Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8eceb70-2e45-3db6-a398-9ffb1a0d1613.roa
File:                     c8eceb70-2e45-3db6-a398-9ffb1a0d1613.roa (raw, json)
Hash identifier:          eFCuN8g6QPTWh7ZwtbF5rLxhxjpEvsr4uXqAFbhbP6g=
Subject key identifier:   FE:37:0B:4D:2D:94:29:44:C0:0D:13:71:73:49:21:0F:EC:2F:04:49
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ACBF5841D6DDB5F754C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8eceb70-2e45-3db6-a398-9ffb1a0d1613.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:cb:f5:84:1d:6d:db:5f:75:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9b54726d-c8ad-4c4e-b8d2-f2ed4271063b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:44:95:43:88:61:4e:45:a6:2f:eb:ba:88:
                    25:be:56:15:8b:48:00:a1:2e:47:e0:67:88:ec:5f:
                    a3:1b:8a:59:c3:0a:e8:e7:30:75:38:4a:8a:95:f0:
                    01:02:5c:07:aa:be:7c:b3:80:ab:2e:4b:e1:8d:6a:
                    84:6e:dd:79:81:02:e0:59:46:69:0d:c4:ca:87:7b:
                    92:eb:f4:2e:e0:5a:84:39:2d:e0:06:7b:d5:b6:da:
                    38:25:27:36:d9:a6:5b:43:4e:42:58:98:74:27:bc:
                    10:f1:11:cf:4b:ff:d2:06:ef:5c:56:a8:d0:e3:a2:
                    80:9d:92:fd:58:10:6c:6c:b8:ca:f6:5d:e5:21:53:
                    5a:a1:4e:cc:50:5b:b6:56:a1:ec:64:cb:e1:de:4f:
                    3f:a3:ee:c6:14:4f:df:4a:4c:10:fd:a6:f9:4e:97:
                    be:f6:69:1b:6b:e3:f4:04:a6:5d:1b:54:ee:6c:7b:
                    5c:f1:e9:3d:19:9f:a6:d7:8f:63:67:72:3c:a9:95:
                    dc:3d:28:8e:28:0f:62:0a:cd:42:bc:e9:9c:ef:2a:
                    62:cd:ea:49:8a:b7:70:67:98:1c:2e:ff:ba:89:11:
                    d3:e6:43:33:d9:af:15:2a:1a:b6:7e:7d:0a:c3:46:
                    ab:7b:ca:f5:c0:c8:23:48:bd:74:ec:b0:36:12:62:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:37:0B:4D:2D:94:29:44:C0:0D:13:71:73:49:21:0F:EC:2F:04:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8eceb70-2e45-3db6-a398-9ffb1a0d1613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c9:ff:2c:d2:bb:d3:3b:ab:bb:51:ee:5c:46:86:d4:50:62:
         44:f7:e4:af:be:b3:a2:d2:af:1b:bd:d7:af:c8:f9:ec:26:e5:
         ea:9d:69:a8:d0:c3:66:7a:ab:8d:f0:49:bc:f4:49:e3:89:f1:
         22:72:a4:e1:14:65:9b:d7:ee:2e:81:50:b1:66:f1:92:b4:fc:
         01:73:fd:62:99:7b:39:99:fd:3a:78:4a:25:2d:ba:9d:a0:f8:
         06:0e:8b:1d:f6:e0:d2:39:1e:87:49:5a:04:4c:6b:eb:3a:9d:
         4b:2a:05:fe:d5:32:ee:b3:11:da:d5:f7:76:b7:ce:23:e6:0f:
         58:97:2d:54:53:6b:09:f6:93:bf:bc:24:1e:f3:91:c2:bf:35:
         fd:31:d2:80:44:ba:13:87:b0:dd:7a:0c:7e:b1:fe:ca:70:c1:
         50:16:92:6f:bc:54:00:cc:d0:02:96:ba:82:b3:b8:be:c3:6a:
         c0:ff:14:d2:dd:aa:d1:70:5e:76:66:5d:d8:60:4c:b2:7c:42:
         4d:f1:c8:a9:37:75:e5:4c:00:f9:7c:dd:96:ff:19:55:30:ea:
         2f:d3:5f:44:a0:60:42:de:54:c8:d9:2d:25:6b:5e:d3:ff:2c:
         19:90:d8:6e:04:a5:af:28:d8:47:b6:49:19:d0:b6:ee:40:28:
         f2:6c:99:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKsv1hB1t2191TAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OWI1NDcyNmQtYzhhZC00YzRlLWI4ZDItZjJlZDQyNzEwNjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMJElUOIYU5Fpi/ruoglvlYVi0gAoS5H4GeI
7F+jG4pZwwro5zB1OEqKlfABAlwHqr58s4CrLkvhjWqEbt15gQLgWUZpDcTKh3uS
6/Qu4FqEOS3gBnvVtto4JSc22aZbQ05CWJh0J7wQ8RHPS//SBu9cVqjQ46KAnZL9
WBBsbLjK9l3lIVNaoU7MUFu2VqHsZMvh3k8/o+7GFE/fSkwQ/ab5Tpe+9mkba+P0
BKZdG1TubHtc8ek9GZ+m149jZ3I8qZXcPSiOKA9iCs1CvOmc7ypizepJirdwZ5gc
Lv+6iRHT5kMz2a8VKhq2fn0Kw0are8r1wMgjSL107LA2EmKyDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP43C00tlClEwA0TcXNJIQ/sLwRJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzhlY2ViNzAtMmU0NS0z
ZGI2LWEzOTgtOWZmYjFhMGQxNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARim+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnJ/yzSu9M7q7tR7lxGhtRQYkT35K++s6LSrxu916/I+ewm5eqdaajQ
w2Z6q43wSbz0SeOJ8SJypOEUZZvX7i6BULFm8ZK0/AFz/WKZezmZ/Tp4SiUtup2g
+AYOix324NI5HodJWgRMa+s6nUsqBf7VMu6zEdrV93a3ziPmD1iXLVRTawn2k7+8
JB7zkcK/Nf0x0oBEuhOHsN16DH6x/spwwVAWkm+8VADM0AKWuoKzuL7DasD/FNLd
qtFwXnZmXdhgTLJ8Qk3xyKk3deVMAPl83Zb/GVUw6i/TX0SgYELeVMjZLSVrXtP/
LBmQ2G4Epa8o2Ee2SRnQtu5AKPJsmak=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:17 2025 by rpki-client