Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf79479d-0990-3363-b8f2-7fae6b057a0c.roa
File:                     cf79479d-0990-3363-b8f2-7fae6b057a0c.roa (raw, json)
Hash identifier:          d2l2p87rA5lwL107NJu0ajsiiIh5LYljEDiV0ZMZ0+M=
Subject key identifier:   34:D2:EF:60:BD:81:7B:25:F3:DA:49:3A:10:D0:FC:4F:47:6C:0A:D0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F154FA178E219C9F860D36F0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf79479d-0990-3363-b8f2-7fae6b057a0c.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        67.217.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:54:fa:17:8e:21:9c:9f:86:0d:36:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=a1129d67-192b-4c76-b98a-917d0cb1bfcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c2:c3:93:8f:ac:f5:f8:fc:ce:14:3e:e6:19:
                    d9:b2:e7:32:f7:09:0f:4d:6c:cf:40:c7:eb:2e:29:
                    9f:c7:29:26:c4:0d:fa:45:1b:b3:e9:51:34:20:86:
                    27:3c:a6:6f:30:33:c6:b0:0e:0d:d2:fa:a5:19:57:
                    de:18:dd:75:d9:0f:14:2c:56:12:aa:77:fe:d5:db:
                    df:e2:c8:a3:6b:21:12:12:3c:b6:e9:66:46:d6:7e:
                    3f:f9:0a:9a:ae:09:db:26:cd:6c:df:e8:58:cd:4e:
                    0f:b6:82:89:61:1f:ea:16:2e:4f:69:3a:af:29:1f:
                    21:c0:17:0b:25:b9:2c:b2:19:fd:34:3a:9c:8c:34:
                    1a:bc:96:04:90:83:b0:df:77:67:a0:9b:df:e7:d0:
                    9c:3c:54:c7:26:f5:40:45:d1:55:a9:a9:79:84:50:
                    0f:3e:77:c0:57:92:67:2b:2b:33:0a:10:85:48:7a:
                    76:db:15:b7:f5:9c:cc:cc:05:df:ea:c4:1a:26:cd:
                    2f:0d:4c:be:a5:a4:e0:8a:eb:27:50:8c:5c:b6:a7:
                    88:51:06:3e:e6:fc:a0:bb:f7:6a:cf:fe:46:28:65:
                    ed:85:28:eb:d2:fe:56:6f:bf:78:61:a6:a5:1c:09:
                    bb:b1:cc:fb:3c:61:7b:d3:f7:fc:51:55:d2:f9:a8:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D2:EF:60:BD:81:7B:25:F3:DA:49:3A:10:D0:FC:4F:47:6C:0A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf79479d-0990-3363-b8f2-7fae6b057a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:20:e4:b6:b5:ea:08:fd:67:6b:cc:0f:e7:aa:06:18:e8:
         75:ce:ba:50:be:f4:b9:e4:7c:5a:54:b3:f0:58:ad:9f:35:40:
         ce:10:1a:eb:3a:19:b9:a1:67:b2:4b:56:90:b0:05:3f:0b:09:
         0e:03:a8:65:f1:22:3e:7d:09:f7:d8:b7:59:5c:68:94:98:22:
         2f:2d:b5:d3:86:82:f7:e4:ab:3e:e8:e5:89:61:22:26:c3:ed:
         92:e1:c4:bc:34:d5:94:21:ea:aa:88:f5:e6:1b:f3:64:6c:de:
         46:f2:b7:8b:66:d5:3b:ba:77:ee:7a:a2:b5:a4:56:1f:7f:3d:
         38:d1:45:30:08:f9:c0:f8:26:43:60:87:3d:1b:77:8e:d6:82:
         df:af:3a:1a:9b:64:8a:a6:f0:8b:2e:0d:7f:2c:0b:8d:bf:f9:
         bf:80:6d:01:5a:db:e9:cc:75:a8:3c:3d:13:05:c3:08:56:a2:
         df:69:d1:92:06:54:26:67:61:15:17:0b:fe:37:3d:a4:49:15:
         ad:2d:3f:17:c6:2e:d7:7c:ad:cc:80:38:3f:54:86:de:dd:4c:
         7d:a2:8e:17:cb:f0:67:2a:76:65:12:80:a3:fe:2f:9a:fe:72:
         2d:9b:8f:ec:9e:21:3c:54:1b:25:93:68:b5:b2:b0:9b:73:21:
         25:86:e1:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPoXjiGcn4YNNvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
YTExMjlkNjctMTkyYi00Yzc2LWI5OGEtOTE3ZDBjYjFiZmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sLDk4+s9fj8zhQ+5hnZsucy9wkPTWzPQMfr
LimfxykmxA36RRuz6VE0IIYnPKZvMDPGsA4N0vqlGVfeGN112Q8ULFYSqnf+1dvf
4sijayESEjy26WZG1n4/+QqargnbJs1s3+hYzU4PtoKJYR/qFi5PaTqvKR8hwBcL
Jbksshn9NDqcjDQavJYEkIOw33dnoJvf59CcPFTHJvVARdFVqal5hFAPPnfAV5Jn
KyszChCFSHp22xW39ZzMzAXf6sQaJs0vDUy+paTgiusnUIxctqeIUQY+5vygu/dq
z/5GKGXthSjr0v5Wb794YaalHAm7scz7PGF70/f8UVXS+ahlrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTS72C9gXsl89pJOhDQ/E9HbArQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Y3OTQ3OWQtMDk5MC0z
MzYzLWI4ZjItN2ZhZTZiMDU3YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9mBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbFIOS2teoI/WdrzA/nqgYY6HXOulC+9LnkfFpUs/BYrZ81QM4QGus6
GbmhZ7JLVpCwBT8LCQ4DqGXxIj59CffYt1lcaJSYIi8ttdOGgvfkqz7o5YlhIibD
7ZLhxLw01ZQh6qqI9eYb82Rs3kbyt4tm1Tu6d+56orWkVh9/PTjRRTAI+cD4JkNg
hz0bd47Wgt+vOhqbZIqm8IsuDX8sC42/+b+AbQFa2+nMdag8PRMFwwhWot9p0ZIG
VCZnYRUXC/43PaRJFa0tPxfGLtd8rcyAOD9Uht7dTH2ijhfL8GcqdmUSgKP+L5r+
ci2bj+yeITxUGyWTaLWysJtzISWG4T0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:23:37 2025 by rpki-client