Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6ac0390-8519-3e4c-a3f3-4c3390b1bc8b.roa
File:                     d6ac0390-8519-3e4c-a3f3-4c3390b1bc8b.roa (raw, json)
Hash identifier:          It1FmJgHdqag4qIOaPgp3AGu8klyhAQsdXPEuxaTKGE=
Subject key identifier:   37:88:42:F9:4E:5B:BC:F1:F6:8E:87:58:98:2C:21:2C:4C:BE:46:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143ACC7A9596D5CB53F67E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6ac0390-8519-3e4c-a3f3-4c3390b1bc8b.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        24.62.168.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:cc:7a:95:96:d5:cb:53:f6:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=18030e25-e0df-4fb3-98bb-ea2f880300ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:60:40:80:5e:ac:02:cd:6b:5c:23:aa:85:
                    7a:f2:45:6a:ee:0e:97:40:7f:95:cd:c1:79:bf:79:
                    90:21:79:c8:14:83:d4:00:ae:76:9b:c2:5d:3b:0f:
                    e4:e3:58:6a:52:de:14:aa:ca:90:a4:de:6d:d9:9c:
                    83:09:2c:bd:e3:9c:64:51:87:3f:6f:ac:69:d4:1a:
                    83:fd:cb:3e:fc:dc:ad:6c:40:a5:f4:52:34:d6:98:
                    ca:b3:a9:c2:fe:73:3d:52:70:9c:dd:83:e8:7f:21:
                    ca:c2:74:e9:35:56:f2:fd:27:23:0b:6b:08:32:cb:
                    3d:d5:0f:ae:33:4c:8f:16:a2:ab:9f:78:f5:b9:65:
                    a6:ce:bb:8a:c0:e7:b2:cd:6c:f6:27:92:82:07:a8:
                    28:0e:03:38:84:9a:f4:f8:5d:f1:85:3d:03:2d:b3:
                    fb:da:e9:a9:3b:c4:da:3e:a1:22:e8:86:92:35:48:
                    f9:dc:83:43:a2:34:f7:86:b2:ba:d1:23:2d:d2:12:
                    24:cc:ae:2f:d8:d7:15:9e:cf:c5:75:f8:ee:10:d5:
                    60:a4:aa:81:c1:5b:70:71:2a:38:cd:4d:10:87:f5:
                    37:4f:29:a6:4e:2c:72:5a:70:af:b5:ca:14:a8:b8:
                    ed:32:73:c1:53:62:1c:df:75:7f:23:c3:08:e1:40:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:88:42:F9:4E:5B:BC:F1:F6:8E:87:58:98:2C:21:2C:4C:BE:46:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6ac0390-8519-3e4c-a3f3-4c3390b1bc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.62.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:63:4a:83:13:38:ec:6b:3d:81:82:5e:bb:46:3c:4b:ee:ba:
         f2:00:33:d4:82:21:74:a2:4d:14:9c:30:f5:ba:54:f5:cc:d9:
         28:8c:7c:8e:ef:8f:00:97:6d:e6:e8:99:82:51:55:79:22:cd:
         19:65:1e:a1:57:e0:cd:f6:97:13:99:22:19:40:65:fd:ca:2e:
         d3:ee:67:88:84:d4:82:c2:68:64:c7:b2:ff:b6:57:f3:ca:e4:
         9e:2e:e3:87:a9:74:d3:5f:7c:39:55:97:30:00:78:03:b0:fb:
         31:31:e9:af:e7:2b:1f:5b:ff:1c:39:53:e8:af:5f:17:73:a9:
         47:4a:a2:23:7b:bf:3c:18:07:59:5d:3f:85:85:86:33:22:e5:
         fd:e6:2e:f6:7e:36:bb:d1:12:0c:b4:65:8c:fd:06:9b:98:24:
         e3:3f:1a:3c:0e:8b:31:06:31:57:ab:0c:35:57:f3:e2:2a:c4:
         0d:4d:d6:23:a5:23:90:29:ab:21:26:b7:af:38:ba:3a:bd:bb:
         ad:d7:6e:e7:cb:a1:29:7f:09:09:44:47:fb:e9:f5:bd:0b:7a:
         db:95:9f:c8:5e:0e:8f:89:cb:6d:f5:e9:85:11:49:64:46:11:
         45:b1:bb:09:58:a7:a3:44:59:88:1c:f6:77:55:3f:ae:1d:5d:
         36:74:0d:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOsx6lZbVy1P2fkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MTgwMzBlMjUtZTBkZi00ZmIzLTk4YmItZWEyZjg4MDMwMGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ5gQIBerALNa1wjqoV68kVq7g6XQH+VzcF5
v3mQIXnIFIPUAK52m8JdOw/k41hqUt4UqsqQpN5t2ZyDCSy945xkUYc/b6xp1BqD
/cs+/NytbECl9FI01pjKs6nC/nM9UnCc3YPofyHKwnTpNVby/ScjC2sIMss91Q+u
M0yPFqKrn3j1uWWmzruKwOeyzWz2J5KCB6goDgM4hJr0+F3xhT0DLbP72umpO8Ta
PqEi6IaSNUj53INDojT3hrK60SMt0hIkzK4v2NcVns/FdfjuENVgpKqBwVtwcSo4
zU0Qh/U3TymmTixyWnCvtcoUqLjtMnPBU2Ic33V/I8MI4UCcOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDeIQvlOW7zx9o6HWJgsISxMvkY+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDZhYzAzOTAtODUxOS0z
ZTRjLWEzZjMtNGMzMzkwYjFiYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGD6oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdjSoMTOOxrPYGCXrtGPEvuuvIAM9SCIXSiTRScMPW6VPXM2SiMfI7v
jwCXbebomYJRVXkizRllHqFX4M32lxOZIhlAZf3KLtPuZ4iE1ILCaGTHsv+2V/PK
5J4u44epdNNffDlVlzAAeAOw+zEx6a/nKx9b/xw5U+ivXxdzqUdKoiN7vzwYB1ld
P4WFhjMi5f3mLvZ+NrvREgy0ZYz9BpuYJOM/GjwOizEGMVerDDVX8+IqxA1N1iOl
I5ApqyEmt684ujq9u63XbufLoSl/CQlER/vp9b0LetuVn8heDo+Jy2316YURSWRG
EUWxuwlYp6NEWYgc9ndVP64dXTZ0DQs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:02:34 2025 by rpki-client