Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa
File:                     1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa (raw, json)
Hash identifier:          kcdoTn0LnnpD0SHDsWfzdOQhqLFPQMES/M14+boWfys=
Subject key identifier:   35:F4:CC:25:28:39:27:DD:65:26:46:C1:31:1C:F5:7B:41:9E:EE:3E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037B0BCF79663E655AAC9900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20001
IP address blocks:        64.183.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:0b:cf:79:66:3e:65:5a:ac:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=76858710-0496-4562-9a33-e0af41ad2564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:e4:62:c1:88:96:01:92:98:ff:35:c8:5b:
                    e6:b4:2b:ea:a4:c6:24:10:20:8c:fb:f5:e7:7d:ab:
                    2f:b9:b1:8a:f9:a0:c5:b5:bf:c7:1c:ac:96:1b:9c:
                    58:3f:6e:9b:40:5b:5e:2f:ff:15:aa:dc:1d:e1:af:
                    d0:d7:c8:6c:b7:7f:59:77:f6:a2:20:6c:ec:67:0f:
                    9c:f1:43:3d:d3:d0:54:39:18:dd:5a:63:04:58:53:
                    7a:a8:df:f3:63:dc:3c:17:13:6d:f6:74:cd:1d:07:
                    e0:04:2a:c8:d2:81:52:25:58:f2:4b:99:93:05:42:
                    c2:7f:92:12:1d:56:65:8e:9e:6d:e7:93:8c:0c:49:
                    1c:61:dc:1d:4a:b7:b5:b7:d7:f9:58:e0:14:24:21:
                    42:a1:53:8c:3a:ff:5a:ca:26:5f:20:33:86:1c:a6:
                    01:ba:b4:21:ad:b0:f9:f9:10:ec:12:52:6d:85:e1:
                    de:87:15:a7:6d:ab:29:6e:84:f1:c4:6e:51:89:bf:
                    06:e0:5b:8c:dd:c7:97:6c:25:fb:0f:ce:f7:50:e5:
                    a4:82:c6:9a:7e:af:33:47:6f:ad:96:c0:a0:a5:40:
                    7b:61:1c:4f:98:a7:5e:d0:46:ef:8e:ff:a4:f7:03:
                    60:e1:b7:04:8b:40:96:79:45:d4:c7:92:d3:76:03:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F4:CC:25:28:39:27:DD:65:26:46:C1:31:1C:F5:7B:41:9E:EE:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.183.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fe:5d:c7:57:e0:b2:0f:7b:18:7d:87:dc:bb:34:f5:e3:17:
         c4:b8:85:09:2a:80:6e:ae:c5:60:e8:67:42:1f:c3:79:14:4f:
         c3:f7:c5:e1:15:95:f0:bc:09:58:94:56:d2:22:22:88:2d:b1:
         90:3e:67:11:23:51:94:ea:ec:dd:8f:13:99:2c:35:77:d9:79:
         48:99:3b:0f:29:48:64:b0:1f:6d:d8:d8:b4:7e:1b:1c:d0:27:
         a7:0d:cc:5d:d9:60:e5:6e:bd:e3:56:7f:df:d7:f1:5d:9e:b3:
         ae:8f:1a:97:8c:5b:14:0d:8f:b1:eb:8f:be:20:d4:ea:2e:56:
         16:b9:4b:5a:eb:71:cf:b3:fa:05:97:cc:34:37:d2:53:15:46:
         40:0d:6d:6b:4c:e1:34:24:fe:75:e6:bc:ed:ec:95:f2:da:20:
         10:79:9a:d2:23:60:6a:6f:5c:10:67:99:37:ce:84:5a:49:1b:
         f6:c4:59:e9:6a:50:f1:76:4c:88:45:2f:97:90:44:92:f6:3d:
         fc:d3:d0:c3:1d:a8:7d:39:9c:ed:96:65:c6:df:b4:e0:5e:e5:
         c3:60:a0:f4:72:88:d3:3e:33:30:ff:44:7e:3f:11:eb:7d:5f:
         6a:de:b6:ca:80:18:ca:2b:d4:2c:7c:9b:ad:6b:d6:06:b3:a5:
         50:2d:83:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDewvPeWY+ZVqsmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NzY4NTg3MTAtMDQ5Ni00NTYyLTlhMzMtZTBhZjQxYWQyNTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAjkYsGIlgGSmP81yFvmtCvqpMYkECCM+/Xn
fasvubGK+aDFtb/HHKyWG5xYP26bQFteL/8Vqtwd4a/Q18hst39Zd/aiIGzsZw+c
8UM909BUORjdWmMEWFN6qN/zY9w8FxNt9nTNHQfgBCrI0oFSJVjyS5mTBULCf5IS
HVZljp5t55OMDEkcYdwdSre1t9f5WOAUJCFCoVOMOv9ayiZfIDOGHKYBurQhrbD5
+RDsElJtheHehxWnbaspboTxxG5Rib8G4FuM3ceXbCX7D873UOWkgsaafq8zR2+t
lsCgpUB7YRxPmKde0Ebvjv+k9wNg4bcEi0CWeUXUx5LTdgNmNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDX0zCUoOSfdZSZGwTEc9XtBnu4+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMWE2MjJhYmMtNmJkOS0z
ZThiLThiOTgtYWUyMzI2ZGNiZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQLeoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAz+XcdX4LIPexh9h9y7NPXjF8S4hQkqgG6uxWDoZ0Ifw3kUT8P3xeEV
lfC8CViUVtIiIogtsZA+ZxEjUZTq7N2PE5ksNXfZeUiZOw8pSGSwH23Y2LR+GxzQ
J6cNzF3ZYOVuveNWf9/X8V2es66PGpeMWxQNj7Hrj74g1OouVha5S1rrcc+z+gWX
zDQ30lMVRkANbWtM4TQk/nXmvO3slfLaIBB5mtIjYGpvXBBnmTfOhFpJG/bEWelq
UPF2TIhFL5eQRJL2PfzT0MMdqH05nO2WZcbftOBe5cNgoPRyiNM+MzD/RH4/Eet9
X2retsqAGMor1Cx8m61r1gazpVAtgxs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:21:56 2025 by rpki-client