Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa
File:                     596c1584-3a09-38b4-9548-b028b4455bfe.roa (raw, json)
Hash identifier:          CvzxTxsSOPUtgbB5BPH6orhmm0GIYH4vMbIEYFUDLcU=
Subject key identifier:   FF:84:CD:F8:D4:CD:83:AD:1C:38:49:06:D9:60:77:C1:EB:3A:A2:A0
Certificate issuer:       /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial:       010D0C9F4328584832F04132BDEE6110F7B4F310
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     5065
IP address blocks:        208.99.8.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:41:32:bd:ee:61:10:f7:b4:f3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=f59e180d-27b9-48a5-83b6-f31b291f1e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:d8:31:ef:97:fa:52:d6:e2:63:3e:2d:96:
                    24:56:25:fb:ce:2e:8a:a6:4c:33:f0:dd:80:22:e2:
                    f0:28:c4:ed:75:ad:0d:a4:fc:4e:69:4b:bb:4d:25:
                    24:f9:65:4c:bd:23:ef:7e:a1:31:2e:c5:d7:88:bc:
                    47:c9:56:93:cc:09:d1:ff:3e:79:a1:35:23:5a:7a:
                    ac:16:f1:63:5a:a2:e1:51:96:82:52:40:fe:e5:1b:
                    de:a6:13:b3:3b:ae:75:5c:13:62:ff:7f:e6:9d:01:
                    d1:f6:61:b5:82:30:8b:80:9f:27:f0:4f:61:a9:ec:
                    b6:fa:ba:d4:7c:55:a3:99:17:40:1f:d9:be:8f:e8:
                    12:40:5d:85:89:94:a4:b4:9e:2d:5e:91:56:06:c3:
                    e0:af:f5:fc:69:96:f6:6c:6e:33:17:05:a5:cf:6b:
                    7c:81:28:05:c8:9f:73:40:38:24:a2:15:37:03:ef:
                    e3:ed:bc:05:e9:66:e7:d3:34:b5:cc:2e:83:cd:23:
                    c3:3f:cb:c0:29:c0:86:9b:4e:8c:dd:44:49:bc:91:
                    b0:05:fa:09:d6:53:3f:82:9c:10:5b:1d:23:45:57:
                    93:1c:68:04:74:f1:58:8b:5d:47:b7:ab:0f:c6:c5:
                    12:dd:0e:26:53:b8:5d:dd:ec:04:7b:1f:8c:17:13:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:84:CD:F8:D4:CD:83:AD:1C:38:49:06:D9:60:77:C1:EB:3A:A2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:de:40:1a:fd:26:f2:14:a5:6e:a6:78:9d:7c:2c:a0:a0:4d:
         00:b9:81:20:9a:0b:d1:4b:13:1a:33:ce:e8:54:21:88:12:e6:
         3b:32:2c:3a:79:19:66:f2:2b:c1:1c:be:48:50:a8:1f:17:8a:
         ec:98:be:dc:2c:a8:ab:1f:6f:c2:44:16:bd:76:3f:f7:2b:aa:
         65:5d:92:84:f9:4b:99:29:49:25:bd:50:83:0d:07:06:4f:b5:
         f0:93:18:bb:ad:52:1d:30:2c:f4:d5:e8:5e:46:75:cc:52:1b:
         1d:9b:54:cd:3c:40:64:bc:84:2a:ab:e3:6b:1d:e9:11:e6:16:
         39:0a:c6:74:6a:35:1f:5e:b4:d9:3c:e4:46:cd:11:10:0c:2c:
         53:4f:27:e6:ff:77:76:99:5f:11:a1:8e:6e:7a:49:e2:d1:31:
         8d:b2:4c:62:b7:46:ec:8c:37:55:c5:ea:38:45:02:7c:3c:e5:
         0e:f1:4b:27:80:34:2f:70:e5:67:5d:fa:a4:9b:29:5b:08:67:
         fa:dc:f5:8c:e8:24:cf:61:86:f4:ce:43:cd:6a:33:d4:5d:f1:
         cc:f9:9e:91:25:4d:45:45:72:f6:53:53:0d:30:0d:9f:b0:3c:
         3b:c9:33:94:61:ce:aa:05:b4:9c:1f:9f:d6:81:11:8e:a1:ef:
         8f:20:e3:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8EEyve5hEPe08xAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc2MzliMTUtMjE1YS00ODgxLWIxYTQtNzMxZTA0NmJm
NTFjMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjU5ZTE4MGQtMjdiOS00OGE1LTgzYjYtZjMxYjI5MWYxZTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJDYMe+X+lLW4mM+LZYkViX7zi6Kpkwz8N2A
IuLwKMTtda0NpPxOaUu7TSUk+WVMvSPvfqExLsXXiLxHyVaTzAnR/z55oTUjWnqs
FvFjWqLhUZaCUkD+5RvephOzO651XBNi/3/mnQHR9mG1gjCLgJ8n8E9hqey2+rrU
fFWjmRdAH9m+j+gSQF2FiZSktJ4tXpFWBsPgr/X8aZb2bG4zFwWlz2t8gSgFyJ9z
QDgkohU3A+/j7bwF6Wbn0zS1zC6DzSPDP8vAKcCGm06M3URJvJGwBfoJ1lM/gpwQ
Wx0jRVeTHGgEdPFYi11Ht6sPxsUS3Q4mU7hd3ewEex+MFxO1GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+EzfjUzYOtHDhJBtlgd8HrOqKgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NzYz
OWIxNS0yMTVhLTQ4ODEtYjFhNC03MzFlMDQ2YmY1MWMvNTk2YzE1ODQtM2EwOS0z
OGI0LTk1NDgtYjAyOGI0NDU1YmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTc2MzliMTUtMjE1YS00ODgxLWIx
YTQtNzMxZTA0NmJmNTFjLzk3NjM5YjE1LTIxNWEtNDg4MS1iMWE0LTczMWUwNDZi
ZjUxYy5jcmwwHwYDVR0jBBgwFoAUt0iV8CVDnSLLgJsLm2oc3Ae413swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85NzYzOWIxNS0yMTVhLTQ4ODEtYjFhNC03MzFl
MDQ2YmY1MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GMIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLeQBr9JvIUpW6meJ18LKCgTQC5gSCaC9FLExozzuhUIYgS5jsyLDp5
GWbyK8EcvkhQqB8XiuyYvtwsqKsfb8JEFr12P/crqmVdkoT5S5kpSSW9UIMNBwZP
tfCTGLutUh0wLPTV6F5GdcxSGx2bVM08QGS8hCqr42sd6RHmFjkKxnRqNR9etNk8
5EbNERAMLFNPJ+b/d3aZXxGhjm56SeLRMY2yTGK3RuyMN1XF6jhFAnw85Q7xSyeA
NC9w5Wdd+qSbKVsIZ/rc9YzoJM9hhvTOQ81qM9Rd8cz5npElTUVFcvZTUw0wDZ+w
PDvJM5RhzqoFtJwfn9aBEY6h748g4zc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:24 2025 by rpki-client