Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7d7215f5-5a52-3f2a-a591-f2dbec511b86.roa
File:                     7d7215f5-5a52-3f2a-a591-f2dbec511b86.roa (raw, json)
Hash identifier:          ZHy/M9CjK6tfvOfgqwPdzvr+JUX3lZrYfJlLwC8ZQFA=
Subject key identifier:   9A:6B:4A:9C:DD:9F:BB:52:40:C0:89:21:3B:E8:7D:8E:81:C2:6D:D0
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B50057271E5A9E3FB0A3F00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7d7215f5-5a52-3f2a-a591-f2dbec511b86.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        209.82.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:05:72:71:e5:a9:e3:fb:0a:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=306cfbfd-9136-4dce-81f8-814821ddcf8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:20:06:27:b0:6a:c1:1b:69:1d:77:71:24:
                    07:1b:34:c9:c5:bd:f2:5e:3e:40:87:a4:5e:ff:07:
                    8c:a3:64:7b:00:6d:08:29:26:27:fd:55:5e:01:d2:
                    c2:e7:3b:ff:0d:70:3a:39:df:0c:1b:41:7f:17:06:
                    64:67:f9:f0:83:bc:95:b3:fa:27:dc:69:d4:0b:d3:
                    2c:df:cc:7a:ca:a3:84:8e:bb:92:de:40:91:7e:1f:
                    30:dd:96:2e:0a:cb:70:54:53:e2:9d:f8:ee:6c:1f:
                    71:ef:d0:4d:21:6c:98:3a:1d:be:c2:88:55:94:7d:
                    c8:f7:68:23:d4:f1:8e:2e:a0:c0:3d:82:e8:74:fc:
                    26:0a:eb:e2:78:2c:8d:78:69:91:30:09:3a:2c:59:
                    29:3e:fe:27:3f:ff:6e:7c:86:40:fb:58:ee:8b:6f:
                    27:46:5c:77:f5:3b:95:81:5b:ff:67:52:c5:fb:53:
                    7e:5a:a0:78:4b:41:ed:9c:2d:bc:37:4b:84:f2:a5:
                    41:6a:88:0b:b5:fa:b5:7f:97:b5:18:24:fb:9a:b4:
                    28:bf:6d:9a:8c:82:d0:a5:95:86:04:a1:4b:e9:1c:
                    03:9e:ca:c9:19:e4:4f:c8:78:c0:cd:5a:ab:05:c6:
                    b3:bf:e4:66:8b:f2:81:99:d2:40:af:22:41:e2:81:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6B:4A:9C:DD:9F:BB:52:40:C0:89:21:3B:E8:7D:8E:81:C2:6D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7d7215f5-5a52-3f2a-a591-f2dbec511b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.82.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3d:72:84:e9:d7:18:65:60:49:e1:3c:8f:74:31:5a:98:c0:
         c1:33:12:ea:76:04:65:da:47:db:34:c7:f1:aa:81:05:9e:5e:
         fa:3d:e5:b5:5b:96:79:20:57:46:6c:92:0d:21:8c:de:c1:e3:
         8c:14:01:af:f3:56:e0:be:0b:94:55:a7:b4:aa:4d:81:41:a8:
         10:96:c4:f5:89:12:f0:30:cc:1f:bc:20:f9:d4:b6:08:98:ba:
         0c:b9:e8:33:fa:29:f6:e9:8d:af:89:1f:99:27:98:ed:26:bb:
         da:6e:9b:4c:e9:2a:52:49:86:cf:ae:52:46:6a:8f:8c:37:33:
         59:68:cb:22:ef:de:ee:02:d7:24:82:31:dd:1d:2e:5f:94:0a:
         4f:17:cb:ae:88:2b:1d:a3:7b:d8:2c:88:e3:09:31:86:23:7a:
         8b:4a:46:3c:2c:41:c7:21:2d:a7:95:10:78:f1:dc:fa:b1:56:
         76:6b:4e:2d:1d:07:fc:d2:b8:4c:ea:7c:d7:82:58:5e:ca:93:
         2c:8c:8d:b9:cf:d4:1b:80:3b:0c:65:56:f1:d6:71:6f:9c:eb:
         cf:c1:4f:a3:3c:d5:a6:f1:7a:5c:f3:27:a8:56:f1:2e:ed:8b:
         a3:76:84:37:ec:2e:0d:0d:16:93:c2:d5:92:3c:0f:a0:69:2e:
         2e:91:51:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAVyceWp4/sKPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
MzA2Y2ZiZmQtOTEzNi00ZGNlLTgxZjgtODE0ODIxZGRjZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVUgBiewasEbaR13cSQHGzTJxb3yXj5Ah6Re
/weMo2R7AG0IKSYn/VVeAdLC5zv/DXA6Od8MG0F/FwZkZ/nwg7yVs/on3GnUC9Ms
38x6yqOEjruS3kCRfh8w3ZYuCstwVFPinfjubB9x79BNIWyYOh2+wohVlH3I92gj
1PGOLqDAPYLodPwmCuvieCyNeGmRMAk6LFkpPv4nP/9ufIZA+1jui28nRlx39TuV
gVv/Z1LF+1N+WqB4S0HtnC28N0uE8qVBaogLtfq1f5e1GCT7mrQov22ajILQpZWG
BKFL6RwDnsrJGeRPyHjAzVqrBcazv+Rmi/KBmdJAryJB4oEWQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJprSpzdn7tSQMCJITvofY6Bwm3QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvN2Q3MjE1ZjUtNWE1Mi0z
ZjJhLWE1OTEtZjJkYmVjNTExYjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VIpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABI9coTp1xhlYEnhPI90MVqYwMEzEup2BGXaR9s0x/GqgQWeXvo95bVb
lnkgV0Zskg0hjN7B44wUAa/zVuC+C5RVp7SqTYFBqBCWxPWJEvAwzB+8IPnUtgiY
ugy56DP6Kfbpja+JH5knmO0mu9pum0zpKlJJhs+uUkZqj4w3M1loyyLv3u4C1ySC
Md0dLl+UCk8Xy66IKx2je9gsiOMJMYYjeotKRjwsQcchLaeVEHjx3PqxVnZrTi0d
B/zSuEzqfNeCWF7KkyyMjbnP1BuAOwxlVvHWcW+c68/BT6M81abxelzzJ6hW8S7t
i6N2hDfsLg0NFpPC1ZI8D6BpLi6RUVI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:40 2025 by rpki-client