Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa
File:                     0dac1b9e-e005-3716-ba57-667e5c48f339.roa (raw, json)
Hash identifier:          Tlvcp4WXErY7SAg+RoQxogrkZk0fZ9n7bZaws/pt958=
Subject key identifier:   B0:25:74:8D:91:06:C4:47:1E:D3:36:CE:61:77:8F:77:FC:8A:1D:D3
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F4328584867FAEA2DF1AB6DA364C1DB20
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa
Signing time:             Thu 02 Jan 2025 02:00:39 +0000
ROA not before:           Thu 02 Jan 2025 02:00:39 +0000
ROA not after:            Wed 02 Apr 2025 01:00:39 +0000
asID:                     27370
IP address blocks:        216.163.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:67:fa:ea:2d:f1:ab:6d:a3:64:c1:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Jan  2 02:00:39 2025 GMT
            Not After : Apr  2 01:00:39 2025 GMT
        Subject: CN=f629e93c-256a-4f1c-afaf-c1c6af757146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e4:ed:ef:93:92:40:66:d2:d8:a4:71:ff:7d:
                    3d:99:50:e3:98:b9:40:d3:ff:f7:70:e7:cd:24:ca:
                    5e:ee:9b:92:3c:b5:8a:7e:43:6e:64:dc:c3:a1:9b:
                    4c:b4:4c:ff:f4:91:88:f7:e6:71:e4:45:a4:b8:3a:
                    e0:81:1e:29:ab:3c:c3:e1:c1:ba:46:1e:75:ac:73:
                    61:67:b5:86:88:d0:7d:65:21:51:09:56:c7:f6:a2:
                    fa:42:62:60:35:9f:2b:ea:f5:f7:2c:22:98:fe:5e:
                    90:0d:d0:15:43:d1:2b:0a:15:e7:34:f3:e3:2a:b6:
                    17:ab:ce:61:a8:8c:95:1f:d0:04:04:e4:5f:98:6a:
                    44:02:7f:33:8a:90:ad:f6:46:0d:65:c8:c1:cc:f0:
                    84:9b:01:2a:61:3f:2a:bb:e6:80:a3:f7:d5:71:bd:
                    ce:5e:d3:59:76:0a:eb:c1:61:b9:d0:91:6d:91:24:
                    2b:ae:9f:30:7d:43:ad:08:b3:42:e8:75:02:ee:8e:
                    67:74:fb:ae:5f:e3:79:17:79:87:a5:b5:5c:cf:91:
                    c7:28:aa:0c:53:f8:8d:af:6f:c7:08:cc:ef:5f:8c:
                    d7:64:89:64:e9:32:e6:7e:9d:18:7a:eb:6c:d1:70:
                    74:9e:f4:ad:53:c8:04:fa:eb:33:6a:57:18:24:0c:
                    3c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:25:74:8D:91:06:C4:47:1E:D3:36:CE:61:77:8F:77:FC:8A:1D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9b:15:d4:5a:41:9c:a7:f9:2a:a7:ac:ad:05:9f:87:bf:75:
         0b:80:37:a9:50:dd:2f:6c:ed:b0:13:22:f7:61:d1:ce:bc:73:
         5d:b1:55:fb:79:c3:f3:86:a9:be:d4:5f:40:2a:eb:7b:59:1d:
         af:e6:01:11:9b:f7:58:45:cd:81:ee:8e:91:90:c6:6c:f4:d4:
         12:5c:8b:9c:20:13:ba:ce:08:df:07:da:9d:a3:2f:1c:7e:88:
         f6:8f:9f:1a:ed:7e:8d:cb:b1:95:74:1c:bf:00:c6:b6:e2:2c:
         86:6e:3b:76:e7:0a:a0:c1:12:b6:bf:08:3d:32:28:8a:21:d0:
         5c:cb:6e:28:18:18:f7:81:1b:e3:26:ba:64:c8:5e:ec:a6:89:
         54:98:9c:3e:7a:4a:0b:ef:85:c6:73:0c:64:68:a4:4f:df:c2:
         8f:97:eb:50:96:c7:ae:a8:4a:de:ff:d1:12:9e:05:1a:b8:38:
         fb:27:29:e1:fa:62:a0:eb:7e:a5:ae:63:d4:39:4f:bd:be:a7:
         2d:28:fb:c1:b1:1b:03:4e:9d:42:04:cd:fc:88:09:29:b7:ef:
         f7:6c:fe:d0:8a:11:68:55:e8:13:d8:fa:b4:60:c1:da:d7:fd:
         3c:b9:00:6f:fc:ed:e0:93:5a:9f:71:86:12:ad:f6:5b:7e:36:
         2f:d3:57:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+uot8atto2TB2yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBiMDg5ZjktYmNmOS00NDgzLWJhZGItYzRjZjhjYTZm
OWUxMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZjYyOWU5M2MtMjU2YS00ZjFjLWFmYWYtYzFjNmFmNzU3MTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleTt75OSQGbS2KRx/309mVDjmLlA0//3cOfN
JMpe7puSPLWKfkNuZNzDoZtMtEz/9JGI9+Zx5EWkuDrggR4pqzzD4cG6Rh51rHNh
Z7WGiNB9ZSFRCVbH9qL6QmJgNZ8r6vX3LCKY/l6QDdAVQ9ErChXnNPPjKrYXq85h
qIyVH9AEBORfmGpEAn8zipCt9kYNZcjBzPCEmwEqYT8qu+aAo/fVcb3OXtNZdgrr
wWG50JFtkSQrrp8wfUOtCLNC6HUC7o5ndPuuX+N5F3mHpbVcz5HHKKoMU/iNr2/H
CMzvX4zXZIlk6TLmfp0Yeuts0XB0nvStU8gE+uszalcYJAw81wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAldI2RBsRHHtM2zmF3j3f8ih3TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMGIw
ODlmOS1iY2Y5LTQ0ODMtYmFkYi1jNGNmOGNhNmY5ZTEvMGRhYzFiOWUtZTAwNS0z
NzE2LWJhNTctNjY3ZTVjNDhmMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDBiMDg5ZjktYmNmOS00NDgzLWJh
ZGItYzRjZjhjYTZmOWUxLzAwYjA4OWY5LWJjZjktNDQ4My1iYWRiLWM0Y2Y4Y2E2
ZjllMS5jcmwwHwYDVR0jBBgwFoAUY3gJ6Uy3cgRY9KWej3u0kZrfNoQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMGIwODlmOS1iY2Y5LTQ0ODMtYmFkYi1jNGNm
OGNhNmY5ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2KPYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6bFdRaQZyn+SqnrK0Fn4e/dQuAN6lQ3S9s7bATIvdh0c68c12xVft5
w/OGqb7UX0Aq63tZHa/mARGb91hFzYHujpGQxmz01BJci5wgE7rOCN8H2p2jLxx+
iPaPnxrtfo3LsZV0HL8AxrbiLIZuO3bnCqDBEra/CD0yKIoh0FzLbigYGPeBG+Mm
umTIXuymiVSYnD56SgvvhcZzDGRopE/fwo+X61CWx66oSt7/0RKeBRq4OPsnKeH6
YqDrfqWuY9Q5T72+py0o+8GxGwNOnUIEzfyICSm37/ds/tCKEWhV6BPY+rRgwdrX
/Ty5AG/87eCTWp9xhhKt9lt+Ni/TV2w=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:18 2025 by rpki-client