Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca46ad9a-ff33-3b25-aca0-eaabf91b2fc8.roa
File:                     ca46ad9a-ff33-3b25-aca0-eaabf91b2fc8.roa (raw, json)
Hash identifier:          f+xfX/UKuly4QGF+cbGAN6yjKeBDV4jd72+KY+8fVrI=
Subject key identifier:   C9:27:55:B2:FA:DB:C3:C0:1F:FA:E1:D5:14:E9:F1:F6:9D:87:0D:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143ECA8BFE4DF4352E61F0F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca46ad9a-ff33-3b25-aca0-eaabf91b2fc8.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        76.119.204.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:ca:8b:fe:4d:f4:35:2e:61:f0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=b5b574fe-e4f8-479d-a601-946fa671cf2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:e0:b6:d3:48:53:98:43:b0:2f:bd:c9:86:
                    dc:c1:e8:e0:04:ea:7b:21:07:97:aa:1f:84:0e:f5:
                    85:f6:ce:4a:f1:af:07:56:8b:53:0e:06:b9:2b:5e:
                    ae:27:cd:5a:95:18:8f:9a:83:b9:fb:e7:af:ce:80:
                    2e:99:bf:da:cd:7b:3b:95:dd:12:b6:07:3a:c7:6a:
                    a6:b2:47:d5:be:54:0f:6b:26:4a:8d:74:0b:02:18:
                    28:5a:16:f4:83:15:27:62:5b:3b:8c:11:e8:4c:28:
                    b6:7b:c3:4d:95:cc:01:ee:39:76:dd:c0:92:ce:9a:
                    c9:17:77:fa:22:a2:95:40:0a:e7:61:56:7a:4c:a2:
                    49:19:c8:6b:cf:c1:89:38:7a:aa:76:5d:05:b3:af:
                    80:27:8e:8c:2d:12:f0:2a:e7:19:f3:ee:fc:9b:60:
                    ec:c0:cc:79:67:83:5b:0f:6a:e1:fe:6d:68:93:ff:
                    74:d6:d4:a4:3f:d5:a3:ab:a2:64:d7:1e:58:b9:4f:
                    54:b4:ce:f5:94:4d:e0:89:ac:a6:1e:56:4d:c6:31:
                    8b:75:d9:9d:7f:11:d9:a7:4b:f5:3f:f0:20:67:33:
                    f2:40:05:3d:4f:3b:f7:7c:ba:6d:e8:b8:27:79:3e:
                    1c:ce:3e:d8:66:aa:e1:ab:ee:e0:a0:21:1d:fd:40:
                    21:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:27:55:B2:FA:DB:C3:C0:1F:FA:E1:D5:14:E9:F1:F6:9D:87:0D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca46ad9a-ff33-3b25-aca0-eaabf91b2fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.119.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ac:0a:ff:5b:c1:f1:10:e5:35:e5:d8:ba:e5:e0:31:c9:79:
         cd:c9:e0:f7:f3:c7:61:13:1d:02:de:d8:72:03:00:1d:bd:92:
         9f:9e:52:5f:f8:f6:de:ec:77:14:1a:07:7d:8a:ac:3d:17:3e:
         77:91:79:2c:c5:6e:dd:51:36:bd:3a:60:3f:af:1b:26:0a:ca:
         e3:38:ac:e0:e5:27:54:00:b1:a5:83:38:6f:63:6c:12:42:7e:
         51:b9:c3:41:ee:52:42:fb:c8:af:0a:21:14:64:ff:50:48:d9:
         b2:f0:23:4b:ab:35:82:f1:76:4e:83:03:ec:e2:d1:9c:db:10:
         12:04:01:01:de:dd:88:f4:1f:a7:84:25:8d:e2:e0:b2:51:36:
         f4:fd:fa:24:b9:81:bb:a5:e9:13:ed:28:83:69:ce:03:93:44:
         df:d7:ca:d9:0b:be:7d:6c:df:7e:19:4b:b6:ba:5b:cb:62:78:
         95:94:d9:a0:0a:01:a8:b8:41:1c:9e:0f:59:af:07:29:ea:4e:
         c2:69:bd:44:be:24:7c:df:62:24:6b:9e:4b:7c:13:f1:29:96:
         65:98:ce:c7:c4:7f:08:d6:d8:92:08:ee:08:9c:bf:b5:c8:e0:
         56:8c:81:26:70:aa:e8:04:09:70:c7:86:ad:6b:0b:6a:b3:f7:
         26:ac:67:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPsqL/k30NS5h8PAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YjViNTc0ZmUtZTRmOC00NzlkLWE2MDEtOTQ2ZmE2NzFjZjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSHgttNIU5hDsC+9yYbcwejgBOp7IQeXqh+E
DvWF9s5K8a8HVotTDga5K16uJ81alRiPmoO5++evzoAumb/azXs7ld0Stgc6x2qm
skfVvlQPayZKjXQLAhgoWhb0gxUnYls7jBHoTCi2e8NNlcwB7jl23cCSzprJF3f6
IqKVQArnYVZ6TKJJGchrz8GJOHqqdl0Fs6+AJ46MLRLwKucZ8+78m2DswMx5Z4Nb
D2rh/m1ok/901tSkP9Wjq6Jk1x5YuU9UtM71lE3giaymHlZNxjGLddmdfxHZp0v1
P/AgZzPyQAU9Tzv3fLpt6LgneT4czj7YZqrhq+7goCEd/UAhrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMknVbL628PAH/rh1RTp8fadhw2uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E0NmFkOWEtZmYzMy0z
YjI1LWFjYTAtZWFhYmY5MWIyZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHfMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKGsCv9bwfEQ5TXl2Lrl4DHJec3J4Pfzx2ETHQLe2HIDAB29kp+eUl/4
9t7sdxQaB32KrD0XPneReSzFbt1RNr06YD+vGyYKyuM4rODlJ1QAsaWDOG9jbBJC
flG5w0HuUkL7yK8KIRRk/1BI2bLwI0urNYLxdk6DA+zi0ZzbEBIEAQHe3Yj0H6eE
JY3i4LJRNvT9+iS5gbul6RPtKINpzgOTRN/XytkLvn1s334ZS7a6W8tieJWU2aAK
Aai4QRyeD1mvBynqTsJpvUS+JHzfYiRrnkt8E/EplmWYzsfEfwjW2JII7gicv7XI
4FaMgSZwqugECXDHhq1rC2qz9yasZzE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:49 2025 by rpki-client