Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/471ab819-bf16-367d-95b9-e1f59807e011.roa
File:                     471ab819-bf16-367d-95b9-e1f59807e011.roa (raw, json)
Hash identifier:          KlSU8x1MMfkNXiLGiyN6/EiR6SUREZb+OOEhcrGYYh0=
Subject key identifier:   4D:E5:AD:37:29:C1:D6:23:69:5F:1B:99:77:C5:D0:B7:2E:A2:D5:75
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584840BDF81BC48F9309321CC850
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/471ab819-bf16-367d-95b9-e1f59807e011.roa
Signing time:             Thu 19 Dec 2024 00:41:23 +0000
ROA not before:           Thu 19 Dec 2024 00:41:23 +0000
ROA not after:            Tue 18 Mar 2025 23:41:23 +0000
asID:                     834
IP address blocks:        69.176.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:bd:f8:1b:c4:8f:93:09:32:1c:c8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Dec 19 00:41:23 2024 GMT
            Not After : Mar 18 23:41:23 2025 GMT
        Subject: CN=d380cde7-c478-48a5-b0b3-2b2791183e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:8e:22:db:b2:44:6c:af:e7:7c:5b:ec:e2:
                    83:43:e2:33:a2:7d:a7:9e:be:05:66:b2:5b:da:4a:
                    a3:fc:94:87:5f:ee:43:ef:06:3e:4e:68:17:99:8c:
                    f1:bb:3b:60:c6:17:9d:63:20:ad:ba:6e:0f:a8:65:
                    c9:f3:76:32:36:71:9b:06:7c:cc:7d:e8:1e:f6:79:
                    63:7a:fd:56:11:f5:bc:d8:13:8b:cf:98:37:e5:bd:
                    ef:34:87:24:86:94:45:6f:c0:73:a2:48:9e:ed:d6:
                    7a:05:73:39:6b:55:89:26:09:0a:2c:2d:99:80:75:
                    5c:45:2c:14:b1:c2:b2:f7:82:4a:3e:5e:ac:3f:b9:
                    37:be:68:94:3b:f0:03:93:74:6e:cb:66:6a:6f:ac:
                    f6:3e:3c:9d:74:68:47:c9:64:24:b9:0a:6f:4c:f1:
                    a8:b1:aa:f1:7e:64:a8:d9:2a:b8:59:aa:a1:c0:3e:
                    ed:44:eb:8d:ad:6f:10:03:cc:51:3d:03:e8:04:55:
                    03:c2:cd:66:c9:28:d8:32:35:5a:e5:36:30:1f:42:
                    ba:0d:71:af:a3:86:76:b6:07:08:e8:6f:1a:2f:e3:
                    be:11:b3:ad:6b:50:22:14:2f:6d:68:41:b7:74:92:
                    76:a9:55:be:b7:88:16:d3:29:9f:27:50:cb:67:e9:
                    bf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E5:AD:37:29:C1:D6:23:69:5F:1B:99:77:C5:D0:B7:2E:A2:D5:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/471ab819-bf16-367d-95b9-e1f59807e011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1d:d1:b6:7c:29:40:98:86:d0:ed:d5:88:ba:09:fe:57:30:
         a3:56:c7:6f:06:99:74:a4:a0:53:86:99:7d:fc:b8:e8:b2:87:
         8e:e7:61:f7:72:5d:a1:13:47:14:7a:7f:b4:c3:a3:db:72:d5:
         c8:aa:35:1d:90:d2:fb:03:d5:53:4f:16:92:d7:79:16:17:d2:
         b2:77:14:7d:e8:ce:56:72:05:76:c9:6e:45:71:93:4d:54:2a:
         92:09:dd:6b:b1:31:6e:f9:4d:81:63:a9:2b:bc:db:5b:a7:05:
         1e:ed:a4:fc:d8:94:5e:c4:a5:49:7e:67:f4:dc:39:f0:a1:62:
         31:bc:59:58:ac:19:dd:a7:3b:1c:44:8c:84:04:41:85:8e:7e:
         9f:69:30:fe:b3:2d:25:81:3d:90:f1:49:48:75:b9:7a:53:c1:
         38:fc:36:83:da:8d:c6:ba:ff:8d:c3:a1:c8:db:d4:74:86:b7:
         a0:77:f4:48:f9:6b:a4:5c:36:89:b9:43:99:c0:1c:09:e4:1b:
         70:f9:69:41:4f:7e:7e:2a:d4:27:22:b7:7a:f6:99:a2:7f:e7:
         ce:a4:dc:c9:e3:fb:cd:70:8c:a6:8e:c0:2f:10:6e:db:de:b0:
         e3:47:23:c2:ad:e1:a9:46:43:4e:dc:b7:ee:59:1a:32:f8:0b:
         a4:78:55:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhAvfgbxI+TCTIcyFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI0MTIxOTAwNDEyM1oXDTI1MDMxODIzNDEyM1owLzEtMCsGA1UEAxMk
ZDM4MGNkZTctYzQ3OC00OGE1LWIwYjMtMmIyNzkxMTgzZTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTmOItuyRGyv53xb7OKDQ+Izon2nnr4FZrJb
2kqj/JSHX+5D7wY+TmgXmYzxuztgxhedYyCtum4PqGXJ83YyNnGbBnzMfege9nlj
ev1WEfW82BOLz5g35b3vNIckhpRFb8Bzokie7dZ6BXM5a1WJJgkKLC2ZgHVcRSwU
scKy94JKPl6sP7k3vmiUO/ADk3Ruy2Zqb6z2PjyddGhHyWQkuQpvTPGosarxfmSo
2Sq4WaqhwD7tROuNrW8QA8xRPQPoBFUDws1mySjYMjVa5TYwH0K6DXGvo4Z2tgcI
6G8aL+O+EbOta1AiFC9taEG3dJJ2qVW+t4gW0ymfJ1DLZ+m/mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3lrTcpwdYjaV8bmXfF0LcuotV1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNDcxYWI4MTktYmYxNi0z
NjdkLTk1YjktZTFmNTk4MDdlMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERbBQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAd0bZ8KUCYhtDt1Yi6Cf5XMKNWx28GmXSkoFOGmX38uOiyh47nYfdy
XaETRxR6f7TDo9ty1ciqNR2Q0vsD1VNPFpLXeRYX0rJ3FH3ozlZyBXbJbkVxk01U
KpIJ3WuxMW75TYFjqSu821unBR7tpPzYlF7EpUl+Z/TcOfChYjG8WVisGd2nOxxE
jIQEQYWOfp9pMP6zLSWBPZDxSUh1uXpTwTj8NoPajca6/43Docjb1HSGt6B39Ej5
a6RcNom5Q5nAHAnkG3D5aUFPfn4q1Ccit3r2maJ/586k3Mnj+81wjKaOwC8Qbtve
sONHI8Kt4alGQ07ct+5ZGjL4C6R4VfQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:20 2025 by rpki-client