Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83f0a48e-2bc8-33e6-8dde-0d6d2d843a2c.roa
File:                     83f0a48e-2bc8-33e6-8dde-0d6d2d843a2c.roa (raw, json)
Hash identifier:          dbCkDRVmRXu11ystF6eB4eLAnUX8E/DuUxZTqypZn2U=
Subject key identifier:   BE:B9:F3:6F:59:67:C1:C4:F3:68:C6:D8:58:0B:2E:6B:60:D1:2D:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B36870556461CC40F0480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83f0a48e-2bc8-33e6-8dde-0d6d2d843a2c.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        76.24.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:36:87:05:56:46:1c:c4:0f:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=1cfcd4bc-37c6-4b0e-8cc9-e20553d08a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:5e:41:95:e9:26:17:ed:17:4c:cb:2d:ec:
                    43:51:df:4b:3a:49:5d:f5:65:96:80:00:ef:84:d2:
                    16:ca:44:9d:31:46:5d:9d:87:f5:0f:78:1e:ca:be:
                    bc:cf:3d:0c:2b:5a:74:64:d4:fc:2e:89:04:f0:c0:
                    71:06:97:c4:50:cc:8a:2c:44:e2:b8:a4:f2:80:d3:
                    85:5d:fc:eb:5e:cf:c2:85:3c:cb:3c:0d:ba:92:f9:
                    30:32:f2:bc:33:4c:83:de:b6:f8:c1:e2:60:70:7b:
                    c0:b8:89:81:50:83:66:4c:8c:15:97:8a:a9:a5:99:
                    ff:a1:1b:98:32:82:62:e0:73:68:18:14:12:1f:3e:
                    1d:93:fe:5c:cc:f7:3f:10:72:79:fb:91:30:e8:30:
                    fc:dd:60:e0:e6:e8:54:f0:70:c6:f5:91:b6:84:49:
                    41:f4:f4:01:1c:ff:55:6d:bc:b9:1f:d3:ff:47:f6:
                    6c:81:64:b8:43:6c:24:45:c8:2b:73:a0:b5:dc:5a:
                    60:db:e7:47:4c:f9:b3:b8:7c:b2:cc:cc:30:fb:d1:
                    85:5a:95:28:b4:d8:0b:96:0c:d9:95:93:6c:eb:a2:
                    a1:f6:c8:37:e1:8c:b5:31:b3:9f:b2:2f:2f:52:99:
                    0c:87:14:2c:92:75:c1:28:7c:81:9b:b8:64:b8:74:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B9:F3:6F:59:67:C1:C4:F3:68:C6:D8:58:0B:2E:6B:60:D1:2D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83f0a48e-2bc8-33e6-8dde-0d6d2d843a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.24.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f2:f4:30:ae:2b:e6:38:c4:7d:cb:6b:d1:1b:6d:88:bf:79:
         88:0d:bf:28:43:44:eb:ff:d9:c4:d4:42:06:51:b8:5a:e4:cc:
         9c:47:dc:2a:95:1c:39:57:cf:29:6c:11:ed:94:d6:0b:54:10:
         ca:d5:e3:52:d0:47:86:22:10:46:85:9c:79:05:d4:11:87:44:
         19:68:5f:7d:0f:d5:d9:0a:ef:89:9c:4b:d3:f5:40:01:f7:84:
         39:b3:48:97:53:c1:36:78:4f:a1:e4:74:9c:bf:97:c9:e9:07:
         f7:81:c5:9e:e5:33:d6:91:71:98:9a:a7:f2:7a:64:01:c4:3c:
         e5:aa:dd:8e:55:35:04:a4:2e:fa:b7:0b:4f:d7:dd:f9:71:ea:
         b2:81:5c:90:61:2e:3d:3f:fd:12:e3:b5:fc:33:23:95:28:85:
         2c:c2:8c:65:55:b0:f7:a0:9f:3e:55:57:49:4a:0b:0b:93:6f:
         6d:94:77:49:e5:a3:ff:01:ec:2b:75:4c:0b:26:1b:ca:65:f2:
         81:5c:ab:f6:06:d0:13:be:5b:91:29:46:8f:e0:37:44:f9:96:
         4e:93:3b:04:bc:4c:6d:ae:66:59:84:9e:64:74:3b:f2:18:22:
         17:4e:ee:34:a3:58:25:40:0a:31:69:58:c7:18:f8:be:ed:f6:
         ce:fa:25:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOzaHBVZGHMQPBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MWNmY2Q0YmMtMzdjNi00YjBlLThjYzktZTIwNTUzZDA4YTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUZeQZXpJhftF0zLLexDUd9LOkld9WWWgADv
hNIWykSdMUZdnYf1D3geyr68zz0MK1p0ZNT8LokE8MBxBpfEUMyKLETiuKTygNOF
XfzrXs/ChTzLPA26kvkwMvK8M0yD3rb4weJgcHvAuImBUINmTIwVl4qppZn/oRuY
MoJi4HNoGBQSHz4dk/5czPc/EHJ5+5Ew6DD83WDg5uhU8HDG9ZG2hElB9PQBHP9V
bby5H9P/R/ZsgWS4Q2wkRcgrc6C13Fpg2+dHTPmzuHyyzMww+9GFWpUotNgLlgzZ
lZNs66Kh9sg34Yy1MbOfsi8vUpkMhxQsknXBKHyBm7hkuHTsLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL65829ZZ8HE82jG2FgLLmtg0S1kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODNmMGE0OGUtMmJjOC0z
M2U2LThkZGUtMGQ2ZDJkODQzYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBgsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEry9DCuK+Y4xH3La9EbbYi/eYgNvyhDROv/2cTUQgZRuFrkzJxH3CqV
HDlXzylsEe2U1gtUEMrV41LQR4YiEEaFnHkF1BGHRBloX30P1dkK74mcS9P1QAH3
hDmzSJdTwTZ4T6HkdJy/l8npB/eBxZ7lM9aRcZiap/J6ZAHEPOWq3Y5VNQSkLvq3
C0/X3flx6rKBXJBhLj0//RLjtfwzI5UohSzCjGVVsPegnz5VV0lKCwuTb22Ud0nl
o/8B7Ct1TAsmG8pl8oFcq/YG0BO+W5EpRo/gN0T5lk6TOwS8TG2uZlmEnmR0O/IY
IhdO7jSjWCVACjFpWMcY+L7t9s76JVE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:58:12 2025 by rpki-client