Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/927b8fc7-ab2e-3f5a-bba8-46e286018d93.roa
File:                     927b8fc7-ab2e-3f5a-bba8-46e286018d93.roa (raw, json)
Hash identifier:          LaheQC2HxthXtd6ubRd4SU2LCZA5cGSROYeLEZGB8QA=
Subject key identifier:   41:71:C1:64:CC:6A:7E:9C:FD:6E:A2:B9:38:5A:41:C4:1B:C3:D6:3B
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5005CE986A6596777F90C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/927b8fc7-ab2e-3f5a-bba8-46e286018d93.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        209.112.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:05:ce:98:6a:65:96:77:7f:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=bafd9d0b-1f00-436a-91b0-2fd9fe43aba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:44:b7:8c:42:5e:c5:37:0d:a4:b1:d5:5f:
                    dd:c5:23:92:80:0c:8f:ae:d1:51:eb:00:32:25:5b:
                    e7:19:a2:7b:7b:78:84:13:22:48:c4:77:7e:e4:c1:
                    72:9c:ff:fd:f5:57:10:d6:b8:ec:d7:c4:2b:09:3e:
                    34:57:2c:08:62:17:c6:c1:e3:75:d4:a9:20:a6:e9:
                    72:00:f4:10:f8:b0:5c:95:2c:0a:ac:93:ae:e3:d3:
                    cd:8b:c2:cb:b7:33:31:8a:5a:25:8a:66:0d:18:d3:
                    d0:74:a7:50:39:8e:37:6a:99:bd:7d:91:c2:82:47:
                    0b:24:f9:95:2c:b4:9b:33:7a:c8:d6:c6:1b:f9:1e:
                    da:05:62:cc:b5:61:9a:6b:9e:a5:c9:3c:45:b3:9f:
                    13:81:68:b4:6e:d0:dd:fd:f5:b5:5d:25:5e:8f:55:
                    90:6b:af:a9:77:17:e7:f9:84:f7:f8:d6:47:a7:a8:
                    a4:c7:fa:59:91:8b:57:36:32:1d:63:10:a4:c0:10:
                    bf:73:76:20:ef:fb:11:ce:2f:70:0e:46:d6:8c:58:
                    a0:16:8a:73:9f:3f:a8:10:9e:34:e8:16:31:8d:e5:
                    45:33:e9:2c:ba:fa:7d:ad:85:a1:2d:0c:c9:3f:30:
                    6e:83:f9:64:ea:1d:ff:2f:70:33:59:91:73:57:9e:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:71:C1:64:CC:6A:7E:9C:FD:6E:A2:B9:38:5A:41:C4:1B:C3:D6:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/927b8fc7-ab2e-3f5a-bba8-46e286018d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:33:4e:fd:c3:8a:1a:a5:20:0a:03:9d:4f:e1:ab:cc:9e:c5:
         dc:04:ac:e9:23:db:8d:df:29:71:88:ce:40:97:dd:f0:f8:6f:
         f2:4d:77:48:40:18:32:55:92:28:cc:2c:d3:64:81:e5:3e:2d:
         64:1e:d4:a1:fd:26:1f:50:72:c4:74:c7:23:e9:eb:fe:85:f6:
         67:03:7c:db:d7:7f:7f:82:aa:01:0e:ab:1c:15:b6:19:0f:e7:
         30:ad:b2:fd:6f:36:1a:e8:ef:5e:25:4d:74:ac:90:b4:76:a6:
         8d:b6:60:85:a5:ee:73:89:47:4e:ed:6d:43:9c:c8:be:c8:af:
         f8:f5:d0:bb:21:a3:3d:d2:1d:6f:05:a5:10:5c:ad:ba:0b:15:
         87:81:26:c8:09:e7:92:df:85:09:15:8c:b7:55:a5:1e:1e:2b:
         86:13:9e:12:12:e6:1c:3b:56:76:3e:ee:71:95:4d:74:e8:77:
         e9:21:a3:dc:07:b3:7b:ac:8c:eb:af:50:44:de:9e:a1:93:2e:
         1f:07:ac:56:33:d9:f2:18:bb:f2:8a:99:28:62:1d:90:1c:96:
         8d:6a:dc:af:2d:73:98:68:27:53:d4:95:b7:20:35:65:d3:20:
         d3:0f:7a:5b:29:0d:5a:ba:d7:f2:12:09:fc:81:15:b8:e4:40:
         3b:25:02:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAXOmGpllnd/kMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
YmFmZDlkMGItMWYwMC00MzZhLTkxYjAtMmZkOWZlNDNhYmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoclEt4xCXsU3DaSx1V/dxSOSgAyPrtFR6wAy
JVvnGaJ7e3iEEyJIxHd+5MFynP/99VcQ1rjs18QrCT40VywIYhfGweN11Kkgpuly
APQQ+LBclSwKrJOu49PNi8LLtzMxilolimYNGNPQdKdQOY43apm9fZHCgkcLJPmV
LLSbM3rI1sYb+R7aBWLMtWGaa56lyTxFs58TgWi0btDd/fW1XSVej1WQa6+pdxfn
+YT3+NZHp6ikx/pZkYtXNjIdYxCkwBC/c3Yg7/sRzi9wDkbWjFigFopznz+oEJ40
6BYxjeVFM+ksuvp9rYWhLQzJPzBug/lk6h3/L3AzWZFzV56zQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFxwWTMan6c/W6iuThaQcQbw9Y7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvOTI3YjhmYzctYWIyZS0z
ZjVhLWJiYTgtNDZlMjg2MDE4ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XAKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEzTv3DihqlIAoDnU/hq8yexdwErOkj243fKXGIzkCX3fD4b/JNd0hA
GDJVkijMLNNkgeU+LWQe1KH9Jh9QcsR0xyPp6/6F9mcDfNvXf3+CqgEOqxwVthkP
5zCtsv1vNhro714lTXSskLR2po22YIWl7nOJR07tbUOcyL7Ir/j10Lshoz3SHW8F
pRBcrboLFYeBJsgJ55LfhQkVjLdVpR4eK4YTnhIS5hw7VnY+7nGVTXTod+kho9wH
s3usjOuvUETenqGTLh8HrFYz2fIYu/KKmShiHZAclo1q3K8tc5hoJ1PUlbcgNWXT
INMPelspDVq61/ISCfyBFbjkQDslAtM=
-----END CERTIFICATE-----
Generated at Sun May 11 22:08:43 2025 by rpki-client