Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa
File:                     32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa (raw, json)
Hash identifier:          5ERol6BfZZNkxZjVZNzyIA7fPQbIMRmjTSwdbsMap/Q=
Subject key identifier:   73:F4:2A:AE:F2:CE:D9:EE:F5:74:35:CA:0D:75:65:5E:6D:B1:A7:DE
Certificate issuer:       /CN=79af2149-f711-4230-b22d-36786f0219ac
Certificate serial:       010D0C9F43285848494568450C2FFDD13FBC6200
Authority key identifier: 57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     398182
IP address blocks:        64.186.10.0/24 maxlen: 24
                          198.135.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:68:45:0c:2f:fd:d1:3f:bc:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79af2149-f711-4230-b22d-36786f0219ac
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=f5910a0f-ea2a-4dc2-8057-023756a00c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:76:b6:0d:58:d0:d4:ae:44:67:3a:37:53:b3:
                    dd:2f:0c:16:d5:d4:51:03:66:97:42:c1:05:bb:a0:
                    73:a6:c3:8a:d8:cd:73:73:54:14:56:47:a0:f8:67:
                    fb:df:3d:86:07:ea:10:f6:de:7e:d0:f3:54:db:5f:
                    26:3c:e7:f1:f9:1a:5a:98:74:ab:2e:c8:fb:80:85:
                    a1:88:03:fe:61:28:ed:ed:78:91:b3:11:b2:52:1e:
                    1d:2e:1c:33:ac:a9:1b:3d:ce:e8:45:5a:24:a9:f7:
                    74:01:34:1d:77:88:d7:96:92:bb:74:f5:67:56:4f:
                    3d:19:e3:51:dd:b8:6b:94:01:9f:5e:59:53:4b:37:
                    8f:30:35:5a:45:f8:4b:47:9d:95:d5:19:2e:07:e6:
                    c6:3a:ba:4b:9e:c6:a2:e9:9b:b8:28:be:26:ac:d7:
                    26:09:9f:32:b8:e9:8e:60:34:1c:46:18:80:25:e5:
                    1b:7c:ea:bc:fc:df:d7:6a:0a:09:63:aa:09:d4:24:
                    54:44:69:bf:04:9d:e4:d7:58:be:9d:02:59:2e:a9:
                    73:11:a2:af:2d:6c:d1:1a:1a:2f:b9:7e:e7:68:0e:
                    34:ac:59:96:32:76:ce:0a:23:33:6b:3e:4e:e2:61:
                    9c:9e:b3:4f:ad:c3:dc:82:6f:26:1f:18:32:e0:40:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F4:2A:AE:F2:CE:D9:EE:F5:74:35:CA:0D:75:65:5E:6D:B1:A7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl

            X509v3 Authority Key Identifier:
                keyid:57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.10.0/24
                  198.135.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:8a:33:71:b6:9b:73:7b:28:be:7a:cf:a6:54:21:71:ab:
         1d:01:09:2e:be:af:dc:a6:31:9a:18:7c:b1:e4:1a:05:ab:6e:
         3a:65:81:ac:46:7b:ae:ea:bd:6d:8a:4f:02:eb:28:a5:08:d4:
         93:55:8e:c7:bc:c0:91:db:87:8c:ec:6b:de:62:74:ef:a7:ff:
         e8:ad:d7:78:06:04:de:2e:15:d0:a6:a0:6c:0d:7a:5b:26:3f:
         5e:ba:89:5a:d7:df:2a:da:61:26:ad:4f:9c:52:6a:c7:29:10:
         f8:0a:6a:6b:eb:48:68:ed:72:74:f6:f9:14:47:36:1b:8f:0b:
         78:40:6f:a0:f6:13:8f:07:30:b3:cd:4b:b7:28:a7:f4:34:f5:
         8b:2a:33:48:01:ca:15:ed:de:8f:20:0b:25:c5:d3:0b:d1:8e:
         fc:3b:30:05:69:30:39:f9:8d:81:d8:e5:f4:fb:66:82:65:ae:
         7a:bf:50:63:42:6d:4f:a2:98:2c:52:4d:6e:21:be:bc:4c:80:
         62:40:15:6e:a8:97:6e:a4:89:a5:75:0b:cb:42:a4:50:1b:33:
         5c:0e:27:c0:b1:71:0c:a4:4c:ab:11:38:e0:d4:62:13:88:12:
         ae:1a:99:53:6e:94:04:67:2b:f7:29:83:73:6c:04:8c:6a:98:
         7b:4f:77:d5
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhJRWhFDC/90T+8YgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzlhZjIxNDktZjcxMS00MjMwLWIyMmQtMzY3ODZmMDIx
OWFjMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZjU5MTBhMGYtZWEyYS00ZGMyLTgwNTctMDIzNzU2YTAwYzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXa2DVjQ1K5EZzo3U7PdLwwW1dRRA2aXQsEF
u6BzpsOK2M1zc1QUVkeg+Gf73z2GB+oQ9t5+0PNU218mPOfx+RpamHSrLsj7gIWh
iAP+YSjt7XiRsxGyUh4dLhwzrKkbPc7oRVokqfd0ATQdd4jXlpK7dPVnVk89GeNR
3bhrlAGfXllTSzePMDVaRfhLR52V1RkuB+bGOrpLnsai6Zu4KL4mrNcmCZ8yuOmO
YDQcRhiAJeUbfOq8/N/XagoJY6oJ1CRURGm/BJ3k11i+nQJZLqlzEaKvLWzRGhov
uX7naA40rFmWMnbOCiMzaz5O4mGcnrNPrcPcgm8mHxgy4EC51wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHP0Kq7yztnu9XQ1yg11ZV5tsafeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OWFm
MjE0OS1mNzExLTQyMzAtYjIyZC0zNjc4NmYwMjE5YWMvMzJlZWNlYjEtM2FjZC0z
ZDdlLThlNjgtNWYwODYzZDczNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzlhZjIxNDktZjcxMS00MjMwLWIy
MmQtMzY3ODZmMDIxOWFjLzc5YWYyMTQ5LWY3MTEtNDIzMC1iMjJkLTM2Nzg2ZjAy
MTlhYy5jcmwwHwYDVR0jBBgwFoAUV4uAqhRzWbejGq79NBP1W9oqD0owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83OWFmMjE0OS1mNzExLTQyMzAtYjIyZC0zNjc4
NmYwMjE5YWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQLoKAwQA
xoeYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJTBijNxtptzeyi+es+mVCFxqx0BCS6+r9ymMZoYfLHkGgWr
bjplgaxGe67qvW2KTwLrKKUI1JNVjse8wJHbh4zsa95idO+n/+it13gGBN4uFdCm
oGwNelsmP166iVrX3yraYSatT5xSascpEPgKamvrSGjtcnT2+RRHNhuPC3hAb6D2
E48HMLPNS7cop/Q09YsqM0gByhXt3o8gCyXF0wvRjvw7MAVpMDn5jYHY5fT7ZoJl
rnq/UGNCbU+imCxSTW4hvrxMgGJAFW6ol26kiaV1C8tCpFAbM1wOJ8CxcQykTKsR
OODUYhOIEq4amVNulARnK/cpg3NsBIxqmHtPd9U=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:35:06 2025 by rpki-client