Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/478248af-1257-3a91-82e9-a505f2e92769.roa
File:                     478248af-1257-3a91-82e9-a505f2e92769.roa (raw, json)
Hash identifier:          GL4G2AFtGirDx6g8a9nstWq8BoCV8gSb80KjDs0qmvc=
Subject key identifier:   2D:D3:6C:41:3C:B0:42:A8:11:4C:70:09:7B:D5:1C:D1:63:8B:57:B2
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584882809153190090FF57B5BF30
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/478248af-1257-3a91-82e9-a505f2e92769.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     12083
IP address blocks:        24.214.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:91:53:19:00:90:ff:57:b5:bf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=15b36ca4-888e-4442-af03-60b721b23bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:d7:ba:f2:ce:db:b8:90:47:be:78:4d:11:
                    57:f7:41:25:87:15:f2:ba:cf:c2:50:83:a9:c1:e1:
                    9d:15:33:61:94:6a:6d:b6:5e:3d:d4:c9:8f:e3:1d:
                    23:fa:0c:a7:c0:d5:53:23:7b:b6:be:1e:d8:1e:70:
                    d9:f9:ab:2a:84:02:71:46:81:65:0e:6a:86:d7:f9:
                    f1:21:2b:c7:62:ff:96:33:03:48:72:a3:13:bc:67:
                    ce:a7:82:ba:52:55:73:22:4a:38:d8:21:48:ec:64:
                    d1:d2:9f:e1:1b:25:cd:85:c2:2f:1d:77:04:41:56:
                    f6:67:6d:50:8a:f8:51:f5:f0:45:1d:66:a1:30:97:
                    08:eb:9d:8f:06:3e:24:c0:96:bf:63:bc:2c:76:f0:
                    b4:b7:09:32:2e:da:61:2c:6a:ba:65:43:f7:45:fa:
                    88:66:53:d3:90:6c:99:d2:c9:fa:aa:b3:b4:6f:ed:
                    90:bd:23:55:d2:4a:48:86:93:67:91:40:87:76:48:
                    54:99:a8:97:66:eb:22:30:5b:40:4d:3f:7c:63:5a:
                    ac:72:c2:80:d6:a6:82:51:53:6e:a9:59:fa:41:e8:
                    3c:05:a9:c7:45:1f:53:19:00:4d:ef:96:56:ef:0a:
                    7e:9e:93:f7:9a:ec:e7:14:3b:e6:72:fb:b0:ec:50:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:6C:41:3C:B0:42:A8:11:4C:70:09:7B:D5:1C:D1:63:8B:57:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/478248af-1257-3a91-82e9-a505f2e92769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8e:55:f3:ae:ae:6e:fe:0f:1b:8e:1b:04:ce:f7:60:b2:74:
         96:07:86:6b:9e:1c:16:8a:01:49:a8:b8:d3:53:a4:2e:e8:8c:
         a2:b5:34:2d:53:3a:c3:a2:3f:25:90:98:e4:d8:df:71:9a:98:
         df:bb:6d:70:aa:1b:85:f6:b9:7a:26:8e:8e:fd:a6:c7:58:1b:
         4c:a8:1a:87:62:ca:94:ac:9e:62:28:04:9a:5f:0a:59:86:5e:
         76:2f:4c:aa:82:2c:dc:91:0c:94:6d:34:9b:ab:22:3b:5e:7e:
         45:11:e8:01:14:18:db:53:af:c9:5a:01:22:1b:ac:b9:2e:88:
         3e:28:39:cb:34:83:78:1a:43:b0:0f:d2:f9:7b:44:80:f1:04:
         9a:04:1f:0c:81:31:5c:71:d5:6d:ad:38:8c:5b:61:bd:8b:ab:
         c7:5e:16:6d:85:62:96:49:1f:e2:e5:c1:5d:a6:2d:28:81:c0:
         81:59:fb:04:26:1e:14:18:83:c2:3f:d6:9d:f0:64:33:cd:db:
         2c:ae:72:54:c5:01:b2:c7:70:42:82:f0:63:75:60:8f:41:0c:
         37:16:04:e4:b2:6a:3a:6e:2f:05:b4:f9:cb:67:b9:2f:93:53:
         72:e3:84:66:82:a6:55:04:e5:a3:5f:72:4e:b8:c3:20:b5:91:
         fe:96:2e:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJFTGQCQ/1e1vzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MTViMzZjYTQtODg4ZS00NDQyLWFmMDMtNjBiNzIxYjIzYmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W7XuvLO27iQR754TRFX90ElhxXyus/CUIOp
weGdFTNhlGpttl491MmP4x0j+gynwNVTI3u2vh7YHnDZ+asqhAJxRoFlDmqG1/nx
ISvHYv+WMwNIcqMTvGfOp4K6UlVzIko42CFI7GTR0p/hGyXNhcIvHXcEQVb2Z21Q
ivhR9fBFHWahMJcI652PBj4kwJa/Y7wsdvC0twkyLtphLGq6ZUP3RfqIZlPTkGyZ
0sn6qrO0b+2QvSNV0kpIhpNnkUCHdkhUmaiXZusiMFtATT98Y1qscsKA1qaCUVNu
qVn6Qeg8BanHRR9TGQBN75ZW7wp+npP3muznFDvmcvuw7FAcnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3TbEE8sEKoEUxwCXvVHNFji1eyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvNDc4MjQ4YWYtMTI1Ny0z
YTkxLTgyZTktYTUwNWYyZTkyNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNb0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWOVfOurm7+DxuOGwTO92CydJYHhmueHBaKAUmouNNTpC7ojKK1NC1T
OsOiPyWQmOTY33GamN+7bXCqG4X2uXomjo79psdYG0yoGodiypSsnmIoBJpfClmG
XnYvTKqCLNyRDJRtNJurIjtefkUR6AEUGNtTr8laASIbrLkuiD4oOcs0g3gaQ7AP
0vl7RIDxBJoEHwyBMVxx1W2tOIxbYb2Lq8deFm2FYpZJH+LlwV2mLSiBwIFZ+wQm
HhQYg8I/1p3wZDPN2yyuclTFAbLHcEKC8GN1YI9BDDcWBOSyajpuLwW0+ctnuS+T
U3LjhGaCplUE5aNfck64wyC1kf6WLtI=
-----END CERTIFICATE-----
Generated at Mon May 12 12:28:08 2025 by rpki-client