Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa
File:                     556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa (raw, json)
Hash identifier:          FylR+YnaAcCNDOhweGWJfBcNSrzFHut+KV4Z4XOShDA=
Subject key identifier:   51:1E:86:0A:B0:02:36:B4:1A:0C:38:48:4C:02:0C:A2:A1:07:2F:2A
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F43285848222FEA4909FB603DD8232D80
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     399244
IP address blocks:        72.5.46.0/24 maxlen: 24
                          72.5.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:ea:49:09:fb:60:3d:d8:23:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=1720c911-ca5b-4fd2-a9dc-329390a5b914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:61:e6:2c:ad:6a:f2:a1:0b:ea:77:b5:c5:
                    ff:47:70:7b:b2:f1:00:36:10:3c:18:7e:32:bf:fe:
                    e7:e7:d0:6e:e4:e0:2c:f0:71:96:3c:ae:ed:cc:b9:
                    52:32:0d:2b:b9:91:eb:bd:4b:8d:ba:5e:9d:95:25:
                    f3:fd:d0:3d:5e:2f:06:62:e1:ad:e2:e9:06:2b:5b:
                    bc:6a:07:cb:89:06:64:ea:e5:77:98:7b:9f:f8:08:
                    58:90:28:ef:e1:7f:4b:80:b7:c9:41:31:88:60:8e:
                    34:1a:83:d4:cc:c4:24:05:2b:98:77:a9:4e:05:f3:
                    3d:9d:bd:9d:09:0d:29:73:e0:9e:00:7f:56:3f:23:
                    32:fa:51:e0:87:08:66:87:45:8b:5b:2f:7f:2d:bd:
                    5f:db:99:4c:76:1b:ad:c9:49:ad:2f:6e:36:11:bd:
                    1a:3b:9c:6f:34:2b:89:86:05:82:5c:41:7d:5c:f1:
                    ba:d9:c0:72:25:d9:ef:3b:ce:8a:40:4b:78:71:ff:
                    2a:1b:0f:9f:d5:96:ff:9e:9b:a0:d7:86:12:09:27:
                    2a:ed:c0:f8:b6:e2:41:69:87:4b:81:06:43:ec:ba:
                    2a:9e:b6:7a:58:c2:69:8c:ca:1b:a2:43:ed:19:c8:
                    ce:c9:9d:4a:ea:fa:64:cf:4e:de:d1:ef:e9:8e:b3:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1E:86:0A:B0:02:36:B4:1A:0C:38:48:4C:02:0C:A2:A1:07:2F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/556b7fe7-641a-31ae-9a98-7aeae8ea2e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.5.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a7:78:27:65:4b:4b:b7:3e:9a:28:fe:f2:e9:de:49:e9:1e:
         69:6f:f3:2c:b0:41:02:2a:f4:3d:f4:da:2a:88:09:66:62:43:
         c2:9d:de:65:5c:ff:05:86:9d:09:c3:2e:a3:e2:c9:41:f5:9d:
         fc:d1:93:1c:73:d5:81:d6:e8:9b:17:ed:9d:ec:13:be:99:84:
         0d:06:50:54:0e:ce:be:b0:0c:a3:19:21:4c:94:a5:d4:d2:05:
         f3:39:6b:38:6d:65:88:10:66:38:77:f5:9e:90:5d:6f:7d:e5:
         91:a1:a4:92:42:68:9d:47:6a:91:7b:ee:a7:6d:6b:5a:63:f7:
         0b:8f:4b:87:c7:1a:0b:53:04:94:77:6f:4c:e1:47:ce:1b:f8:
         7e:fa:b2:4f:f9:d1:51:c9:32:eb:18:2a:95:34:4e:ea:05:0f:
         f3:f2:e5:7b:cd:c5:14:7d:4d:4e:d9:32:84:d2:b9:1d:b1:7c:
         50:17:4b:c7:4a:08:aa:e2:e7:59:53:46:0d:48:7e:37:9c:a6:
         43:a1:07:22:e7:8a:b3:79:b0:b6:7f:b5:bc:d9:0e:3a:d5:eb:
         67:dc:3a:08:3f:46:79:20:b6:51:b5:05:a8:21:9a:50:66:91:
         68:ee:76:99:cc:48:e3:ee:58:21:bf:6c:a8:85:37:de:57:93:
         0f:6b:58:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+pJCftgPdgjLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh
MzhkMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
MTcyMGM5MTEtY2E1Yi00ZmQyLWE5ZGMtMzI5MzkwYTViOTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP9h5iytavKhC+p3tcX/R3B7svEANhA8GH4y
v/7n59Bu5OAs8HGWPK7tzLlSMg0ruZHrvUuNul6dlSXz/dA9Xi8GYuGt4ukGK1u8
agfLiQZk6uV3mHuf+AhYkCjv4X9LgLfJQTGIYI40GoPUzMQkBSuYd6lOBfM9nb2d
CQ0pc+CeAH9WPyMy+lHghwhmh0WLWy9/Lb1f25lMdhutyUmtL242Eb0aO5xvNCuJ
hgWCXEF9XPG62cByJdnvO86KQEt4cf8qGw+f1Zb/npug14YSCScq7cD4tuJBaYdL
gQZD7LoqnrZ6WMJpjMobokPtGcjOyZ1K6vpkz07e0e/pjrM4TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEehgqwAja0Ggw4SEwCDKKhBy8qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk
ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvNTU2YjdmZTctNjQxYS0z
MWFlLTlhOTgtN2FlYWU4ZWEyZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh
MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi
YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl
MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSAUuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6neCdlS0u3Ppoo/vLp3knpHmlv8yywQQIq9D302iqICWZiQ8Kd3mVc
/wWGnQnDLqPiyUH1nfzRkxxz1YHW6JsX7Z3sE76ZhA0GUFQOzr6wDKMZIUyUpdTS
BfM5azhtZYgQZjh39Z6QXW995ZGhpJJCaJ1HapF77qdta1pj9wuPS4fHGgtTBJR3
b0zhR84b+H76sk/50VHJMusYKpU0TuoFD/Py5XvNxRR9TU7ZMoTSuR2xfFAXS8dK
CKri51lTRg1IfjecpkOhByLnirN5sLZ/tbzZDjrV62fcOgg/RnkgtlG1BaghmlBm
kWjudpnMSOPuWCG/bKiFN95Xkw9rWEU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:34 2025 by rpki-client