Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/09a238a9-fdad-32b2-93e4-35e93090f171.roa
File:                     09a238a9-fdad-32b2-93e4-35e93090f171.roa (raw, json)
Hash identifier:          LNlIlcAtsWe2o1trc2jqG3Sq0BMevjNljgMjA7q6MlQ=
Subject key identifier:   0D:2E:52:B5:2F:96:A2:F2:21:DB:2F:6E:AF:55:86:04:77:1D:99:D0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AE4BEC0200E62C8E398A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/09a238a9-fdad-32b2-93e4-35e93090f171.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     7843
IP address blocks:        64.183.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:e4:be:c0:20:0e:62:c8:e3:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a6a4cd60-9e5a-42cf-b7e9-a3af02126880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:ab:76:a5:e6:38:31:d2:44:ac:10:41:b6:
                    03:b7:07:54:79:3c:22:82:81:64:98:80:09:88:56:
                    8e:58:44:58:b9:27:3d:60:90:48:24:75:5d:87:cd:
                    d2:e6:19:72:ae:78:8a:86:23:0c:38:cf:26:0f:fd:
                    88:48:e5:fe:6e:c6:c7:82:fc:30:ee:24:73:3f:6c:
                    b8:7e:37:10:99:82:d0:5d:90:7d:41:c6:2f:6f:bc:
                    1f:80:07:16:6a:89:f7:af:ce:70:56:1a:7f:67:8b:
                    82:03:08:5b:65:11:6f:d0:77:36:9e:42:ef:90:ff:
                    28:07:65:5a:ef:f8:14:84:38:6d:b4:33:5d:a5:11:
                    78:8a:d7:c9:90:57:96:c6:ba:29:00:d8:9e:fb:d6:
                    12:34:07:9f:e4:a3:f0:45:65:83:e9:ae:95:0f:ad:
                    9a:de:ad:21:69:06:0d:2d:b5:b8:e5:e0:57:90:43:
                    f8:48:23:2e:4a:ec:d8:38:ef:7e:c9:95:ec:1e:9d:
                    45:6b:40:82:2b:1e:89:35:2b:5e:95:ce:c8:d0:f2:
                    b0:4a:16:3d:91:7e:22:2d:b0:33:c6:3e:48:bf:56:
                    a7:65:ab:94:64:14:3e:0a:26:60:b4:a7:aa:4a:46:
                    5c:97:11:b6:8e:a8:ca:dc:05:2c:7d:8c:2f:54:cc:
                    65:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2E:52:B5:2F:96:A2:F2:21:DB:2F:6E:AF:55:86:04:77:1D:99:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/09a238a9-fdad-32b2-93e4-35e93090f171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.183.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:0b:7f:e5:87:eb:b1:0f:43:84:5e:d4:5d:21:f0:1b:73:
         dd:8d:64:23:1a:b5:90:3a:86:a7:94:6d:78:cd:f9:82:77:0f:
         4d:20:a6:3d:7a:e5:a9:09:a1:63:41:3e:25:d8:ce:52:71:1b:
         47:42:77:74:fc:a9:23:41:8f:58:9b:a3:10:76:fc:e9:a5:4f:
         02:7f:b6:bb:ff:cc:fd:51:53:26:f5:8f:53:cd:ad:73:fd:d9:
         64:a1:23:b1:16:25:35:d5:8f:ca:97:5f:55:28:87:63:48:7e:
         1e:d6:26:b4:ec:a4:c9:5f:d9:60:31:dc:92:56:ad:0d:e0:75:
         dd:ee:a0:9c:b6:16:0f:89:c7:79:ba:e0:08:03:33:81:27:47:
         8d:89:3d:2d:71:b8:dc:9f:3f:af:b5:42:84:c4:94:46:6d:1c:
         eb:34:42:45:ff:48:ae:e3:66:92:2c:82:de:d5:22:5e:b9:84:
         1a:bc:23:cc:e3:d1:d9:77:9f:5c:9a:ed:1c:e7:00:b9:64:b3:
         c1:b3:a7:37:24:83:ff:9e:e4:5e:1e:89:6b:66:a1:93:42:dd:
         bb:08:9b:14:0b:69:f9:c0:ef:a0:1d:c2:a6:cc:13:f1:93:96:
         fc:2b:81:8e:5c:21:3f:c8:b1:fa:4a:33:5f:d7:91:7f:53:99:
         90:7a:81:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDeuS+wCAOYsjjmKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
YTZhNGNkNjAtOWU1YS00MmNmLWI3ZTktYTNhZjAyMTI2ODgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNGrdqXmODHSRKwQQbYDtwdUeTwigoFkmIAJ
iFaOWERYuSc9YJBIJHVdh83S5hlyrniKhiMMOM8mD/2ISOX+bsbHgvww7iRzP2y4
fjcQmYLQXZB9QcYvb7wfgAcWaon3r85wVhp/Z4uCAwhbZRFv0Hc2nkLvkP8oB2Va
7/gUhDhttDNdpRF4itfJkFeWxropANie+9YSNAef5KPwRWWD6a6VD62a3q0haQYN
LbW45eBXkEP4SCMuSuzYOO9+yZXsHp1Fa0CCKx6JNStelc7I0PKwShY9kX4iLbAz
xj5Iv1anZauUZBQ+CiZgtKeqSkZclxG2jqjK3AUsfYwvVMxlBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0uUrUvlqLyIdsvbq9VhgR3HZnQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMDlhMjM4YTktZmRhZC0z
MmIyLTkzZTQtMzVlOTMwOTBmMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLegMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1ZC3/lh+uxD0OEXtRdIfAbc92NZCMatZA6hqeUbXjN+YJ3D00gpj16
5akJoWNBPiXYzlJxG0dCd3T8qSNBj1iboxB2/OmlTwJ/trv/zP1RUyb1j1PNrXP9
2WShI7EWJTXVj8qXX1Uoh2NIfh7WJrTspMlf2WAx3JJWrQ3gdd3uoJy2Fg+Jx3m6
4AgDM4EnR42JPS1xuNyfP6+1QoTElEZtHOs0QkX/SK7jZpIsgt7VIl65hBq8I8zj
0dl3n1ya7RznALlks8Gzpzckg/+e5F4eiWtmoZNC3bsImxQLafnA76AdwqbME/GT
lvwrgY5cIT/IsfpKM1/XkX9TmZB6gWA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:10:13 2025 by rpki-client