Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b/ce865ca8-f230-302e-8627-a95cabf791cb.roa
File:                     ce865ca8-f230-302e-8627-a95cabf791cb.roa (raw, json)
Hash identifier:          6m6bHzpKqfxBZtV+Too+f+i9QlKs+PS1l6CgZiP4ORU=
Subject key identifier:   28:E9:7B:FC:30:02:33:1A:41:C3:38:C4:90:CB:41:51:E7:85:90:59
Certificate issuer:       /CN=5a177cd0-a102-410d-8bff-7c53172ffb2b
Certificate serial:       010D0C9F432858484C102596C38908EEC5930A00
Authority key identifier: A4:D6:FD:A1:06:71:D2:10:92:A3:77:CD:AD:86:90:1C:95:EA:20:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b/ce865ca8-f230-302e-8627-a95cabf791cb.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     46812
IP address blocks:        74.115.40.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:25:96:c3:89:08:ee:c5:93:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a177cd0-a102-410d-8bff-7c53172ffb2b
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=9864051b-ea3b-4700-bcee-b07f15d99b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:59:f0:34:fe:a5:1d:5f:56:32:68:2f:2b:30:
                    e2:15:25:0b:8c:f5:30:7c:f9:5b:ba:b5:c7:c4:7f:
                    a6:40:55:36:fe:fa:44:9d:a1:6d:52:50:ad:b7:1a:
                    79:b8:43:53:ce:9f:c2:4a:b4:9a:fa:c6:fe:73:13:
                    e8:47:e8:50:e8:e3:e1:33:dc:f2:21:6c:64:d9:75:
                    f7:22:1a:50:04:fa:fb:98:73:8e:fc:d3:8a:26:f7:
                    df:98:d7:03:5d:f6:b9:98:0f:64:18:42:10:8e:84:
                    08:e8:37:c1:af:a0:1f:13:76:c3:f0:f4:41:2e:f8:
                    10:9e:df:2f:a8:71:0e:fd:d8:32:f1:24:cb:91:6a:
                    e2:04:e9:5f:a9:95:56:2b:13:7e:70:23:6b:db:c2:
                    1b:74:b2:47:b9:de:60:0c:2e:66:ab:6c:de:1d:76:
                    cb:15:db:cc:4d:96:ff:7d:ee:c7:b4:f6:55:43:19:
                    38:d1:bd:2a:2f:7e:96:72:dd:84:4c:8e:64:91:3f:
                    7f:f5:5f:58:45:d4:64:4a:99:e0:fb:5a:03:51:b1:
                    87:bc:ca:8a:81:e8:94:4c:00:66:07:02:e3:82:e3:
                    a3:d6:a2:62:80:4a:95:5b:d2:da:96:24:81:12:b4:
                    cd:37:5f:27:25:22:b7:67:a9:e3:dd:bd:4f:c2:88:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E9:7B:FC:30:02:33:1A:41:C3:38:C4:90:CB:41:51:E7:85:90:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b/ce865ca8-f230-302e-8627-a95cabf791cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b/5a177cd0-a102-410d-8bff-7c53172ffb2b.crl

            X509v3 Authority Key Identifier:
                keyid:A4:D6:FD:A1:06:71:D2:10:92:A3:77:CD:AD:86:90:1C:95:EA:20:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:e1:49:8d:65:0f:75:e3:90:2c:54:e3:9e:9a:a1:36:32:
         5e:73:c8:43:04:8e:03:35:41:50:ed:cf:80:19:12:2b:f5:2f:
         89:b4:41:a7:57:80:f2:c1:91:7e:a1:6d:bc:34:82:7c:a5:16:
         62:70:60:4f:50:a1:47:00:1b:82:9e:0c:b9:65:25:44:7a:ef:
         29:d2:09:4e:db:fd:e9:a1:83:75:58:96:ce:91:7d:13:91:0e:
         10:50:87:7a:cc:27:9c:e7:47:85:9a:40:4f:49:66:de:d7:5a:
         6a:2f:66:1a:8e:99:f6:77:f7:e7:81:70:ab:01:74:0c:8e:7f:
         61:3f:6a:41:87:d0:f6:f2:21:f2:66:e2:d9:ba:65:36:10:9f:
         64:68:08:47:e2:5c:64:df:bf:94:d7:f4:c8:af:19:13:b8:5a:
         f0:fe:93:9a:08:c0:cf:d8:ae:fd:94:10:24:92:67:56:9d:26:
         d8:51:93:a4:82:c0:b8:74:7d:fe:5f:f0:a1:ea:d2:93:e8:14:
         b5:d9:54:a0:89:62:b8:2e:92:37:59:b1:1f:1a:b7:63:29:a4:
         4a:35:47:2a:86:26:37:c5:54:94:b6:cc:f0:d4:39:61:a6:45:
         76:a3:aa:1a:f0:4f:7a:06:02:59:43:45:77:ce:78:d0:ff:26:
         da:1f:26:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMECWWw4kI7sWTCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWExNzdjZDAtYTEwMi00MTBkLThiZmYtN2M1MzE3MmZm
YjJiMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
OTg2NDA1MWItZWEzYi00NzAwLWJjZWUtYjA3ZjE1ZDk5YjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVnwNP6lHV9WMmgvKzDiFSULjPUwfPlburXH
xH+mQFU2/vpEnaFtUlCttxp5uENTzp/CSrSa+sb+cxPoR+hQ6OPhM9zyIWxk2XX3
IhpQBPr7mHOO/NOKJvffmNcDXfa5mA9kGEIQjoQI6DfBr6AfE3bD8PRBLvgQnt8v
qHEO/dgy8STLkWriBOlfqZVWKxN+cCNr28IbdLJHud5gDC5mq2zeHXbLFdvMTZb/
fe7HtPZVQxk40b0qL36Wct2ETI5kkT9/9V9YRdRkSpng+1oDUbGHvMqKgeiUTABm
BwLjguOj1qJigEqVW9LaliSBErTNN18nJSK3Z6nj3b1PwohmbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjpe/wwAjMaQcM4xJDLQVHnhZBZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YTE3
N2NkMC1hMTAyLTQxMGQtOGJmZi03YzUzMTcyZmZiMmIvY2U4NjVjYTgtZjIzMC0z
MDJlLTg2MjctYTk1Y2FiZjc5MWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWExNzdjZDAtYTEwMi00MTBkLThi
ZmYtN2M1MzE3MmZmYjJiLzVhMTc3Y2QwLWExMDItNDEwZC04YmZmLTdjNTMxNzJm
ZmIyYi5jcmwwHwYDVR0jBBgwFoAUpNb9oQZx0hCSo3fNrYaQHJXqILEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YTE3N2NkMC1hMTAyLTQxMGQtOGJmZi03YzUz
MTcyZmZiMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnMoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZ74UmNZQ9145AsVOOemqE2Ml5zyEMEjgM1QVDtz4AZEiv1L4m0QadX
gPLBkX6hbbw0gnylFmJwYE9QoUcAG4KeDLllJUR67ynSCU7b/emhg3VYls6RfROR
DhBQh3rMJ5znR4WaQE9JZt7XWmovZhqOmfZ39+eBcKsBdAyOf2E/akGH0PbyIfJm
4tm6ZTYQn2RoCEfiXGTfv5TX9MivGRO4WvD+k5oIwM/Yrv2UECSSZ1adJthRk6SC
wLh0ff5f8KHq0pPoFLXZVKCJYrgukjdZsR8at2MppEo1RyqGJjfFVJS2zPDUOWGm
RXajqhrwT3oGAllDRXfOeND/JtofJrY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:25:01 2025 by rpki-client