Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa
File:                     91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa (raw, json)
Hash identifier:          di9iS+ZqVf96QX4efZnH8Ap9bN1bqMOwClhUhojsDU0=
Subject key identifier:   2B:C4:C4:71:77:CC:52:47:D7:1A:9C:08:16:B8:6D:7C:7E:E6:D2:AB
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F432858487755DE0BE4154D6A11D61FC0
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     33362
IP address blocks:        198.174.212.0/23 maxlen: 24
                          198.174.214.0/23 maxlen: 24
                          204.221.17.0/24 maxlen: 24
                          204.221.18.0/23 maxlen: 24
                          204.221.144.0/22 maxlen: 24
                          206.9.80.0/24 maxlen: 24
                          206.145.178.0/23 maxlen: 24
                          206.145.224.0/23 maxlen: 24
                          206.146.48.0/22 maxlen: 24
                          209.32.64.0/21 maxlen: 24
                          209.32.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:de:0b:e4:15:4d:6a:11:d6:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=a4fa679f-d61a-423f-a348-b92f7200cc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c9:d7:e3:91:f7:b6:d5:53:0a:5a:ed:34:98:
                    a1:27:7b:c3:d6:19:f1:de:c2:23:a2:ab:2f:1d:40:
                    c3:1f:f5:96:53:18:6a:67:98:bc:6a:f9:d7:33:af:
                    f7:e8:d6:00:da:65:ac:48:f7:b1:84:f1:f4:46:67:
                    66:6a:36:a6:2d:30:51:cd:69:fa:e0:5e:8e:7f:48:
                    38:95:97:38:e9:74:80:8c:ae:e4:94:94:56:c8:25:
                    36:3e:02:bf:5b:c9:50:7a:88:50:9f:8b:e3:7a:7b:
                    36:ca:4e:56:7b:e4:bb:bc:c3:24:51:fe:cc:f9:e0:
                    2c:7d:a4:72:62:af:b8:cb:5e:a6:41:7a:1d:83:ea:
                    99:f5:d9:36:03:fc:32:fb:76:74:b8:f3:4e:8e:16:
                    49:13:7f:75:a6:ff:2e:78:c4:c9:34:c6:9a:ae:c3:
                    08:19:ae:0d:69:18:58:6e:a4:85:5b:3b:c3:f6:df:
                    b3:c2:4e:47:a0:78:76:54:dd:f2:25:39:4f:d5:94:
                    c4:47:ff:de:14:86:63:a3:d0:32:83:33:60:14:f9:
                    e9:2d:a0:9e:02:db:09:2b:47:7c:37:56:26:79:bd:
                    48:58:99:78:89:ab:c6:f1:38:c2:e3:ae:7d:f5:f0:
                    c5:cb:ca:aa:3b:70:b7:93:df:38:2e:d4:b6:92:ab:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C4:C4:71:77:CC:52:47:D7:1A:9C:08:16:B8:6D:7C:7E:E6:D2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.174.212.0/22
                  204.221.17.0-204.221.19.255
                  204.221.144.0/22
                  206.9.80.0/24
                  206.145.178.0/23
                  206.145.224.0/23
                  206.146.48.0/22
                  209.32.64.0/21
                  209.32.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8a:09:64:7a:6c:55:d5:3e:02:90:31:b9:bd:f2:94:64:73:
         68:6c:0e:b8:2a:75:7c:cb:a3:3a:45:90:4e:6a:b3:7c:f3:ad:
         55:be:29:04:b9:43:92:3f:17:c3:3d:d4:40:46:2a:73:3a:fa:
         43:cb:76:35:b6:c7:86:5e:3a:84:34:62:dd:96:39:3c:a5:ba:
         c5:8d:e6:0c:d8:eb:e0:01:1f:80:e7:61:f7:ab:7c:91:17:da:
         09:19:09:68:96:c4:a2:b5:44:3e:6a:2f:00:79:e6:f4:88:c3:
         be:85:ca:79:e0:3d:f3:eb:c5:4d:cc:6a:3c:df:16:8c:2f:eb:
         92:63:47:47:05:5a:3a:5d:f1:b0:5f:49:68:c5:c4:f3:34:72:
         b6:5f:56:a0:d1:49:0f:ff:97:59:7e:71:e3:fd:8c:a8:d7:53:
         c4:a1:06:ab:a3:1e:dc:5c:a2:6f:88:aa:40:e5:53:8f:0b:5d:
         5b:da:b4:20:3e:d0:32:ad:90:a0:55:ac:80:23:0f:b7:20:40:
         2b:4f:68:58:96:5a:5c:d6:97:fe:b0:c9:43:a7:82:3c:76:22:
         06:01:a2:73:3b:30:ed:99:10:bd:8a:73:20:f9:f2:45:8b:c7:
         eb:01:b9:cf:66:9e:db:75:23:99:4e:f7:ca:f9:a2:62:f8:bb:
         42:8a:ea:3e
-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWEh3Vd4L5BVNahHWH8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk
ZTNkMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk
YTRmYTY3OWYtZDYxYS00MjNmLWEzNDgtYjkyZjcyMDBjYzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsnX45H3ttVTClrtNJihJ3vD1hnx3sIjoqsv
HUDDH/WWUxhqZ5i8avnXM6/36NYA2mWsSPexhPH0RmdmajamLTBRzWn64F6Of0g4
lZc46XSAjK7klJRWyCU2PgK/W8lQeohQn4vjens2yk5We+S7vMMkUf7M+eAsfaRy
Yq+4y16mQXodg+qZ9dk2A/wy+3Z0uPNOjhZJE391pv8ueMTJNMaarsMIGa4NaRhY
bqSFWzvD9t+zwk5HoHh2VN3yJTlP1ZTER//eFIZjo9AygzNgFPnpLaCeAtsJK0d8
N1Ymeb1IWJl4iavG8TjC46599fDFy8qqO3C3k984LtS2kqtSlwIDAQABo4IDjTCC
A4kwHQYDVR0OBBYEFCvExHF3zFJH1xqcCBa4bXx+5tKrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0
MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvOTFmYTNmN2YtOWYyOC0z
ODM1LWEyYTctNDVkZjUyMjE3Y2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm
YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl
ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz
NGYxZWRlM2QuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCxq7UMAwD
BADM3REDBALM3RADBALM3ZADBADOCVADBAHOkbIDBAHOkeADBALOkjADBAPRIEAD
BAPRIHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEASYoJZHpsVdU+ApAxub3ylGRzaGwOuCp1fMujOkWQTmqz
fPOtVb4pBLlDkj8Xwz3UQEYqczr6Q8t2NbbHhl46hDRi3ZY5PKW6xY3mDNjr4AEf
gOdh96t8kRfaCRkJaJbEorVEPmovAHnm9IjDvoXKeeA98+vFTcxqPN8WjC/rkmNH
RwVaOl3xsF9JaMXE8zRytl9WoNFJD/+XWX5x4/2MqNdTxKEGq6Me3Fyib4iqQOVT
jwtdW9q0ID7QMq2QoFWsgCMPtyBAK09oWJZaXNaX/rDJQ6eCPHYiBgGiczsw7ZkQ
vYpzIPnyRYvH6wG5z2ae23UjmU73yvmiYvi7QorqPg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:52:17 2025 by rpki-client