Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa
File:                     8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa (raw, json)
Hash identifier:          AdrCqy3l5Rn54aAQ4lOMx4QmHZov44fUX+K/6YOHHCc=
Subject key identifier:   52:80:47:CF:07:B5:F2:7A:65:92:DA:33:DC:09:22:BE:2D:BF:1F:B0
Certificate issuer:       /CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d
Certificate serial:       010D0C9F432858486D90451C899E74D35E930F80
Authority key identifier: 65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     11700
IP address blocks:        205.207.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:45:1c:89:9e:74:d3:5e:93:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=6ea1c14b-9f2e-4cf9-9498-b99376468acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:20:50:6c:30:33:7b:4f:17:7c:88:bb:c7:
                    09:1e:e8:df:50:7a:7b:e1:41:79:28:34:a5:8a:02:
                    88:67:45:30:89:a4:83:17:1b:1d:4f:cc:ea:0d:4e:
                    12:bc:9e:2b:ab:b1:41:ec:b3:52:a5:da:bd:68:d8:
                    7e:58:cf:9d:0d:5a:be:4e:42:48:cf:da:e2:d6:43:
                    41:17:fb:43:d0:eb:b6:4e:2f:81:85:5a:bf:2d:c6:
                    c6:09:f5:ef:c3:d8:d4:d7:ce:41:78:f2:34:a9:e4:
                    88:e0:1e:ca:80:c1:bc:87:35:0d:d1:42:d7:d5:e3:
                    a7:e4:8c:ff:79:5a:29:a9:27:fe:a0:55:df:cc:f8:
                    02:fd:3b:bb:51:85:07:e1:ed:a1:b7:0a:c5:a1:7c:
                    24:6a:b5:85:46:2e:50:6f:5c:f0:fe:5d:f6:fd:45:
                    4c:e7:63:0f:7a:fa:e0:69:4a:08:fe:0b:7e:fe:86:
                    35:d4:59:4b:09:e7:bb:d9:3e:36:8b:46:9e:ad:60:
                    58:61:36:cc:1c:6d:e4:03:d6:49:38:07:ac:c5:4d:
                    9e:aa:65:d7:71:7f:25:38:4d:97:f2:76:6a:f9:1c:
                    5e:ad:56:ed:27:2f:cc:cc:63:51:26:96:eb:69:ad:
                    53:5c:a2:9f:d5:66:04:b0:88:a1:36:2d:7b:b1:4b:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:80:47:CF:07:B5:F2:7A:65:92:DA:33:DC:09:22:BE:2D:BF:1F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.crl

            X509v3 Authority Key Identifier:
                keyid:65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f2:b0:cb:d7:28:50:a3:64:13:c5:11:30:56:01:8b:b2:a8:
         cb:4c:ed:3e:4d:c2:68:e6:84:77:be:c1:39:d2:34:d5:b1:b9:
         a5:62:da:5a:6d:41:24:15:80:6a:74:4f:03:68:c2:c0:f5:44:
         c1:55:9b:fd:2f:21:51:20:82:05:aa:b9:c7:23:1d:3d:fa:d0:
         78:0a:b7:18:bf:ab:ad:5e:96:d0:5a:3a:e9:47:9d:80:26:db:
         eb:8a:3c:d8:bb:69:48:05:b3:49:22:13:f5:2c:b3:45:e1:b4:
         b5:f5:ae:8d:01:13:f1:94:63:73:06:44:50:46:d9:88:04:01:
         21:4a:a9:37:9f:dc:41:54:33:d7:43:b5:dd:97:0a:2c:32:bf:
         7a:9b:cd:48:f9:87:3f:12:eb:1f:1e:72:8b:dd:10:22:7a:ab:
         93:11:bf:35:e4:9c:c0:21:3c:c4:92:2d:d0:23:01:b4:9f:66:
         06:75:96:ae:89:3d:e3:11:3a:ad:65:64:c6:ec:da:69:92:53:
         6f:a1:6d:35:04:56:23:cc:18:b5:fd:75:7c:55:bc:cd:0d:73:
         49:e6:33:31:28:0f:9a:36:31:4b:89:a1:95:5c:25:7d:9c:fe:
         d4:26:9c:6b:e3:8e:61:2a:c0:ab:40:0d:21:12:98:bc:e7:58:
         43:3a:89:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkEUciZ50016TD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwOGE0ZmYtYzE3MC00MWVhLWE0NTQtYmYwZWNkNDBm
ODNkMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NmVhMWMxNGItOWYyZS00Y2Y5LTk0OTgtYjk5Mzc2NDY4YWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCUgUGwwM3tPF3yIu8cJHujfUHp74UF5KDSl
igKIZ0UwiaSDFxsdT8zqDU4SvJ4rq7FB7LNSpdq9aNh+WM+dDVq+TkJIz9ri1kNB
F/tD0Ou2Ti+BhVq/LcbGCfXvw9jU185BePI0qeSI4B7KgMG8hzUN0ULX1eOn5Iz/
eVopqSf+oFXfzPgC/Tu7UYUH4e2htwrFoXwkarWFRi5Qb1zw/l32/UVM52MPevrg
aUoI/gt+/oY11FlLCee72T42i0aerWBYYTbMHG3kA9ZJOAesxU2eqmXXcX8lOE2X
8nZq+RxerVbtJy/MzGNRJpbraa1TXKKf1WYEsIihNi17sUv0eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKAR88HtfJ6ZZLaM9wJIr4tvx+wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNjA4
YTRmZi1jMTcwLTQxZWEtYTQ1NC1iZjBlY2Q0MGY4M2QvOGI3NmJiZmQtM2ZjYi0z
NTAyLWI2ZmUtYzEwODBjZjc4MDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTYwOGE0ZmYtYzE3MC00MWVhLWE0
NTQtYmYwZWNkNDBmODNkL2U2MDhhNGZmLWMxNzAtNDFlYS1hNDU0LWJmMGVjZDQw
ZjgzZC5jcmwwHwYDVR0jBBgwFoAUZbtTdGgHjVn9ZMUKgYK5MSgVOicwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNjA4YTRmZi1jMTcwLTQxZWEtYTQ1NC1iZjBl
Y2Q0MGY4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc/LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnysMvXKFCjZBPFETBWAYuyqMtM7T5NwmjmhHe+wTnSNNWxuaVi2lpt
QSQVgGp0TwNowsD1RMFVm/0vIVEgggWquccjHT360HgKtxi/q61eltBaOulHnYAm
2+uKPNi7aUgFs0kiE/Uss0XhtLX1ro0BE/GUY3MGRFBG2YgEASFKqTef3EFUM9dD
td2XCiwyv3qbzUj5hz8S6x8ecovdECJ6q5MRvzXknMAhPMSSLdAjAbSfZgZ1lq6J
PeMROq1lZMbs2mmSU2+hbTUEViPMGLX9dXxVvM0Nc0nmMzEoD5o2MUuJoZVcJX2c
/tQmnGvjjmEqwKtADSESmLznWEM6iV4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:54:09 2025 by rpki-client