Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa
File:                     42027eea-f518-38da-a8a8-97e9aca956d3.roa (raw, json)
Hash identifier:          HJx/Uc8rvF6OcoFT1kj/JSQPwLhtjMfIuXM9JUHnfnM=
Subject key identifier:   20:E9:FE:A3:78:90:38:97:36:2B:CF:65:5E:A2:19:B2:1B:31:FD:AD
Certificate issuer:       /CN=cb3c1858-774e-412f-8f35-dbceb0979782
Certificate serial:       010D0C9F43285848037B6EF754AD4C873B65E300
Authority key identifier: B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     23118
IP address blocks:        69.36.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:6e:f7:54:ad:4c:87:3b:65:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3c1858-774e-412f-8f35-dbceb0979782
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a82afee5-7c2e-4253-81fc-40c2907377a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:1f:46:d3:dc:4c:96:bc:96:d6:bc:fa:fa:
                    ea:a8:0b:2f:24:44:ba:a4:74:d5:a1:8b:8c:d6:c9:
                    74:a2:cc:51:54:f4:b6:13:25:87:ac:6d:64:a4:eb:
                    cf:dc:c8:f7:a7:2f:48:de:77:d8:35:94:93:c1:82:
                    f9:e2:1f:9b:e8:38:ec:64:46:62:de:ee:9b:d9:33:
                    cc:7f:cf:a7:16:a5:2d:e2:7e:aa:2e:a2:2b:71:04:
                    2e:25:8e:48:1f:a9:77:95:86:2d:99:c4:45:f6:90:
                    8c:3e:9c:71:4c:0d:9e:c7:97:12:26:86:e4:64:f0:
                    e9:51:a8:4e:5b:24:97:94:15:de:6a:8b:61:92:b1:
                    0f:24:75:de:78:54:64:99:de:16:31:fd:ab:80:6a:
                    15:0d:6a:77:5b:2b:59:23:2e:09:e3:f4:ca:86:6d:
                    a3:a6:ad:98:26:20:de:29:60:f2:9a:bd:0d:41:4b:
                    b1:86:a3:2c:b4:ce:0a:29:dd:ef:72:cc:74:5f:b5:
                    23:29:60:78:d7:2b:db:5e:8f:d7:5e:74:8c:05:67:
                    1d:6c:06:5b:7e:ba:58:b5:43:62:c4:7c:33:dd:4e:
                    09:78:6d:41:f5:df:eb:32:79:2c:db:7f:4d:22:8c:
                    0a:17:b0:ca:49:47:dd:7d:3d:04:f3:15:b8:67:05:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E9:FE:A3:78:90:38:97:36:2B:CF:65:5E:A2:19:B2:1B:31:FD:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl

            X509v3 Authority Key Identifier:
                keyid:B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2b:f2:43:e6:89:4e:9e:d1:10:2d:05:c1:db:39:3a:5b:92:
         81:5c:4c:d3:0e:f4:62:8f:c2:1d:0a:d7:ec:fc:db:ab:2d:61:
         e4:71:7c:1d:4f:f7:fd:74:d5:8c:d0:6a:de:72:c8:62:a5:96:
         bc:fd:4c:d5:e0:97:05:2f:6e:5f:4a:77:b9:02:59:0f:07:af:
         33:21:4f:61:0f:e1:4b:89:7a:e3:a3:cb:c4:08:65:6b:bf:a1:
         e5:97:25:4a:7a:a7:44:9a:70:85:10:49:6e:35:04:43:a2:45:
         c8:53:5e:e3:e2:70:7b:9b:1e:7a:81:45:c8:5b:b3:d3:c7:ac:
         47:05:18:93:70:b4:b4:08:52:22:c4:d1:44:51:31:67:e0:eb:
         fd:91:dc:28:d7:73:7e:b8:10:e5:b3:45:ca:29:d5:0e:ac:d6:
         76:10:2c:3e:bd:9e:05:48:93:46:c6:72:23:64:ac:a2:8d:60:
         6e:69:20:ec:77:02:ff:c6:c3:7c:df:00:f2:76:53:c7:26:19:
         b3:ef:71:b5:01:06:9b:c8:aa:1c:ae:14:19:ca:8e:6d:5d:0b:
         5b:d7:f2:06:f2:ae:0d:8c:8a:b1:16:9c:eb:96:39:27:3b:91:
         a9:67:b7:d4:0e:12:c8:5e:b5:b9:ee:7e:a6:4b:97:23:eb:8b:
         30:98:85:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDe273VK1Mhztl4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYzE4NTgtNzc0ZS00MTJmLThmMzUtZGJjZWIwOTc5
NzgyMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
YTgyYWZlZTUtN2MyZS00MjUzLTgxZmMtNDBjMjkwNzM3N2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfIfRtPcTJa8lta8+vrqqAsvJES6pHTVoYuM
1sl0osxRVPS2EyWHrG1kpOvP3Mj3py9I3nfYNZSTwYL54h+b6DjsZEZi3u6b2TPM
f8+nFqUt4n6qLqIrcQQuJY5IH6l3lYYtmcRF9pCMPpxxTA2ex5cSJobkZPDpUahO
WySXlBXeaothkrEPJHXeeFRkmd4WMf2rgGoVDWp3WytZIy4J4/TKhm2jpq2YJiDe
KWDymr0NQUuxhqMstM4KKd3vcsx0X7UjKWB41yvbXo/XXnSMBWcdbAZbfrpYtUNi
xHwz3U4JeG1B9d/rMnks239NIowKF7DKSUfdfT0E8xW4ZwVBdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDp/qN4kDiXNivPZV6iGbIbMf2tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjNj
MTg1OC03NzRlLTQxMmYtOGYzNS1kYmNlYjA5Nzk3ODIvNDIwMjdlZWEtZjUxOC0z
OGRhLWE4YTgtOTdlOWFjYTk1NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2IzYzE4NTgtNzc0ZS00MTJmLThm
MzUtZGJjZWIwOTc5NzgyL2NiM2MxODU4LTc3NGUtNDEyZi04ZjM1LWRiY2ViMDk3
OTc4Mi5jcmwwHwYDVR0jBBgwFoAUsxchefvHIXUBMemhKCKmwsqNtjwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYjNjMTg1OC03NzRlLTQxMmYtOGYzNS1kYmNl
YjA5Nzk3ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSTRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwr8kPmiU6e0RAtBcHbOTpbkoFcTNMO9GKPwh0K1+z826stYeRxfB1P
9/101YzQat5yyGKllrz9TNXglwUvbl9Kd7kCWQ8HrzMhT2EP4UuJeuOjy8QIZWu/
oeWXJUp6p0SacIUQSW41BEOiRchTXuPicHubHnqBRchbs9PHrEcFGJNwtLQIUiLE
0URRMWfg6/2R3CjXc364EOWzRcop1Q6s1nYQLD69ngVIk0bGciNkrKKNYG5pIOx3
Av/Gw3zfAPJ2U8cmGbPvcbUBBpvIqhyuFBnKjm1dC1vX8gbyrg2MirEWnOuWOSc7
kalnt9QOEshetbnufqZLlyPrizCYhXs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:16:29 2025 by rpki-client