Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/036de617-e76d-30ec-9b98-0b9dba94ed13.roa
File:                     036de617-e76d-30ec-9b98-0b9dba94ed13.roa (raw, json)
Hash identifier:          af+1r4AuV8nDEnzADNZfDPUs3NzXR6j/ge+hEBreIwg=
Subject key identifier:   5B:72:EE:84:8A:F8:3F:51:00:E7:AF:A2:81:36:F0:36:EB:9A:85:D2
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F432858482EBFFF2719BCA9D77F4C7AC0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/036de617-e76d-30ec-9b98-0b9dba94ed13.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     36050
IP address blocks:        205.243.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:ff:27:19:bc:a9:d7:7f:4c:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=9248ebec-d78a-4eda-a11c-327b251cc683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:a4:b7:fe:78:79:44:48:84:ac:11:0a:a4:
                    44:bb:a4:7c:b4:0c:65:33:04:ad:a0:2c:0d:3b:c5:
                    56:52:51:28:1a:1e:f4:f1:38:25:84:4e:15:4b:28:
                    8c:ba:74:16:7a:41:c8:87:9b:68:ae:cc:90:0e:60:
                    0c:c3:6b:4d:34:50:b8:98:5c:91:44:5e:61:36:c4:
                    22:5b:e8:21:37:7b:25:00:c4:73:43:93:cc:b5:25:
                    d4:04:ed:58:bf:5c:20:5d:cb:a8:0a:03:66:98:8c:
                    c5:fa:d9:2e:36:24:70:da:11:7a:06:2d:af:7d:ce:
                    dc:f4:32:72:81:06:a4:69:29:11:22:8b:a3:98:13:
                    6d:0b:cc:83:7e:d1:2a:19:ae:24:18:12:ca:df:f1:
                    e9:0e:e5:26:7f:67:cd:6a:32:bd:ac:7a:67:ba:8d:
                    df:30:8f:73:76:53:14:8d:a3:f0:77:0e:d2:7c:63:
                    05:1b:dc:09:8a:dd:3e:3c:67:d2:10:2c:84:8c:50:
                    f7:57:a5:c5:a4:ca:c5:82:9d:69:bc:32:b6:65:29:
                    4c:d0:75:66:01:3b:91:aa:b7:97:9c:ff:04:40:61:
                    6d:cf:98:03:3e:e8:0c:b3:d5:23:ae:3b:1e:ae:09:
                    42:74:a5:3f:e2:76:d0:09:9f:d5:60:f3:6d:b8:18:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:72:EE:84:8A:F8:3F:51:00:E7:AF:A2:81:36:F0:36:EB:9A:85:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/036de617-e76d-30ec-9b98-0b9dba94ed13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.243.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d1:74:45:6a:da:d1:94:cc:9c:3e:86:84:ab:8b:0f:27:9d:
         3c:4e:61:65:ed:d3:fa:de:79:a8:2f:47:46:ac:78:3b:e5:d0:
         df:59:ec:dd:fe:98:d2:c9:be:47:d8:4f:13:34:37:98:98:dc:
         0e:db:f2:ce:46:90:86:7f:c0:5f:fe:0a:17:f3:48:ad:8c:bc:
         95:6f:1d:06:fd:60:4a:d6:8a:31:76:91:ca:e7:70:d9:93:c5:
         94:da:80:b1:9a:24:42:f2:41:cc:06:48:0e:ae:37:95:28:cc:
         21:68:77:a6:a5:f2:1a:90:2b:a2:ca:cb:a4:35:59:e6:a6:3d:
         0a:27:75:b3:ac:f8:22:67:b3:ec:d4:3e:72:5c:c4:af:3f:ae:
         60:e8:85:25:53:a4:87:8e:34:7d:ca:bd:f6:cf:bc:f3:65:ca:
         e6:fd:cb:d7:56:98:3f:ee:63:ac:46:27:67:cb:b8:8e:b0:2b:
         9f:08:94:8b:50:a4:bf:76:27:d5:2e:c1:ae:29:01:26:e3:c6:
         97:72:ca:d5:79:29:5c:ea:75:01:19:76:b4:a7:68:2d:e2:c4:
         e3:ef:93:c3:5d:2c:96:d4:24:a5:9b:f5:a1:de:c0:52:7b:5f:
         b9:42:4b:a4:8a:eb:b9:4b:16:5a:3e:aa:d6:30:be:97:f7:a7:
         cc:a4:ba:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguv/8nGbyp139MesAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
OTI0OGViZWMtZDc4YS00ZWRhLWExMWMtMzI3YjI1MWNjNjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXykt/54eURIhKwRCqREu6R8tAxlMwStoCwN
O8VWUlEoGh708TglhE4VSyiMunQWekHIh5torsyQDmAMw2tNNFC4mFyRRF5hNsQi
W+ghN3slAMRzQ5PMtSXUBO1Yv1wgXcuoCgNmmIzF+tkuNiRw2hF6Bi2vfc7c9DJy
gQakaSkRIoujmBNtC8yDftEqGa4kGBLK3/HpDuUmf2fNajK9rHpnuo3fMI9zdlMU
jaPwdw7SfGMFG9wJit0+PGfSECyEjFD3V6XFpMrFgp1pvDK2ZSlM0HVmATuRqreX
nP8EQGFtz5gDPugMs9UjrjserglCdKU/4nbQCZ/VYPNtuBjxDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFty7oSK+D9RAOevooE28DbrmoXSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMDM2ZGU2MTctZTc2ZC0z
MGVjLTliOTgtMGI5ZGJhOTRlZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzfNPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrRdEVq2tGUzJw+hoSriw8nnTxOYWXt0/reeagvR0aseDvl0N9Z7N3+
mNLJvkfYTxM0N5iY3A7b8s5GkIZ/wF/+ChfzSK2MvJVvHQb9YErWijF2kcrncNmT
xZTagLGaJELyQcwGSA6uN5UozCFod6al8hqQK6LKy6Q1WeamPQondbOs+CJns+zU
PnJcxK8/rmDohSVTpIeONH3KvfbPvPNlyub9y9dWmD/uY6xGJ2fLuI6wK58IlItQ
pL92J9Uuwa4pASbjxpdyytV5KVzqdQEZdrSnaC3ixOPvk8NdLJbUJKWb9aHewFJ7
X7lCS6SK67lLFlo+qtYwvpf3p8ykurg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:52:20 2025 by rpki-client