Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/c550fec7-eac1-3b1d-b2d9-a5dcc1f4a241.roa
File:                     c550fec7-eac1-3b1d-b2d9-a5dcc1f4a241.roa (raw, json)
Hash identifier:          yHQvn75dRRGZ3MYNMLZ5Le+hgluQFhoOgu3eYrgyH4g=
Subject key identifier:   DF:E3:B8:68:C0:CB:48:0E:6F:07:86:D7:5E:57:DF:85:BD:48:5F:E4
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F432858486D905B4629DC99560ED5AB80
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/c550fec7-eac1-3b1d-b2d9-a5dcc1f4a241.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     396026
IP address blocks:        66.249.142.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:5b:46:29:dc:99:56:0e:d5:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=a849120c-6baa-4184-92c5-a7ba49e22c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:8f:9c:e5:d4:4c:7d:03:89:db:41:49:ca:
                    72:79:9f:16:cb:df:af:9b:67:db:df:78:9e:58:79:
                    40:55:fa:42:ad:80:d4:6f:ff:d9:ca:fc:93:aa:15:
                    a4:76:41:67:fc:4b:9d:23:17:0e:f7:01:b9:7d:3d:
                    43:8f:52:45:04:7b:2b:90:7c:06:96:3b:cd:ad:8d:
                    9d:09:7d:e7:1e:9c:4a:f5:8e:5f:dd:07:13:9e:2e:
                    eb:a4:7e:22:39:66:da:58:02:21:b0:05:ff:a6:01:
                    40:09:db:ba:41:a1:5e:6c:50:cb:00:30:10:69:47:
                    9e:54:57:0d:2a:98:6a:b8:2d:0f:70:98:31:df:d8:
                    04:53:a1:48:73:08:c8:07:6a:7a:ea:90:96:d4:56:
                    c0:df:66:4e:d9:b4:f9:4c:d1:2d:50:2c:79:c4:a0:
                    eb:5d:3b:d2:c8:a5:c9:86:6f:2c:5b:01:92:c6:db:
                    6f:f4:ce:61:cf:85:b7:ed:24:22:51:74:7c:d7:51:
                    1b:37:37:fc:9b:1c:7e:2f:af:c4:24:d0:fd:b2:29:
                    26:67:f1:25:69:c2:cb:d3:3b:ac:62:9d:d9:1f:6a:
                    39:3c:27:c5:78:b1:1d:7c:72:36:7d:a4:8b:a5:9c:
                    a6:39:d6:ba:51:a4:1d:fe:83:12:8d:60:5a:8e:3f:
                    c4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E3:B8:68:C0:CB:48:0E:6F:07:86:D7:5E:57:DF:85:BD:48:5F:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/c550fec7-eac1-3b1d-b2d9-a5dcc1f4a241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:1a:b3:ce:66:35:b4:27:fd:74:88:1d:ef:ad:d6:71:56:73:
         42:18:a5:3a:b2:b4:e2:2f:04:94:96:4a:fa:dd:bc:05:df:a3:
         84:21:a0:87:55:ef:e0:2e:68:65:7f:16:eb:85:71:a5:ef:84:
         51:62:e4:1f:e3:ad:d9:cf:95:5d:94:0a:6f:86:09:fb:a7:23:
         f0:26:58:1a:78:47:da:0e:fc:b1:9d:b4:cf:0f:ec:66:dd:04:
         9d:e4:13:93:47:bc:00:b4:0d:f5:3f:8e:04:3b:c6:21:ae:c1:
         75:a0:6f:93:14:1d:d4:b8:83:88:1b:29:1e:dd:87:a6:e2:d7:
         c1:46:58:1e:fd:fd:a6:07:0b:ab:9c:08:ac:2a:8a:32:7a:de:
         de:21:e2:d4:e0:ca:f5:72:62:5e:0d:7a:a5:b9:1b:6b:ee:23:
         3c:61:60:73:cd:6d:64:0f:c6:6d:45:5f:06:a3:12:01:d0:ce:
         31:63:1a:53:a9:a7:e9:04:ff:34:d2:39:55:56:10:f4:91:27:
         f7:31:01:1f:59:1d:de:9c:ea:c8:6b:5d:2f:ab:4b:b5:94:f9:
         f9:a4:81:23:bb:f4:62:11:29:f6:35:60:65:0c:12:2b:fc:a6:
         61:3c:39:60:86:a7:ae:d4:dd:14:46:f7:08:70:a5:f3:e1:5b:
         2a:5e:f8:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFtGKdyZVg7Vq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw
ZGU5MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YTg0OTEyMGMtNmJhYS00MTg0LTkyYzUtYTdiYTQ5ZTIyYzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEiPnOXUTH0DidtBScpyeZ8Wy9+vm2fb33ie
WHlAVfpCrYDUb//ZyvyTqhWkdkFn/EudIxcO9wG5fT1Dj1JFBHsrkHwGljvNrY2d
CX3nHpxK9Y5f3QcTni7rpH4iOWbaWAIhsAX/pgFACdu6QaFebFDLADAQaUeeVFcN
KphquC0PcJgx39gEU6FIcwjIB2p66pCW1FbA32ZO2bT5TNEtUCx5xKDrXTvSyKXJ
hm8sWwGSxttv9M5hz4W37SQiUXR811EbNzf8mxx+L6/EJND9sikmZ/ElacLL0zus
Yp3ZH2o5PCfFeLEdfHI2faSLpZymOda6UaQd/oMSjWBajj/E3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/juGjAy0gObweG115X34W9SF/kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk
YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvYzU1MGZlYzctZWFjMS0z
YjFkLWIyZDktYTVkY2MxZjRhMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw
MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw
MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0
ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQvmOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0as85mNbQn/XSIHe+t1nFWc0IYpTqytOIvBJSWSvrdvAXfo4QhoIdV
7+AuaGV/FuuFcaXvhFFi5B/jrdnPlV2UCm+GCfunI/AmWBp4R9oO/LGdtM8P7Gbd
BJ3kE5NHvAC0DfU/jgQ7xiGuwXWgb5MUHdS4g4gbKR7dh6bi18FGWB79/aYHC6uc
CKwqijJ63t4h4tTgyvVyYl4NeqW5G2vuIzxhYHPNbWQPxm1FXwajEgHQzjFjGlOp
p+kE/zTSOVVWEPSRJ/cxAR9ZHd6c6shrXS+rS7WU+fmkgSO79GIRKfY1YGUMEiv8
pmE8OWCGp67U3RRG9whwpfPhWype+CI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:42:40 2025 by rpki-client