Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/c7156cc8-0146-3a9d-9e53-76bf4a0064d1.roa
File:                     c7156cc8-0146-3a9d-9e53-76bf4a0064d1.roa (raw, json)
Hash identifier:          b4C9S7UZUkgKbAdjWxtDu3q3epyffDd7Mp6ilVB/Z1E=
Subject key identifier:   6B:6A:46:9C:8A:8E:B5:62:56:77:8F:42:2F:43:D2:29:2A:F4:C3:CB
Certificate issuer:       /CN=050335c5-eabd-457a-a0b3-c677e99e9ba6
Certificate serial:       010D0C9F432858484515897E8033186BDD43F858
Authority key identifier: 94:5A:0D:DF:E4:1E:16:93:F9:30:6B:D4:D4:8C:76:8F:2F:1C:19:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/c7156cc8-0146-3a9d-9e53-76bf4a0064d1.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     6939
IP address blocks:        134.195.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:89:7e:80:33:18:6b:dd:43:f8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050335c5-eabd-457a-a0b3-c677e99e9ba6
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=b22bf828-af29-4c0a-91f9-74fbe7335573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:34:ff:0a:e0:53:59:22:72:17:da:f0:ba:
                    bf:11:b2:42:c4:9d:5d:ac:1b:a1:4a:e8:8e:8d:02:
                    99:dc:56:75:7e:2d:f5:e3:2a:bb:84:73:3f:17:99:
                    ce:7e:84:57:50:04:bc:bd:79:10:ed:e7:7d:b3:6c:
                    71:d6:56:0a:24:73:f2:34:56:e0:02:f1:4c:0c:ca:
                    81:af:58:e1:fb:7a:3b:8f:00:fc:a0:32:b8:ea:e1:
                    38:af:2c:38:e8:d3:cb:c1:c3:16:93:02:53:15:7e:
                    bc:51:3d:41:bd:a5:15:66:84:6b:b4:7f:be:b7:5c:
                    d8:cd:be:0f:ab:9c:ed:98:6a:30:58:7d:16:17:07:
                    87:2d:ca:af:5f:9f:5e:30:91:e6:3d:13:7b:68:aa:
                    aa:bf:9c:93:31:2c:f5:37:59:2d:7b:c9:71:07:07:
                    0d:35:ca:c4:a5:ac:49:75:15:c8:16:f1:86:f5:99:
                    41:45:72:61:b8:2e:74:d0:3d:30:e5:2d:9c:10:48:
                    45:26:09:89:ea:a4:24:eb:7d:ef:c8:22:c7:1a:83:
                    ed:e8:4c:f4:b0:f1:75:ce:5a:04:e6:a1:f5:a2:81:
                    d4:6e:5a:ec:66:c1:d6:10:4a:c6:a4:88:bd:06:85:
                    31:00:52:99:98:4f:65:22:0e:6b:59:b7:32:64:de:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6A:46:9C:8A:8E:B5:62:56:77:8F:42:2F:43:D2:29:2A:F4:C3:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/c7156cc8-0146-3a9d-9e53-76bf4a0064d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/050335c5-eabd-457a-a0b3-c677e99e9ba6.crl

            X509v3 Authority Key Identifier:
                keyid:94:5A:0D:DF:E4:1E:16:93:F9:30:6B:D4:D4:8C:76:8F:2F:1C:19:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:db:f7:da:72:df:46:95:c9:54:49:2a:5a:c7:b5:96:14:59:
         3a:e3:96:19:37:d3:43:aa:c4:37:46:ba:48:8d:cf:78:c8:f3:
         47:cf:7e:07:4b:c1:59:5c:af:25:2a:79:c7:e9:38:ce:32:96:
         8e:e5:d0:a4:12:e9:66:0f:a6:19:7f:09:63:f4:3b:29:d0:cb:
         eb:7f:67:d3:b6:3b:f5:75:72:2e:25:39:41:97:57:10:98:8c:
         5a:9d:6a:47:56:45:21:2e:db:65:59:02:9b:d7:5c:84:7c:f3:
         64:d7:1b:fc:1b:aa:4c:f3:f9:1c:03:a6:f7:7b:03:2a:f9:31:
         b6:1a:d8:49:57:df:fb:07:97:db:e6:33:d8:03:2b:ad:8d:88:
         64:35:2b:3c:4f:0c:f2:1a:4a:b3:f4:ed:e7:2e:b8:ce:ab:d3:
         e3:35:3c:e3:0d:c2:cb:78:e4:7b:13:a6:c5:7c:c8:16:c8:b4:
         61:4d:ca:91:7f:9b:f8:42:10:3c:8b:07:68:15:2e:be:0a:76:
         41:ac:24:d0:f6:28:dd:0a:05:4c:87:45:3a:de:a9:03:61:25:
         94:a1:54:5d:05:58:49:99:26:4a:e7:8f:a5:9c:5d:84:db:ec:
         25:ac:a5:46:61:53:86:df:3c:46:01:de:c0:a2:79:8d:b8:b0:
         0f:c9:92:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYl+gDMYa91D+FgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUwMzM1YzUtZWFiZC00NTdhLWEwYjMtYzY3N2U5OWU5
YmE2MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
YjIyYmY4MjgtYWYyOS00YzBhLTkxZjktNzRmYmU3MzM1NTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG80/wrgU1kichfa8Lq/EbJCxJ1drBuhSuiO
jQKZ3FZ1fi314yq7hHM/F5nOfoRXUAS8vXkQ7ed9s2xx1lYKJHPyNFbgAvFMDMqB
r1jh+3o7jwD8oDK46uE4ryw46NPLwcMWkwJTFX68UT1BvaUVZoRrtH++t1zYzb4P
q5ztmGowWH0WFweHLcqvX59eMJHmPRN7aKqqv5yTMSz1N1kte8lxBwcNNcrEpaxJ
dRXIFvGG9ZlBRXJhuC500D0w5S2cEEhFJgmJ6qQk633vyCLHGoPt6Ez0sPF1zloE
5qH1ooHUblrsZsHWEErGpIi9BoUxAFKZmE9lIg5rWbcyZN6DBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGtqRpyKjrViVnePQi9D0ikq9MPLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNTAz
MzVjNS1lYWJkLTQ1N2EtYTBiMy1jNjc3ZTk5ZTliYTYvYzcxNTZjYzgtMDE0Ni0z
YTlkLTllNTMtNzZiZjRhMDA2NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDUwMzM1YzUtZWFiZC00NTdhLWEw
YjMtYzY3N2U5OWU5YmE2LzA1MDMzNWM1LWVhYmQtNDU3YS1hMGIzLWM2NzdlOTll
OWJhNi5jcmwwHwYDVR0jBBgwFoAUlFoN3+QeFpP5MGvU1Ix2jy8cGYMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNTAzMzVjNS1lYWJkLTQ1N2EtYTBiMy1jNjc3
ZTk5ZTliYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsMkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDb99py30aVyVRJKlrHtZYUWTrjlhk300OqxDdGukiNz3jI80fPfgdL
wVlcryUqecfpOM4ylo7l0KQS6WYPphl/CWP0OynQy+t/Z9O2O/V1ci4lOUGXVxCY
jFqdakdWRSEu22VZApvXXIR882TXG/wbqkzz+RwDpvd7Ayr5MbYa2ElX3/sHl9vm
M9gDK62NiGQ1KzxPDPIaSrP07ecuuM6r0+M1POMNwst45HsTpsV8yBbItGFNypF/
m/hCEDyLB2gVLr4KdkGsJND2KN0KBUyHRTreqQNhJZShVF0FWEmZJkrnj6WcXYTb
7CWspUZhU4bfPEYB3sCieY24sA/JkkE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:51 2025 by rpki-client