Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d6b4265-a737-3357-9e1f-ae4b7f49c96a.roa
File:                     6d6b4265-a737-3357-9e1f-ae4b7f49c96a.roa (raw, json)
Hash identifier:          HA8wBoi0zl+YI/6MoBQ397n+AnvVgm3jkfPYt2on4Wk=
Subject key identifier:   67:75:21:A8:63:B4:1A:BE:E0:1A:60:83:DE:43:21:5E:5F:03:96:45
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7F4B4221A03C3057DA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d6b4265-a737-3357-9e1f-ae4b7f49c96a.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:7f:4b:42:21:a0:3c:30:57:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=3d9d5e8d-1214-42a4-8f84-1cf661c9c515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:cf:75:03:17:8a:e1:21:ad:c1:d5:97:23:
                    f1:17:52:9f:a3:e0:45:6a:d6:82:0d:bc:1d:95:1b:
                    bd:e4:9e:1e:c4:1c:c1:fb:86:27:c3:f8:bb:85:d8:
                    cd:c4:61:57:ef:c7:0e:22:08:4b:d9:0c:a9:e3:bd:
                    8b:bc:e8:97:15:b8:ef:7c:e5:fc:2d:af:6c:2c:8b:
                    a5:7c:37:16:87:91:ee:ed:17:19:00:99:af:33:95:
                    bf:01:8c:d1:89:28:15:7b:8e:f9:bd:f9:62:cf:af:
                    23:ce:2d:c9:0a:e8:96:10:ad:5a:fd:64:90:14:6a:
                    fa:78:b3:8a:20:de:a1:bc:e1:f7:23:44:75:a5:ff:
                    54:a2:78:43:41:ac:bc:86:ad:49:53:b6:f1:da:67:
                    a7:5c:1c:8b:e3:0e:3d:75:4a:ca:7f:0c:ef:f8:62:
                    7a:c3:3a:04:80:e4:10:90:43:90:81:2c:45:f4:82:
                    06:73:62:67:5a:4f:d7:83:bb:68:e4:d6:1d:77:1e:
                    6a:1c:fd:43:61:77:14:c0:55:32:c6:b6:1a:82:b8:
                    90:44:21:47:4e:f3:b1:ab:91:71:f5:f0:a5:d2:aa:
                    47:63:74:4a:df:40:e9:da:2a:c1:42:c2:f4:63:a2:
                    a1:54:9a:a4:53:6c:00:e7:ee:93:b2:9c:3e:d7:6e:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:75:21:A8:63:B4:1A:BE:E0:1A:60:83:DE:43:21:5E:5F:03:96:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d6b4265-a737-3357-9e1f-ae4b7f49c96a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:f2:ee:42:f4:35:bb:2e:72:2e:6d:43:99:1b:dd:63:d0:32:
         9c:ee:0f:a2:09:08:c1:3f:b1:62:46:d9:ef:51:4d:6b:78:e4:
         8f:64:90:e0:3a:ca:37:dd:20:c0:9a:ff:28:1f:e5:9c:11:5e:
         6f:e2:d7:ad:44:8d:14:cc:a6:99:52:4a:87:9d:c4:3d:c0:ca:
         99:9b:43:2a:bd:f8:23:75:0e:54:97:71:c7:af:33:c9:09:63:
         6b:84:88:ed:f7:82:57:1d:2f:30:6b:8e:34:82:69:15:88:5d:
         d0:e2:9d:7f:d7:6b:80:f5:16:4b:30:25:1f:b5:37:b2:fc:6a:
         aa:db:4c:ee:a7:34:54:2d:8c:b6:2b:80:c1:5b:84:9e:c9:12:
         b9:8d:fc:ca:25:89:9b:4b:c6:b8:c3:d8:8a:6f:ce:6d:16:96:
         51:f7:3a:f1:ac:5b:2e:33:11:0d:64:69:6c:47:03:f9:a4:1b:
         24:0d:c7:24:3c:66:cc:5d:63:22:7b:30:df:f9:3b:3a:ed:af:
         2a:55:66:0e:9c:92:ac:03:86:40:28:45:52:e3:74:6c:cf:02:
         0b:bb:c8:a4:11:b1:f8:82:7c:d1:62:31:e9:4c:a2:fc:d9:c4:
         5b:74:9a:85:06:0a:46:16:d8:8a:6d:68:00:d9:56:27:78:a0:
         6c:15:b3:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKn9LQiGgPDBX2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
M2Q5ZDVlOGQtMTIxNC00MmE0LThmODQtMWNmNjYxYzljNTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloPPdQMXiuEhrcHVlyPxF1Kfo+BFataCDbwd
lRu95J4exBzB+4Ynw/i7hdjNxGFX78cOIghL2Qyp472LvOiXFbjvfOX8La9sLIul
fDcWh5Hu7RcZAJmvM5W/AYzRiSgVe475vfliz68jzi3JCuiWEK1a/WSQFGr6eLOK
IN6hvOH3I0R1pf9UonhDQay8hq1JU7bx2menXByL4w49dUrKfwzv+GJ6wzoEgOQQ
kEOQgSxF9IIGc2JnWk/Xg7to5NYddx5qHP1DYXcUwFUyxrYagriQRCFHTvOxq5Fx
9fCl0qpHY3RK30Dp2irBQsL0Y6KhVJqkU2wA5+6Tspw+126GHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGd1IahjtBq+4Bpgg95DIV5fA5ZFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmQ2YjQyNjUtYTczNy0z
MzU3LTllMWYtYWU0YjdmNDljOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMfy7kL0Nbsuci5tQ5kb3WPQMpzuD6IJCME/sWJG2e9RTWt45I9kkOA6
yjfdIMCa/ygf5ZwRXm/i161EjRTMpplSSoedxD3AypmbQyq9+CN1DlSXccevM8kJ
Y2uEiO33glcdLzBrjjSCaRWIXdDinX/Xa4D1FkswJR+1N7L8aqrbTO6nNFQtjLYr
gMFbhJ7JErmN/MoliZtLxrjD2Ipvzm0WllH3OvGsWy4zEQ1kaWxHA/mkGyQNxyQ8
ZsxdYyJ7MN/5OzrtrypVZg6ckqwDhkAoRVLjdGzPAgu7yKQRsfiCfNFiMelMovzZ
xFt0moUGCkYW2IptaADZVid4oGwVs20=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:36:12 2025 by rpki-client