Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/36385032-d3cb-3645-a487-3c64bfe2ccfb.roa
File:                     36385032-d3cb-3645-a487-3c64bfe2ccfb.roa (raw, json)
Hash identifier:          edyp9Vo22+Lngf5XhJC0lkTKBcfoYTSiq4A4jutpy+s=
Subject key identifier:   59:C8:88:E9:98:82:82:AB:24:FA:EC:CF:E4:72:A7:CB:60:B5:2A:CB
Certificate issuer:       /CN=94738821-1f1e-430f-b49e-05e511cc80b4
Certificate serial:       010D0C9F4328584824FA899BDA2DCBD8952BCA18
Authority key identifier: 80:3E:2B:5E:60:69:89:D0:A0:A4:C5:19:14:52:A3:C1:0B:59:D7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/36385032-d3cb-3645-a487-3c64bfe2ccfb.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     209242
IP address blocks:        209.222.114.0/24 maxlen: 24
                          209.222.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:89:9b:da:2d:cb:d8:95:2b:ca:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94738821-1f1e-430f-b49e-05e511cc80b4
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=385c0545-2004-4666-baba-4fff386b227d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ef:3e:ab:37:bd:b8:80:77:b0:30:b1:02:62:
                    8a:a5:35:7b:f0:62:77:d3:cf:18:c8:fe:73:0a:20:
                    16:9f:93:12:cd:24:07:84:07:2b:07:bc:44:b6:3a:
                    b3:21:07:64:95:fa:8a:f4:18:6e:bb:76:86:e2:e1:
                    51:e4:6f:c8:f8:4c:df:02:db:22:9d:be:31:a7:a5:
                    36:23:21:9a:c8:26:5e:4e:47:69:18:e0:c3:28:23:
                    eb:e1:dd:29:fe:cc:1c:d6:eb:12:b3:e8:30:81:9c:
                    cd:fe:bc:18:b9:6d:28:9b:f1:20:42:63:42:0d:fc:
                    e7:a2:ff:ef:6f:cf:3a:a6:bc:2a:44:3b:43:cd:9f:
                    46:0e:6a:83:7f:5c:ad:92:c7:d5:e4:33:ae:2d:98:
                    92:33:d4:92:c8:1c:55:73:c0:22:e4:16:8b:1b:df:
                    ec:6a:b9:ce:36:95:e0:fa:a3:c6:a9:ea:6f:d5:cf:
                    51:7d:1b:88:16:cf:d3:aa:82:73:51:9a:8c:52:64:
                    ec:1d:9e:d8:fd:9e:4f:e5:a4:5f:13:14:0b:81:04:
                    6d:2c:42:fe:b8:4b:d5:64:75:89:8b:ab:98:40:e4:
                    53:59:fb:43:4c:9b:af:cf:c8:a9:0d:27:0e:82:7b:
                    9a:70:37:41:e8:e4:0f:48:df:dc:5b:69:0b:90:c8:
                    95:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C8:88:E9:98:82:82:AB:24:FA:EC:CF:E4:72:A7:CB:60:B5:2A:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/36385032-d3cb-3645-a487-3c64bfe2ccfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.crl

            X509v3 Authority Key Identifier:
                keyid:80:3E:2B:5E:60:69:89:D0:A0:A4:C5:19:14:52:A3:C1:0B:59:D7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:76:72:c5:69:5c:ec:74:6f:39:95:61:9e:86:08:79:93:60:
         bb:27:35:08:6c:c1:61:8a:6c:de:76:da:7f:17:20:6b:15:7d:
         dc:c5:1e:c3:59:1a:82:42:f3:b8:0e:c3:ba:fe:11:7d:57:0b:
         fc:b1:c4:a4:da:45:34:5a:93:49:25:0b:96:9f:d3:0c:9b:2e:
         aa:14:19:ae:69:ba:11:10:f5:b9:e4:37:70:38:29:b0:04:b1:
         68:fb:3c:50:91:9c:03:c9:76:8b:ee:7e:d4:1f:17:a9:83:92:
         d4:9f:9c:36:56:db:c3:9d:62:b6:26:45:2f:2d:34:ac:d0:90:
         3b:33:6d:ca:3a:9c:ba:0e:37:8a:fc:33:f3:55:b2:3b:5b:73:
         bf:25:e0:5e:ad:71:53:b0:0c:94:7b:fd:c9:ff:e8:0c:85:2f:
         35:9a:09:e6:11:98:4b:d1:ea:eb:91:27:95:a6:51:a3:fb:d5:
         02:d2:94:4e:18:90:e4:98:da:eb:c4:34:d2:10:2d:88:01:34:
         9a:0e:c0:f6:48:4b:40:c3:1b:2f:1f:01:8c:8c:cf:7d:50:34:
         0c:83:07:be:7a:72:b6:c0:b0:99:e9:4e:43:bb:20:23:03:64:
         bc:79:a7:a7:3a:fd:02:4b:f0:05:9e:70:55:96:1c:5a:41:42:
         ca:36:78:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgk+omb2i3L2JUryhgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ3Mzg4MjEtMWYxZS00MzBmLWI0OWUtMDVlNTExY2M4
MGI0MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk
Mzg1YzA1NDUtMjAwNC00NjY2LWJhYmEtNGZmZjM4NmIyMjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe8+qze9uIB3sDCxAmKKpTV78GJ3088YyP5z
CiAWn5MSzSQHhAcrB7xEtjqzIQdklfqK9Bhuu3aG4uFR5G/I+EzfAtsinb4xp6U2
IyGayCZeTkdpGODDKCPr4d0p/swc1usSs+gwgZzN/rwYuW0om/EgQmNCDfznov/v
b886prwqRDtDzZ9GDmqDf1ytksfV5DOuLZiSM9SSyBxVc8Ai5BaLG9/sarnONpXg
+qPGqepv1c9RfRuIFs/TqoJzUZqMUmTsHZ7Y/Z5P5aRfExQLgQRtLEL+uEvVZHWJ
i6uYQORTWftDTJuvz8ipDScOgnuacDdB6OQPSN/cW2kLkMiVuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFnIiOmYgoKrJPrsz+Ryp8tgtSrLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85NDcz
ODgyMS0xZjFlLTQzMGYtYjQ5ZS0wNWU1MTFjYzgwYjQvMzYzODUwMzItZDNjYi0z
NjQ1LWE0ODctM2M2NGJmZTJjY2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTQ3Mzg4MjEtMWYxZS00MzBmLWI0
OWUtMDVlNTExY2M4MGI0Lzk0NzM4ODIxLTFmMWUtNDMwZi1iNDllLTA1ZTUxMWNj
ODBiNC5jcmwwHwYDVR0jBBgwFoAUgD4rXmBpidCgpMUZFFKjwQtZ168wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85NDczODgyMS0xZjFlLTQzMGYtYjQ5ZS0wNWU1
MTFjYzgwYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0d5yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHp2csVpXOx0bzmVYZ6GCHmTYLsnNQhswWGKbN522n8XIGsVfdzFHsNZ
GoJC87gOw7r+EX1XC/yxxKTaRTRak0klC5af0wybLqoUGa5puhEQ9bnkN3A4KbAE
sWj7PFCRnAPJdovuftQfF6mDktSfnDZW28OdYrYmRS8tNKzQkDszbco6nLoON4r8
M/NVsjtbc78l4F6tcVOwDJR7/cn/6AyFLzWaCeYRmEvR6uuRJ5WmUaP71QLSlE4Y
kOSY2uvENNIQLYgBNJoOwPZIS0DDGy8fAYyMz31QNAyDB756crbAsJnpTkO7ICMD
ZLx5p6c6/QJL8AWecFWWHFpBQso2eF4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:14 2025 by rpki-client