Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85d92fe7-e6e0-3987-ae01-d34c18f81325.roa
File:                     85d92fe7-e6e0-3987-ae01-d34c18f81325.roa (raw, json)
Hash identifier:          f7oQeVX1ql1jZuTu3SVasg55enxJNkcoD2Pmuj//HJQ=
Subject key identifier:   1A:77:34:5C:9E:DF:2A:BA:06:36:B7:38:69:BE:EB:63:DF:3C:88:1C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848281C4FA2640157CFD5841A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85d92fe7-e6e0-3987-ae01-d34c18f81325.roa
Signing time:             Tue 10 Dec 2024 04:56:16 +0000
ROA not before:           Tue 10 Dec 2024 04:56:16 +0000
ROA not after:            Mon 10 Mar 2025 03:56:16 +0000
asID:                     13335
IP address blocks:        172.64.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:1c:4f:a2:64:01:57:cf:d5:84:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:56:16 2024 GMT
            Not After : Mar 10 03:56:16 2025 GMT
        Subject: CN=8d337ac0-0254-49a7-92ea-e9eafafb5a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:75:37:39:cb:01:07:2b:cb:56:f3:bd:ec:
                    fb:fc:c3:35:ad:da:84:d9:b8:a0:f4:cf:3a:80:c2:
                    63:a4:39:26:77:60:77:4d:ab:0e:a3:43:af:ac:d5:
                    87:b1:92:1b:64:38:b2:3e:c4:67:9d:f3:e1:72:42:
                    7d:bb:ef:d9:af:14:6c:55:31:bf:30:38:47:f6:e1:
                    92:ec:76:34:32:a2:11:1d:22:52:eb:d7:a9:12:bb:
                    f3:0f:ba:f0:7d:97:d0:94:fa:22:cc:d5:1f:46:f3:
                    9d:c6:1b:32:7a:65:69:a4:90:22:9d:bb:bb:9f:af:
                    0d:43:45:9a:5d:6c:3d:5d:36:fd:2f:c4:52:cc:a6:
                    42:62:52:3b:0c:59:61:74:74:ea:f6:73:18:f6:34:
                    77:64:54:81:d8:d5:32:c9:6b:4f:08:2c:7a:7b:2a:
                    93:c2:83:dc:bd:58:cd:a1:49:89:22:af:da:cf:fb:
                    14:be:05:bf:12:d3:48:0e:94:5e:f6:c7:3d:d8:a0:
                    17:68:26:f3:5b:46:25:df:2f:77:4e:53:04:14:bc:
                    13:d0:17:08:f6:fc:19:43:20:c4:43:c8:e3:80:c7:
                    b5:47:43:19:96:ff:bd:a4:52:78:d6:a0:f7:80:66:
                    cd:6a:99:52:f0:b7:14:35:6d:20:4b:1f:7a:ef:db:
                    37:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:77:34:5C:9E:DF:2A:BA:06:36:B7:38:69:BE:EB:63:DF:3C:88:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85d92fe7-e6e0-3987-ae01-d34c18f81325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:12:ae:5b:fd:77:5a:81:0a:a8:97:80:40:3d:7d:4d:a6:56:
         c8:ef:bf:b8:cc:81:b4:b5:a5:0d:55:94:ee:8b:06:ab:2f:b9:
         90:ce:17:27:32:fb:2b:01:e3:91:c9:6d:30:be:c0:1b:3a:3d:
         1b:d1:9b:84:2e:17:09:b6:ec:1c:a0:27:94:fd:90:5f:bd:89:
         5b:67:a6:99:aa:e0:9e:e5:a3:4b:2e:af:69:47:87:11:56:d1:
         af:98:c1:a3:1e:2b:19:a9:e0:a2:c4:9a:bc:39:6a:8a:38:51:
         0e:6a:4b:24:7c:85:38:af:f8:18:dc:ea:07:2c:9a:f5:03:3d:
         8b:10:86:7f:d2:64:84:e5:b3:eb:62:9b:ba:c9:bd:00:a5:d5:
         30:6e:8a:81:9b:08:03:cb:1a:d2:83:99:d0:4e:d5:a5:b0:b9:
         66:64:04:5a:02:1a:79:63:64:1d:90:b6:c6:74:d0:9a:4c:9c:
         68:37:af:da:a2:f7:7f:17:84:b8:1f:51:bb:f1:ad:01:e5:9a:
         4e:43:54:15:37:c9:d3:49:52:96:d7:92:0a:80:dd:d9:8e:e5:
         59:e0:a9:5b:d1:df:17:f5:05:01:45:57:70:3a:2f:fb:2c:34:
         ae:f3:f4:f4:75:40:a7:03:c7:7a:dd:df:c2:92:64:33:17:6f:
         58:1f:f5:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoHE+iZAFXz9WEGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA0NTYxNloXDTI1MDMxMDAzNTYxNlowLzEtMCsGA1UEAxMk
OGQzMzdhYzAtMDI1NC00OWE3LTkyZWEtZTllYWZhZmI1YTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBl1NznLAQcry1bzvez7/MM1rdqE2big9M86
gMJjpDkmd2B3TasOo0OvrNWHsZIbZDiyPsRnnfPhckJ9u+/ZrxRsVTG/MDhH9uGS
7HY0MqIRHSJS69epErvzD7rwfZfQlPoizNUfRvOdxhsyemVppJAinbu7n68NQ0Wa
XWw9XTb9L8RSzKZCYlI7DFlhdHTq9nMY9jR3ZFSB2NUyyWtPCCx6eyqTwoPcvVjN
oUmJIq/az/sUvgW/EtNIDpRe9sc92KAXaCbzW0Yl3y93TlMEFLwT0BcI9vwZQyDE
Q8jjgMe1R0MZlv+9pFJ41qD3gGbNaplS8LcUNW0gSx9679s3iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBp3NFye3yq6Bja3OGm+62PfPIgcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODVkOTJmZTctZTZlMC0z
OTg3LWFlMDEtZDM0YzE4ZjgxMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYSrlv9d1qBCqiXgEA9fU2mVsjvv7jMgbS1pQ1VlO6LBqsvuZDOFycy
+ysB45HJbTC+wBs6PRvRm4QuFwm27BygJ5T9kF+9iVtnppmq4J7lo0sur2lHhxFW
0a+YwaMeKxmp4KLEmrw5aoo4UQ5qSyR8hTiv+Bjc6gcsmvUDPYsQhn/SZITls+ti
m7rJvQCl1TBuioGbCAPLGtKDmdBO1aWwuWZkBFoCGnljZB2QtsZ00JpMnGg3r9qi
938XhLgfUbvxrQHlmk5DVBU3ydNJUpbXkgqA3dmO5VngqVvR3xf1BQFFV3A6L/ss
NK7z9PR1QKcDx3rd38KSZDMXb1gf9Q8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:12 2025 by rpki-client