Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9a5bfbbd-f222-3008-9ed6-a52de3f605e8.roa
File:                     9a5bfbbd-f222-3008-9ed6-a52de3f605e8.roa (raw, json)
Hash identifier:          IOWO2yErSaJZfUQ5BJyBJMUvY+xRnWYM+TOlrA3pMIw=
Subject key identifier:   6C:9E:05:A3:0E:A6:9E:B4:29:FB:9F:26:80:49:CB:ED:1F:3A:EB:46
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848159FE82B3A1CE126A4B934C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9a5bfbbd-f222-3008-9ed6-a52de3f605e8.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     396982
IP address blocks:        137.83.213.0/24 maxlen: 24
                          137.83.215.0/24 maxlen: 24
                          137.83.216.0/21 maxlen: 24
                          137.83.224.0/20 maxlen: 24
                          137.83.240.0/21 maxlen: 24
                          137.83.248.0/23 maxlen: 24
                          137.83.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:e8:2b:3a:1c:e1:26:a4:b9:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=4b77cad0-a410-440a-909a-f503d03e5d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:98:df:d8:83:e9:3c:b9:88:cf:6e:3e:04:
                    d6:a0:7b:c4:55:4b:02:af:3a:3b:e3:f6:e9:09:93:
                    d2:30:4f:75:ce:bf:df:a6:6f:fc:e2:f8:bb:59:8d:
                    e2:58:c6:00:35:c1:76:12:74:5a:ac:6f:26:bf:0f:
                    cc:d7:03:a9:49:13:94:3e:7f:63:0a:52:ad:19:a4:
                    01:61:a4:5b:34:a5:92:ed:31:ff:c2:02:de:d9:22:
                    9d:c2:12:29:da:e8:af:d2:9b:68:74:26:a1:48:e2:
                    b4:63:ec:1f:e5:b2:72:b6:62:01:af:b3:43:42:ce:
                    1c:a1:73:0a:3e:b9:36:d8:b2:05:fe:6a:8a:1a:17:
                    5a:ca:06:f0:82:aa:ca:75:d9:f8:e1:5c:9e:55:bf:
                    b2:5c:35:12:ba:4e:62:5b:d6:c6:2e:92:8c:cc:06:
                    cc:90:a3:31:85:7b:35:2e:c3:19:af:62:c3:7d:3d:
                    58:56:d5:29:c8:d6:58:68:20:ff:18:ee:c8:40:b9:
                    7d:96:65:72:d9:f3:8f:b5:df:e7:0d:b5:06:4f:45:
                    ae:25:d5:44:84:f2:3a:43:06:25:0e:5e:df:be:e4:
                    fc:8e:bf:87:d5:16:e9:f8:76:68:5c:dd:7e:0d:93:
                    ee:c4:03:be:b1:36:43:86:01:cd:15:2e:93:f6:53:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9E:05:A3:0E:A6:9E:B4:29:FB:9F:26:80:49:CB:ED:1F:3A:EB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9a5bfbbd-f222-3008-9ed6-a52de3f605e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.213.0/24
                  137.83.215.0-137.83.250.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:4f:1e:6a:97:96:b2:34:c9:db:a3:0a:1d:87:fb:f2:33:
         97:e3:b7:55:13:63:2e:0c:12:6b:b3:d3:d3:13:1b:68:7e:19:
         d5:dc:8c:56:cd:45:d7:35:3b:be:37:1e:21:c5:92:bc:e9:37:
         71:81:6c:70:15:47:96:3b:a2:85:8c:2a:3b:83:46:fc:b5:22:
         c7:e2:3b:63:bb:1a:54:ef:c5:d4:91:6a:58:85:ab:bb:8e:c0:
         dd:23:29:6c:50:60:33:7e:84:de:21:df:8e:0c:14:a0:dd:9a:
         bf:80:ea:0e:5c:7b:5c:54:f3:d6:c1:54:97:ae:82:1d:fd:6f:
         20:0d:c7:fa:6c:59:51:81:2a:33:3c:1e:73:5c:25:9b:46:4d:
         36:20:bd:6b:e3:15:84:19:6d:d9:94:25:50:bf:bd:b4:f9:ce:
         ed:3a:37:fe:f4:7a:4a:c5:0a:7e:6f:b4:cb:b1:96:55:69:db:
         cc:e6:a7:66:1d:3a:d7:fd:7e:d7:fe:b7:44:7f:e5:bf:7d:6b:
         d1:2d:db:01:84:a2:bb:6b:0b:23:03:7c:d8:15:4b:5e:e2:3a:
         96:2d:69:78:34:74:95:4e:02:14:a0:8a:41:f7:e4:41:79:17:
         ef:53:1f:35:e0:92:e5:c7:e0:6f:1c:27:78:f0:fd:97:91:c2:
         31:7e:b7:a2
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEgVn+grOhzhJqS5NMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
NGI3N2NhZDAtYTQxMC00NDBhLTkwOWEtZjUwM2QwM2U1ZDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLyY39iD6Ty5iM9uPgTWoHvEVUsCrzo74/bp
CZPSME91zr/fpm/84vi7WY3iWMYANcF2EnRarG8mvw/M1wOpSROUPn9jClKtGaQB
YaRbNKWS7TH/wgLe2SKdwhIp2uiv0ptodCahSOK0Y+wf5bJytmIBr7NDQs4coXMK
Prk22LIF/mqKGhdaygbwgqrKddn44VyeVb+yXDUSuk5iW9bGLpKMzAbMkKMxhXs1
LsMZr2LDfT1YVtUpyNZYaCD/GO7IQLl9lmVy2fOPtd/nDbUGT0WuJdVEhPI6QwYl
Dl7fvuT8jr+H1Rbp+HZoXN1+DZPuxAO+sTZDhgHNFS6T9lMoNQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFGyeBaMOpp60KfufJoBJy+0fOutGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvOWE1YmZiYmQtZjIyMi0z
MDA4LTllZDYtYTUyZGUzZjYwNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAiVPVMAwD
BACJU9cDBACJU/owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAa/9PHmqXlrI0ydujCh2H+/Izl+O3VRNjLgwS
a7PT0xMbaH4Z1dyMVs1F1zU7vjceIcWSvOk3cYFscBVHljuihYwqO4NG/LUix+I7
Y7saVO/F1JFqWIWru47A3SMpbFBgM36E3iHfjgwUoN2av4DqDlx7XFTz1sFUl66C
Hf1vIA3H+mxZUYEqMzwec1wlm0ZNNiC9a+MVhBlt2ZQlUL+9tPnO7To3/vR6SsUK
fm+0y7GWVWnbzOanZh061/1+1/63RH/lv31r0S3bAYSiu2sLIwN82BVLXuI6li1p
eDR0lU4CFKCKQffkQXkX71MfNeCS5cfgbxwnePD9l5HCMX63og==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:36 2025 by rpki-client