Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f776bb33-33fb-385e-92d8-01913cccac3b.roa
File:                     f776bb33-33fb-385e-92d8-01913cccac3b.roa (raw, json)
Hash identifier:          R5swr9yoVwTQk5Yic/GIcYEW10ZjpXgW6DXqD2/tNC4=
Subject key identifier:   9C:C4:F0:8C:3B:CF:B5:00:49:66:33:D7:31:C2:1B:41:34:82:55:D3
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584839EAC58224E6E4AAC5E7ED00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f776bb33-33fb-385e-92d8-01913cccac3b.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     4997
IP address blocks:        208.39.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:c5:82:24:e6:e4:aa:c5:e7:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=9b1213fb-be69-4491-b03c-e0e87ae23291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:92:04:0c:1c:4a:de:1c:2f:b2:2c:7d:fc:cc:
                    c0:cb:82:e6:4b:dc:13:8b:d4:4a:1a:54:3e:52:33:
                    72:a8:79:e0:a8:cd:56:75:5a:d3:b6:ee:b5:32:b8:
                    5a:42:93:bf:56:b6:44:77:57:f4:8f:ff:06:0e:56:
                    26:42:4c:6f:59:5a:f6:e8:b5:af:bd:9a:f1:01:37:
                    ea:71:c7:9a:7a:e4:06:34:c8:eb:40:11:f0:da:15:
                    ec:c8:12:16:0c:94:1d:a6:8d:61:86:2f:5d:ba:e3:
                    3f:e7:c8:7b:48:26:49:c3:f7:01:ab:dd:9b:32:6e:
                    34:13:1a:a2:57:b2:2d:47:a1:67:a3:46:72:13:73:
                    78:26:d7:13:24:35:b1:21:f6:a6:bd:94:17:74:31:
                    66:7c:b1:3a:f1:c4:0b:16:bb:d1:c8:4e:6c:01:85:
                    08:00:c6:90:98:c6:4d:8c:d9:ee:03:11:1f:d8:55:
                    cb:c4:2e:87:b3:b9:e7:dd:67:b4:41:0d:c6:36:b2:
                    4e:8a:cf:04:85:45:2b:88:59:d4:67:16:cb:4a:d8:
                    21:6d:d1:63:a8:fc:2c:9f:fa:75:e9:46:31:e6:19:
                    05:78:8f:db:34:a2:e5:2d:07:47:c4:0f:63:1d:ce:
                    51:12:2d:8c:d2:87:c9:ec:7a:59:48:22:6a:31:53:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C4:F0:8C:3B:CF:B5:00:49:66:33:D7:31:C2:1B:41:34:82:55:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f776bb33-33fb-385e-92d8-01913cccac3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:fc:56:85:28:43:c9:df:de:c3:96:5e:c4:3f:46:c3:12:8b:
         f9:b3:d9:4a:f9:21:fd:d4:ed:56:f0:97:c0:ea:81:9f:31:68:
         23:c7:23:92:04:65:f0:85:20:62:a3:33:69:5f:02:6c:58:1c:
         74:8b:e7:aa:61:7a:c1:e7:26:09:ee:e5:16:77:4d:cd:a2:ad:
         2d:11:02:e4:bd:fa:75:10:2d:ab:ce:b5:47:18:d7:ec:bd:00:
         7b:5e:e5:63:0f:81:4f:74:55:ff:be:59:ec:ed:84:87:83:8f:
         c4:f2:59:1d:68:fb:f8:97:34:e5:39:b7:76:0e:6b:b5:3f:5f:
         1c:0c:e1:6e:f3:61:31:ed:b5:2f:f8:8a:d4:83:39:ad:f6:5a:
         6a:f3:33:ef:d9:9d:6b:a3:70:ba:bd:57:1d:a9:fa:fa:18:74:
         29:a4:ad:88:70:0d:b1:dc:c3:9b:df:5c:b9:15:44:3d:58:9f:
         d2:52:b3:b5:6d:1c:21:3d:3d:24:ea:74:f3:f5:51:49:7e:e2:
         72:fb:bc:94:60:f0:c4:a2:68:17:bb:77:7e:09:1c:9f:a4:93:
         b1:b8:ce:90:8a:03:c7:ce:12:4f:bc:8b:b3:a7:0f:29:8d:ed:
         0d:74:5a:28:36:a3:60:2b:a5:61:ae:64:c2:e2:5a:a0:f1:30:
         27:03:98:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg56sWCJObkqsXn7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
OWIxMjEzZmItYmU2OS00NDkxLWIwM2MtZTBlODdhZTIzMjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JIEDBxK3hwvsix9/MzAy4LmS9wTi9RKGlQ+
UjNyqHngqM1WdVrTtu61MrhaQpO/VrZEd1f0j/8GDlYmQkxvWVr26LWvvZrxATfq
cceaeuQGNMjrQBHw2hXsyBIWDJQdpo1hhi9duuM/58h7SCZJw/cBq92bMm40Exqi
V7ItR6Fno0ZyE3N4JtcTJDWxIfamvZQXdDFmfLE68cQLFrvRyE5sAYUIAMaQmMZN
jNnuAxEf2FXLxC6Hs7nn3We0QQ3GNrJOis8EhUUriFnUZxbLStghbdFjqPwsn/p1
6UYx5hkFeI/bNKLlLQdHxA9jHc5REi2M0ofJ7HpZSCJqMVNYUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzE8Iw7z7UASWYz1zHCG0E0glXTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZjc3NmJiMzMtMzNmYi0z
ODVlLTkyZDgtMDE5MTNjY2NhYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Cf4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALj8VoUoQ8nf3sOWXsQ/RsMSi/mz2Ur5If3U7Vbwl8DqgZ8xaCPHI5IE
ZfCFIGKjM2lfAmxYHHSL56phesHnJgnu5RZ3Tc2irS0RAuS9+nUQLavOtUcY1+y9
AHte5WMPgU90Vf++WezthIeDj8TyWR1o+/iXNOU5t3YOa7U/XxwM4W7zYTHttS/4
itSDOa32WmrzM+/ZnWujcLq9Vx2p+voYdCmkrYhwDbHcw5vfXLkVRD1Yn9JSs7Vt
HCE9PSTqdPP1UUl+4nL7vJRg8MSiaBe7d34JHJ+kk7G4zpCKA8fOEk+8i7OnDymN
7Q10Wig2o2ArpWGuZMLiWqDxMCcDmBY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:37:57 2025 by rpki-client