Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/d65b5879-bd91-30f3-adc6-c3604bba9a74.roa
File:                     d65b5879-bd91-30f3-adc6-c3604bba9a74.roa (raw, json)
Hash identifier:          e+b7hUxDQ4+bKc2GlaiscSoNv2RD8WtaYJXX4Z7zeQc=
Subject key identifier:   D6:68:57:B1:6C:EA:67:B8:C3:D4:77:AE:0B:CA:61:58:35:37:C2:EF
Certificate issuer:       /CN=4e69a311-ed99-4d08-bc96-aec2d6a1bfc0
Certificate serial:       010D0C9F43285848222FE88ADE86ADA4C4AB6700
Authority key identifier: 41:D6:BA:85:75:7B:5A:34:F1:35:BE:2C:F3:B9:C4:AB:8C:AB:71:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/d65b5879-bd91-30f3-adc6-c3604bba9a74.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     32238
IP address blocks:        162.120.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:e8:8a:de:86:ad:a4:c4:ab:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e69a311-ed99-4d08-bc96-aec2d6a1bfc0
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=1b5b0d74-8bd5-4321-8b16-00d9cb40261f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:93:78:55:8e:28:70:28:97:e8:dd:ef:c2:
                    d9:b7:c4:75:f1:36:57:9d:aa:71:ae:78:42:00:45:
                    bf:bd:b3:f0:33:17:7e:7d:9e:ee:ca:d7:e9:35:df:
                    21:44:79:5b:de:38:2c:2a:fa:5c:23:29:91:11:76:
                    7a:78:2f:be:f7:a7:31:12:76:35:02:5f:50:e4:f6:
                    36:f7:c8:b4:d8:83:0c:ba:d3:d9:c8:14:ff:1a:34:
                    27:e9:17:c4:62:66:03:71:4a:64:3b:ff:bd:76:79:
                    3a:61:4c:4e:28:3a:ed:e7:c0:fb:de:3b:94:1b:17:
                    09:b2:d3:1b:55:18:1e:60:6b:3f:e6:36:48:6a:79:
                    05:6e:38:aa:de:96:56:9d:91:de:36:60:e9:7a:95:
                    24:91:7b:06:22:47:56:4e:8c:cf:0b:29:4a:66:5c:
                    a5:dc:16:9b:ac:0b:fa:13:c6:17:a3:a9:5a:34:a3:
                    be:d2:d0:27:63:1a:d9:5e:95:81:54:bc:79:ec:a7:
                    da:fd:09:f6:c6:cc:eb:16:60:2a:c0:0d:45:6a:56:
                    60:ec:96:4b:12:73:95:8f:62:3f:49:55:2c:a5:41:
                    28:14:63:aa:f8:41:e3:67:e4:f6:6e:0b:79:d1:63:
                    0d:c9:d9:fe:1b:40:0a:fb:11:3c:9d:70:b8:a5:b6:
                    64:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:68:57:B1:6C:EA:67:B8:C3:D4:77:AE:0B:CA:61:58:35:37:C2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/d65b5879-bd91-30f3-adc6-c3604bba9a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.crl

            X509v3 Authority Key Identifier:
                keyid:41:D6:BA:85:75:7B:5A:34:F1:35:BE:2C:F3:B9:C4:AB:8C:AB:71:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:94:1f:e4:c8:1c:54:4e:a7:8b:21:5f:0d:6b:8a:8c:3a:6f:
         b2:db:a3:83:16:eb:30:f1:52:d7:6e:f6:0c:36:99:ec:05:6b:
         5b:e4:71:cc:1e:95:41:51:d3:40:dd:b5:87:db:5a:c8:5c:79:
         07:24:69:31:95:b9:dc:7d:cf:c8:91:71:8e:e8:01:35:bb:cf:
         56:05:09:2b:65:a5:9f:4f:02:19:62:4f:4c:9f:9c:76:0a:47:
         89:f3:df:19:fe:9a:10:da:0d:bc:58:a5:d2:00:b7:dd:0f:93:
         af:8c:5b:07:53:fd:2a:c2:43:e2:ea:e3:5f:9a:f6:c9:4d:14:
         7f:5e:3a:94:77:a0:8b:16:86:70:10:ab:a1:50:64:a3:06:8c:
         8f:ef:c9:69:2d:ed:07:8d:18:17:0d:96:57:f6:8f:04:9c:80:
         d3:a0:1b:74:ac:8b:ca:52:97:6e:eb:0a:e8:6d:73:c5:79:9d:
         8d:62:c7:1f:9f:b8:b9:45:31:1d:41:1f:2f:7a:66:95:9d:27:
         41:5b:81:31:b8:6e:dc:c7:89:4c:fe:5a:ce:30:9d:7e:ea:72:
         48:62:4e:7a:fa:ff:8b:28:ef:dc:97:f6:7e:39:e5:4f:b5:7d:
         62:ff:50:6e:bd:b2:7c:e5:a2:63:f5:56:b3:05:f5:55:e8:10:
         3a:8b:80:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+iK3oatpMSrZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU2OWEzMTEtZWQ5OS00ZDA4LWJjOTYtYWVjMmQ2YTFi
ZmMwMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
MWI1YjBkNzQtOGJkNS00MzIxLThiMTYtMDBkOWNiNDAyNjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS2TeFWOKHAol+jd78LZt8R18TZXnapxrnhC
AEW/vbPwMxd+fZ7uytfpNd8hRHlb3jgsKvpcIymREXZ6eC++96cxEnY1Al9Q5PY2
98i02IMMutPZyBT/GjQn6RfEYmYDcUpkO/+9dnk6YUxOKDrt58D73juUGxcJstMb
VRgeYGs/5jZIankFbjiq3pZWnZHeNmDpepUkkXsGIkdWTozPCylKZlyl3BabrAv6
E8YXo6laNKO+0tAnYxrZXpWBVLx57Kfa/Qn2xszrFmAqwA1FalZg7JZLEnOVj2I/
SVUspUEoFGOq+EHjZ+T2bgt50WMNydn+G0AK+xE8nXC4pbZkCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZoV7Fs6me4w9R3rgvKYVg1N8LvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZTY5
YTMxMS1lZDk5LTRkMDgtYmM5Ni1hZWMyZDZhMWJmYzAvZDY1YjU4NzktYmQ5MS0z
MGYzLWFkYzYtYzM2MDRiYmE5YTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGU2OWEzMTEtZWQ5OS00ZDA4LWJj
OTYtYWVjMmQ2YTFiZmMwLzRlNjlhMzExLWVkOTktNGQwOC1iYzk2LWFlYzJkNmEx
YmZjMC5jcmwwHwYDVR0jBBgwFoAUQda6hXV7WjTxNb4s87nEq4yrceUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZTY5YTMxMS1lZDk5LTRkMDgtYmM5Ni1hZWMy
ZDZhMWJmYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAongUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGUH+TIHFROp4shXw1riow6b7Lbo4MW6zDxUtdu9gw2mewFa1vkccwe
lUFR00DdtYfbWshceQckaTGVudx9z8iRcY7oATW7z1YFCStlpZ9PAhliT0yfnHYK
R4nz3xn+mhDaDbxYpdIAt90Pk6+MWwdT/SrCQ+Lq41+a9slNFH9eOpR3oIsWhnAQ
q6FQZKMGjI/vyWkt7QeNGBcNllf2jwScgNOgG3Ssi8pSl27rCuhtc8V5nY1ixx+f
uLlFMR1BHy96ZpWdJ0FbgTG4btzHiUz+Ws4wnX7qckhiTnr6/4so79yX9n455U+1
fWL/UG69snzlomP1VrMF9VXoEDqLgPg=
-----END CERTIFICATE-----
Generated at Mon May 12 11:13:54 2025 by rpki-client