:1d:43:e2:14:f2:
                    75:3e:c7:25:3e:c8:bb:4b:5b:f9:d8:bb:8b:eb:d1:
                    d9:ff:bd:69:80:61:2d:75:72:3d:ae:f7:c6:af:98:
                    34:33:b0:74:9b:08:c1:bd:2a:c7:f8:39:a8:84:79:
                    17:8b:16:b0:93:c2:ad:e9:65:55:20:23:c8:8b:c8:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9D:6C:D7:55:55:8F:8E:06:B1:87:BD:90:43:36:6E:00:A9:70:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9e1788ff-7b46-3f2f-be90-735de54b62ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.139.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d8:a1:34:e6:b0:d0:37:f2:8f:7e:88:e9:ab:a5:6f:6b:3b:
         e3:9d:4d:3c:45:5d:d0:43:ae:93:2c:ee:20:08:1b:90:34:fc:
         5f:69:6f:dd:0b:05:13:f7:9f:45:24:66:9b:e0:a3:3e:f0:85:
         c2:bd:8b:7c:f1:55:09:af:46:f1:db:2d:8f:fa:20:8e:9b:07:
         2f:a8:84:23:91:f0:fc:80:13:70:ec:63:5a:db:cd:5d:a1:44:
         e9:2f:52:f4:f6:5c:af:e3:33:39:68:a0:59:1f:ac:79:cc:25:
         6a:50:3b:af:89:9c:59:03:a3:e2:99:99:6a:89:8a:7c:a8:06:
         cb:8e:9c:33:47:9a:b6:08:58:e2:6b:01:f0:f8:ce:fd:33:fe:
         e3:93:c7:85:85:cb:db:32:28:82:f6:f3:30:24:3b:d9:8e:34:
         6c:0b:b9:a3:6f:b5:aa:99:19:2b:e0:5a:70:c5:2c:d9:7e:8d:
         4e:9b:b5:bb:8f:cd:7d:7e:53:bf:97:5b:ce:a9:99:62:3d:bf:
         00:85:23:8a:79:1f:01:ff:54:16:41:4c:17:18:41:55:55:06:
         28:7a:f6:d7:56:6a:8f:67:64:e0:2a:2a:92:f3:37:82:4d:a4:
         f0:1a:4f:fd:02:ff:d3:07:a5:5e:b5:81:a6:83:c5:14:5f:97:
         31:1d:26:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UBQt2jSN96eB8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
NDFjODQ2NGYtMDI2MS00MzRiLTgxOGMtZGFiYTBmZDRhMTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEFygiw4jrPYKYEj6LincZKTvC/R1vUjHP9R
gIGVpHJgphhV2msuMnP/fP0dRFfASqbZnk5zeB4Dry1iZJyMnCXQH1VjDc+N5ycH
hKelGCMJlcpPVVNq3BwIahlTHI4RlaHpHHPMpDqZa/vZx64ZDpZgScEtxjEN1YQc
fFvgskwLPfR+WQTu+R/VI0AnrFN2LV3IWfg5Us33khLVw489MW4psZ24SnaGsvz8
TnmhkovN33YxDnohEmj8nRZNHUPiFPJ1PsclPsi7S1v52LuL69HZ/71pgGEtdXI9
rvfGr5g0M7B0mwjBvSrH+DmohHkXixawk8Kt6WVVICPIi8inqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD2dbNdVVY+OBrGHvZBDNm4AqXDuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWUxNzg4ZmYtN2I0Ni0z
ZjJmLWJlOTAtNzM1ZGU1NGI2MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJjYoTTmsNA38o9+iOmrpW9rO+OdTTxFXdBDrpMs7iAIG5A0/F9pb90L
BRP3n0UkZpvgoz7whcK9i3zxVQmvRvHbLY/6II6bBy+ohCOR8PyAE3DsY1rbzV2h
ROkvUvT2XK/jMzlooFkfrHnMJWpQO6+JnFkDo+KZmWqJinyoBsuOnDNHmrYIWOJr
AfD4zv0z/uOTx4WFy9syKIL28zAkO9mONGwLuaNvtaqZGSvgWnDFLNl+jU6btbuP
zX1+U7+XW86pmWI9vwCFI4p5HwH/VBZBTBcYQVVVBih69tdWao9nZOAqKpLzN4JN
pPAaT/0C/9MHpV61gaaDxRRflzEdJnU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:33:20 2025 by rpki-client