Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa
File:                     97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa (raw, json)
Hash identifier:          d9xF3BCwPT950FtKaNt5UssguuQPnxl9TyiNr1ZcgRM=
Subject key identifier:   C0:1D:79:4F:29:A4:38:E3:E6:1C:F7:21:01:EB:46:7A:DA:07:7A:62
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F4328584867FAEA09A5FABDF4472AF900
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa
Signing time:             Thu 02 Jan 2025 02:00:39 +0000
ROA not before:           Thu 02 Jan 2025 02:00:39 +0000
ROA not after:            Wed 02 Apr 2025 01:00:39 +0000
asID:                     27370
IP address blocks:        216.163.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:67:fa:ea:09:a5:fa:bd:f4:47:2a:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Jan  2 02:00:39 2025 GMT
            Not After : Apr  2 01:00:39 2025 GMT
        Subject: CN=c5310332-8e28-4a60-b15b-3add99181cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:16:ab:5e:31:d0:1d:7f:60:67:30:d7:e0:
                    d8:a2:15:63:9c:bd:97:b9:7c:f1:dc:6b:f5:15:d5:
                    f1:f0:b7:5d:bf:c6:e4:e5:6a:3b:59:77:28:68:76:
                    76:c6:9a:1a:01:7c:1d:c1:3c:5e:48:a0:43:0f:57:
                    20:0c:50:a5:a3:b9:59:2d:11:ca:0f:11:33:24:76:
                    83:b7:9a:cc:fe:a2:b4:77:92:3f:f4:c6:98:f0:1a:
                    51:7a:74:56:3f:1b:a2:82:c2:e3:4b:ba:ac:62:d2:
                    9d:72:6e:19:12:4f:71:bc:a4:8d:53:2d:9d:bd:56:
                    f7:70:e9:81:28:a4:d6:ec:cf:af:84:bf:5e:85:07:
                    ee:84:ad:1a:1f:f4:79:2e:e9:40:bc:8e:a1:f3:e0:
                    3a:2a:11:04:b2:6b:8e:74:ce:04:b3:fa:8c:e5:b0:
                    59:1a:4c:4d:1c:fb:85:01:fa:e6:fe:fa:93:7a:79:
                    7b:8c:97:a0:28:18:10:59:aa:b1:54:a1:ed:cb:fc:
                    ca:73:f1:a8:5f:cb:f2:73:35:51:5b:4e:53:d2:50:
                    18:09:53:d4:99:a7:d7:36:3c:14:c0:a5:8c:98:4d:
                    cf:a5:77:a7:8b:4a:4b:a7:f3:d3:14:79:8b:c5:de:
                    af:fb:63:d5:78:26:3b:59:b7:a0:ce:aa:c1:c0:ed:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1D:79:4F:29:A4:38:E3:E6:1C:F7:21:01:EB:46:7A:DA:07:7A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:21:61:66:5f:66:f7:c3:2c:e7:a7:e0:c5:f5:cd:7c:fe:86:
         bc:e1:4e:cb:24:c2:f8:6d:5d:61:46:b8:b1:c2:28:3e:79:06:
         55:94:b9:76:de:de:b7:54:09:63:bc:ea:44:8e:00:99:a8:85:
         ff:ee:dd:4d:ae:a5:e5:78:3d:40:7f:41:76:9f:e7:d7:8c:8c:
         88:5e:3e:9f:7e:2f:b2:44:fd:3e:39:f6:b3:ca:4d:c0:ad:db:
         e3:da:df:18:5e:ec:75:9e:00:20:59:50:0c:65:71:12:5e:94:
         4b:28:8b:8a:f7:06:e2:9b:bf:72:2e:1d:25:e1:6c:01:60:75:
         a7:a8:2f:70:12:de:82:0f:57:29:fb:35:28:97:a9:eb:2f:46:
         27:7f:e6:8f:4b:08:20:38:1b:40:f3:e2:bd:3f:14:3d:98:17:
         bf:70:72:ca:85:85:d1:59:05:b9:b1:89:ac:75:0b:e6:4a:5d:
         7d:6e:e6:0f:5a:11:70:c0:93:bf:81:37:91:9b:7e:78:12:76:
         c9:88:ff:83:6b:9e:9b:c3:15:6b:50:87:ea:5e:61:75:3e:ca:
         7d:e9:77:b8:1c:ea:5e:c3:56:0a:6c:48:cd:cc:9e:c0:3d:08:
         fb:7b:a3:79:25:fc:47:46:d7:40:db:53:ad:39:f5:1a:d4:d5:
         8f:90:c9:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+uoJpfq99Ecq+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBiMDg5ZjktYmNmOS00NDgzLWJhZGItYzRjZjhjYTZm
OWUxMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk
YzUzMTAzMzItOGUyOC00YTYwLWIxNWItM2FkZDk5MTgxY2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoMWq14x0B1/YGcw1+DYohVjnL2XuXzx3Gv1
FdXx8Lddv8bk5Wo7WXcoaHZ2xpoaAXwdwTxeSKBDD1cgDFClo7lZLRHKDxEzJHaD
t5rM/qK0d5I/9MaY8BpRenRWPxuigsLjS7qsYtKdcm4ZEk9xvKSNUy2dvVb3cOmB
KKTW7M+vhL9ehQfuhK0aH/R5LulAvI6h8+A6KhEEsmuOdM4Es/qM5bBZGkxNHPuF
Afrm/vqTenl7jJegKBgQWaqxVKHty/zKc/GoX8vyczVRW05T0lAYCVPUmafXNjwU
wKWMmE3PpXeni0pLp/PTFHmLxd6v+2PVeCY7WbegzqrBwO2rdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAdeU8ppDjj5hz3IQHrRnraB3piMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMGIw
ODlmOS1iY2Y5LTQ0ODMtYmFkYi1jNGNmOGNhNmY5ZTEvOTdlOTMwYjEtNDc0My0z
YzVjLWJjYmYtNmZlMjJkZTNhOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDBiMDg5ZjktYmNmOS00NDgzLWJh
ZGItYzRjZjhjYTZmOWUxLzAwYjA4OWY5LWJjZjktNDQ4My1iYWRiLWM0Y2Y4Y2E2
ZjllMS5jcmwwHwYDVR0jBBgwFoAUY3gJ6Uy3cgRY9KWej3u0kZrfNoQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMGIwODlmOS1iY2Y5LTQ0ODMtYmFkYi1jNGNm
OGNhNmY5ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KPcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUhYWZfZvfDLOen4MX1zXz+hrzhTsskwvhtXWFGuLHCKD55BlWUuXbe
3rdUCWO86kSOAJmohf/u3U2upeV4PUB/QXaf59eMjIhePp9+L7JE/T459rPKTcCt
2+Pa3xhe7HWeACBZUAxlcRJelEsoi4r3BuKbv3IuHSXhbAFgdaeoL3AS3oIPVyn7
NSiXqesvRid/5o9LCCA4G0Dz4r0/FD2YF79wcsqFhdFZBbmxiax1C+ZKXX1u5g9a
EXDAk7+BN5GbfngSdsmI/4NrnpvDFWtQh+peYXU+yn3pd7gc6l7DVgpsSM3MnsA9
CPt7o3kl/EdG10DbU6059RrU1Y+QyTY=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:32 2025 by rpki-client