Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/b22184c7-b147-3d66-beca-3b4482f82d79.roa
File:                     b22184c7-b147-3d66-beca-3b4482f82d79.roa (raw, json)
Hash identifier:          ZzL3OM6RYDIgF0N6btDbpKMqEeQQlxqqc2s+VGFuTE4=
Subject key identifier:   8C:16:99:1C:2E:9B:31:07:80:F1:96:75:FA:26:3E:45:B8:0A:D7:61
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F432858485B6AF5CDDCC89A74721F4AC0
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/b22184c7-b147-3d66-beca-3b4482f82d79.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     395123
IP address blocks:        74.50.216.0/24 maxlen: 24
                          74.50.218.0/23 maxlen: 23
                          74.50.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:f5:cd:dc:c8:9a:74:72:1f:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=4eff4591-b614-49cf-86a1-8d4bf0cb6732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:2c:f9:74:ce:3f:8b:6c:86:b1:bd:a6:37:
                    3c:15:b3:48:4c:37:71:68:ed:04:af:24:f5:99:d5:
                    13:94:91:a4:e3:09:61:5f:88:a6:c6:09:c4:17:07:
                    0f:71:b7:47:c6:a1:32:49:d4:78:98:31:bc:94:fc:
                    9b:4a:0e:a1:32:0e:f2:8a:74:b9:c2:a6:93:c6:ff:
                    e1:60:08:be:b6:91:f9:1e:21:42:01:81:f3:6d:76:
                    ac:e5:85:57:15:ce:fa:b6:25:c4:35:37:d2:eb:12:
                    1c:81:c1:9a:1a:23:91:85:85:a7:93:6a:ee:2c:01:
                    48:ac:ca:39:0c:e7:87:a6:67:e1:d1:fc:99:61:c4:
                    40:0c:cf:3b:07:f4:5b:7d:71:8d:a3:79:0a:43:24:
                    d6:29:7b:bb:bb:f4:1a:b5:1b:2c:60:35:2d:26:2f:
                    32:6a:fb:54:c6:91:74:ad:36:16:8d:f3:2c:1a:c0:
                    57:2b:5d:94:c1:ae:49:34:7c:56:50:27:a9:ed:b8:
                    02:30:da:fe:6c:2c:3a:a9:c3:97:bc:83:d2:93:7a:
                    f0:c3:42:fa:02:f7:07:42:69:ea:63:40:8c:cd:be:
                    1e:63:1d:5a:24:49:39:67:c8:2c:9e:22:d2:dc:7b:
                    fb:7b:e8:b4:2e:76:b6:1e:db:fe:c8:3f:2d:58:63:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:16:99:1C:2E:9B:31:07:80:F1:96:75:FA:26:3E:45:B8:0A:D7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/b22184c7-b147-3d66-beca-3b4482f82d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.216.0/24
                  74.50.218.0/23
                  74.50.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:8b:2a:14:b1:4b:5b:9f:df:29:27:f7:2c:2d:c0:56:35:4b:
         60:c4:e3:90:60:0c:c2:f8:16:7c:75:3e:eb:a8:92:53:08:4d:
         d1:83:d7:db:dc:09:7a:fb:3a:88:6e:b0:9d:a8:c2:c5:16:c3:
         56:33:ba:a6:e5:10:aa:df:ea:98:d2:67:09:cf:bf:84:4e:56:
         63:0e:bc:e4:d3:71:18:7c:07:14:f5:08:85:b6:89:d5:57:6f:
         52:98:43:1e:16:9c:eb:99:e8:24:46:1b:de:6b:6a:73:5b:13:
         fe:c0:d4:1d:36:99:1e:70:10:85:74:14:61:2a:d2:8b:21:45:
         91:a2:b4:be:57:dc:43:bc:a7:d3:cf:6a:e0:4f:c9:77:5b:ca:
         bd:48:86:ba:f0:47:ab:25:5e:cb:f7:45:b8:8b:9a:31:39:3c:
         d0:4f:73:f2:c4:46:54:02:e6:93:ec:d1:4c:3c:6e:48:ad:d9:
         3f:7c:3a:0c:75:79:89:e9:56:7b:1a:53:30:24:5e:22:4d:66:
         08:40:92:0a:b8:9a:38:aa:d9:a1:c9:67:01:f5:d4:8f:55:96:
         5d:ad:31:82:57:57:b3:a0:86:18:43:99:1e:34:b0:ce:80:5a:
         b2:37:91:d0:26:f9:0d:6c:ee:ef:b5:6e:87:1f:69:99:08:30:
         79:7c:93:0b
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEhbavXN3MiadHIfSsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl
ZDI1MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
NGVmZjQ1OTEtYjYxNC00OWNmLTg2YTEtOGQ0YmYwY2I2NzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqIs+XTOP4tshrG9pjc8FbNITDdxaO0EryT1
mdUTlJGk4wlhX4imxgnEFwcPcbdHxqEySdR4mDG8lPybSg6hMg7yinS5wqaTxv/h
YAi+tpH5HiFCAYHzbXas5YVXFc76tiXENTfS6xIcgcGaGiORhYWnk2ruLAFIrMo5
DOeHpmfh0fyZYcRADM87B/RbfXGNo3kKQyTWKXu7u/QatRssYDUtJi8yavtUxpF0
rTYWjfMsGsBXK12Uwa5JNHxWUCep7bgCMNr+bCw6qcOXvIPSk3rww0L6AvcHQmnq
Y0CMzb4eYx1aJEk5Z8gsniLS3Hv7e+i0Lna2Htv+yD8tWGP1nwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFIwWmRwumzEHgPGWdfomPkW4CtdhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh
NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvYjIyMTg0YzctYjE0Ny0z
ZDY2LWJlY2EtM2I0NDgyZjgyZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm
M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0
ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0
MmE4NGVkMjUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQASjLYAwQB
SjLaAwQASjLeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGqLKhSxS1uf3ykn9ywtwFY1S2DE45BgDML4Fnx1
PuuoklMITdGD19vcCXr7OohusJ2owsUWw1YzuqblEKrf6pjSZwnPv4ROVmMOvOTT
cRh8BxT1CIW2idVXb1KYQx4WnOuZ6CRGG95ranNbE/7A1B02mR5wEIV0FGEq0osh
RZGitL5X3EO8p9PPauBPyXdbyr1IhrrwR6slXsv3RbiLmjE5PNBPc/LERlQC5pPs
0Uw8bkit2T98Ogx1eYnpVnsaUzAkXiJNZghAkgq4mjiq2aHJZwH11I9Vll2tMYJX
V7OghhhDmR40sM6AWrI3kdAm+Q1s7u+1bocfaZkIMHl8kws=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:39 2025 by rpki-client