Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/62403efb-353b-3b4c-9028-462b0298549f.roa
File:                     62403efb-353b-3b4c-9028-462b0298549f.roa (raw, json)
Hash identifier:          sSXjHVvg8qpQjbWUJXQOFJDB4bmbnzF1Wqmu7mUnU1s=
Subject key identifier:   3F:4E:FF:92:7F:8D:09:89:9C:6A:68:1F:62:F2:16:62:5F:39:77:A1
Certificate issuer:       /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial:       010D0C9F432858484C10208EBB4D420A10141100
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/62403efb-353b-3b4c-9028-462b0298549f.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     40501
IP address blocks:        216.235.84.0/24 maxlen: 24
                          216.235.86.0/24 maxlen: 24
                          216.235.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:20:8e:bb:4d:42:0a:10:14:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=8936a664-bcc0-453f-9056-af5aff5b24aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:aa:e9:89:62:cf:a2:2f:b7:7a:34:40:30:82:
                    4f:ed:24:7c:99:b3:3a:b4:89:00:e7:d2:12:81:11:
                    7a:4a:8b:e2:12:9b:65:4f:8a:2d:48:39:d4:89:af:
                    19:84:88:65:a3:19:c0:bc:8b:ac:ae:fc:8f:34:e2:
                    29:77:86:27:7a:57:b7:b3:d9:71:a3:b4:72:05:12:
                    47:f4:28:23:91:3d:d1:31:02:ff:72:ce:3e:ec:b0:
                    a8:b1:ec:53:67:7f:90:0c:a9:4a:c6:e9:1f:96:2e:
                    cb:91:c6:a2:6a:76:32:f3:f9:c7:82:42:1b:52:0d:
                    df:26:6f:d6:1d:51:7f:97:51:3c:78:25:b9:b5:42:
                    c5:7e:0f:3d:25:00:c0:61:68:92:5d:ce:27:72:34:
                    6f:c5:74:dc:2c:6e:96:dc:3a:01:2e:68:87:5a:b8:
                    07:db:ab:86:60:d0:5e:80:23:db:6d:a5:cf:77:4d:
                    7f:a0:0d:33:89:a8:5f:ed:74:f7:88:2c:5a:0e:cc:
                    ec:30:98:ff:6d:92:48:19:e2:ec:f6:09:d4:f2:e3:
                    92:9d:f8:de:dd:8d:54:98:43:a8:02:6c:28:83:51:
                    83:e3:c5:b7:d1:4f:80:8d:93:fb:b5:ab:2f:58:d4:
                    3f:58:aa:3c:ae:23:70:a3:07:fb:8b:68:1a:08:c4:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:FF:92:7F:8D:09:89:9C:6A:68:1F:62:F2:16:62:5F:39:77:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/62403efb-353b-3b4c-9028-462b0298549f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl

            X509v3 Authority Key Identifier:
                keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.84.0/24
                  216.235.86.0/24
                  216.235.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:98:ce:cf:ce:3f:ce:a6:76:b2:3b:b0:61:29:46:f3:57:c1:
         e5:11:82:6c:15:3b:21:58:ba:ca:83:1a:02:da:20:86:29:cf:
         b9:e0:cc:94:3a:0e:e8:5e:27:5c:98:e4:c5:29:cf:49:ca:6d:
         12:be:aa:f7:59:0d:69:f5:89:f2:98:ef:b3:8e:02:11:3d:5a:
         35:13:3d:32:47:e2:3c:89:f7:f6:7b:01:99:72:6c:d6:b3:a2:
         7e:8b:f8:e3:2f:99:55:ef:26:5e:54:bd:30:36:81:4b:ec:54:
         84:85:09:01:5b:8a:19:55:4b:1f:a6:ba:8a:1a:f5:fe:b6:65:
         3a:8f:b3:b6:03:34:ea:0a:16:0e:5f:07:de:21:98:22:9f:04:
         be:6b:1e:48:7f:99:e8:4f:43:22:69:35:a8:71:8f:99:a3:34:
         de:62:e1:ff:ec:f6:c4:83:91:d3:e4:81:ba:b4:90:71:ca:14:
         94:2d:7e:76:d6:8e:b7:77:f8:4c:55:72:fb:c5:93:24:66:56:
         b0:1c:7f:0a:39:c8:cf:43:47:36:9a:7e:51:75:fa:5c:71:b5:
         a4:2f:d1:c4:ba:eb:d1:90:94:d4:4d:d9:85:8b:8a:d7:aa:b1:
         df:38:30:1b:e2:0e:3a:63:a0:ad:b6:a9:7c:78:4c:34:f0:b6:
         ae:92:27:ea
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEhMECCOu01CChAUEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1
NTY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ODkzNmE2NjQtYmNjMC00NTNmLTkwNTYtYWY1YWZmNWIyNGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlarpiWLPoi+3ejRAMIJP7SR8mbM6tIkA59IS
gRF6SoviEptlT4otSDnUia8ZhIhloxnAvIusrvyPNOIpd4Ynele3s9lxo7RyBRJH
9CgjkT3RMQL/cs4+7LCosexTZ3+QDKlKxukfli7LkcaianYy8/nHgkIbUg3fJm/W
HVF/l1E8eCW5tULFfg89JQDAYWiSXc4ncjRvxXTcLG6W3DoBLmiHWrgH26uGYNBe
gCPbbaXPd01/oA0ziahf7XT3iCxaDszsMJj/bZJIGeLs9gnU8uOSnfje3Y1UmEOo
Amwog1GD48W30U+AjZP7tasvWNQ/WKo8riNwowf7i2gaCMSLYwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFD9O/5J/jQmJnGpoH2LyFmJfOXehMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz
NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvNjI0MDNlZmItMzUzYi0z
YjRjLTkwMjgtNDYyYjAyOTg1NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh
OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3
NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj
MTFkNzU1NjYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2OtUAwQA
2OtWAwQA2OtYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACKYzs/OP86mdrI7sGEpRvNXweURgmwVOyFYusqD
GgLaIIYpz7ngzJQ6DuheJ1yY5MUpz0nKbRK+qvdZDWn1ifKY77OOAhE9WjUTPTJH
4jyJ9/Z7AZlybNazon6L+OMvmVXvJl5UvTA2gUvsVISFCQFbihlVSx+muooa9f62
ZTqPs7YDNOoKFg5fB94hmCKfBL5rHkh/mehPQyJpNahxj5mjNN5i4f/s9sSDkdPk
gbq0kHHKFJQtfnbWjrd3+ExVcvvFkyRmVrAcfwo5yM9DRzaaflF1+lxxtaQv0cS6
69GQlNRN2YWLiteqsd84MBviDjpjoK22qXx4TDTwtq6SJ+o=
-----END CERTIFICATE-----
Generated at Tue May 6 19:40:52 2025 by rpki-client