Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/11d14097-e30f-38c3-8223-9ffc2a986371.roa
File:                     11d14097-e30f-38c3-8223-9ffc2a986371.roa (raw, json)
Hash identifier:          dbeg6SA7x+9LTosPIRz4CtFhOdlOIQRgCSigW6hJhQs=
Subject key identifier:   A5:B2:51:98:83:86:A6:60:4F:05:E0:46:60:DD:A0:60:EA:D1:88:89
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F4328584858A05861D73609D86E5E0600
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/11d14097-e30f-38c3-8223-9ffc2a986371.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     33436
IP address blocks:        172.82.72.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:58:61:d7:36:09:d8:6e:5e:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=b7f6979c-1871-4784-8601-6eed61e8f82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:47:1e:0e:09:5b:17:dc:54:80:00:61:8c:
                    5c:4f:38:71:67:fd:1d:63:68:97:c6:9c:a8:9a:3e:
                    71:6f:aa:81:14:15:a6:9c:10:33:f0:4f:29:ab:ff:
                    81:4a:d6:b9:5a:98:63:3f:f4:3e:e7:c3:fc:e5:25:
                    a4:98:df:36:58:c2:bc:ac:ed:7f:15:d3:ed:bc:41:
                    dc:7c:76:35:f4:db:d1:87:3b:40:0c:4d:a1:94:4d:
                    a4:a6:24:46:79:5a:eb:19:93:97:76:9e:3e:e4:d3:
                    d2:20:23:38:12:2b:c7:ac:9f:bb:62:37:d5:8a:3c:
                    12:ba:b1:d7:34:b7:ba:c6:f8:4e:37:2c:d4:d4:39:
                    41:c2:b1:b5:6c:82:57:66:27:34:11:95:6d:a4:b8:
                    69:f3:e9:56:b8:14:ef:f4:19:e5:4d:70:20:f9:a8:
                    e1:eb:2a:66:6a:f6:60:6f:a8:b1:76:9f:f4:d9:cf:
                    6c:8c:71:c4:22:4f:57:14:ee:89:2c:04:de:c7:f5:
                    fe:0b:bf:b9:54:68:7f:e1:5b:4d:f6:64:63:a7:d0:
                    06:5b:22:2d:33:fc:b9:23:f4:5c:bc:87:2d:b9:6c:
                    4a:43:4a:11:3c:b5:e8:83:a0:70:d1:ed:e2:ce:30:
                    1e:05:a5:3f:30:b2:56:32:c6:4c:62:7f:bd:c8:6a:
                    7d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B2:51:98:83:86:A6:60:4F:05:E0:46:60:DD:A0:60:EA:D1:88:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/11d14097-e30f-38c3-8223-9ffc2a986371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a5:2d:12:ea:08:29:22:45:37:78:f7:39:f0:9a:f5:fa:5d:
         d8:d6:6f:86:26:e9:5e:b3:63:a4:c6:9f:b2:2e:82:ae:24:35:
         fb:d1:cd:bc:1b:e8:14:a9:27:9d:5d:7d:f0:d5:44:0e:2c:f6:
         1b:aa:75:8b:d2:16:c2:42:6f:6f:ba:fd:cd:bf:fd:bc:e6:a3:
         82:30:c2:bb:a1:b0:9d:26:a7:53:97:44:d4:fc:80:a5:d5:63:
         50:23:b1:4e:f9:a3:a0:80:ee:e0:f8:8e:b2:6d:7f:86:30:ab:
         19:d5:4e:1e:b2:cd:f9:57:f3:c9:5e:c4:88:11:93:39:9e:dd:
         b3:5b:80:d5:6b:60:6f:ff:09:1e:3f:65:e8:6f:a7:29:8c:f6:
         e2:72:e5:c6:22:17:5a:d4:d4:3b:dc:e1:7d:d4:af:b0:16:eb:
         ed:35:33:83:1f:ef:1c:3d:63:28:e2:c4:76:92:9b:3e:06:bd:
         b6:51:10:65:58:aa:f4:24:46:46:f7:87:b6:c8:4e:4a:ae:86:
         92:4d:c9:ce:9c:20:27:c1:6a:48:09:27:f1:05:f0:13:a9:a3:
         ed:7c:28:fe:fc:0c:97:ba:be:84:74:98:0d:02:14:5a:c1:97:
         07:4b:e6:e3:5b:17:10:79:b1:30:0d:21:fc:6f:69:b6:a0:7e:
         ad:9d:b3:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFhh1zYJ2G5eBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJiYmI2MWYtZmMxNy00ZDk2LWI5YzMtODg0MGJjZGQ0
MWMyMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
YjdmNjk3OWMtMTg3MS00Nzg0LTg2MDEtNmVlZDYxZThmODJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIlHHg4JWxfcVIAAYYxcTzhxZ/0dY2iXxpyo
mj5xb6qBFBWmnBAz8E8pq/+BSta5WphjP/Q+58P85SWkmN82WMK8rO1/FdPtvEHc
fHY19NvRhztADE2hlE2kpiRGeVrrGZOXdp4+5NPSICM4EivHrJ+7YjfVijwSurHX
NLe6xvhONyzU1DlBwrG1bIJXZic0EZVtpLhp8+lWuBTv9BnlTXAg+ajh6ypmavZg
b6ixdp/02c9sjHHEIk9XFO6JLATex/X+C7+5VGh/4VtN9mRjp9AGWyItM/y5I/Rc
vIctuWxKQ0oRPLXog6Bw0e3izjAeBaU/MLJWMsZMYn+9yGp98wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKWyUZiDhqZgTwXgRmDdoGDq0YiJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80YmJi
YjYxZi1mYzE3LTRkOTYtYjljMy04ODQwYmNkZDQxYzIvMTFkMTQwOTctZTMwZi0z
OGMzLTgyMjMtOWZmYzJhOTg2MzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGJiYmI2MWYtZmMxNy00ZDk2LWI5
YzMtODg0MGJjZGQ0MWMyLzRiYmJiNjFmLWZjMTctNGQ5Ni1iOWMzLTg4NDBiY2Rk
NDFjMi5jcmwwHwYDVR0jBBgwFoAUYA/TZQdk//P1Rg4iJtc7WhIoGOowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80YmJiYjYxZi1mYzE3LTRkOTYtYjljMy04ODQw
YmNkZDQxYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFJIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGlLRLqCCkiRTd49znwmvX6XdjWb4Ym6V6zY6TGn7Iugq4kNfvRzbwb
6BSpJ51dffDVRA4s9huqdYvSFsJCb2+6/c2//bzmo4IwwruhsJ0mp1OXRNT8gKXV
Y1AjsU75o6CA7uD4jrJtf4YwqxnVTh6yzflX88lexIgRkzme3bNbgNVrYG//CR4/
ZehvpymM9uJy5cYiF1rU1Dvc4X3Ur7AW6+01M4Mf7xw9YyjixHaSmz4GvbZREGVY
qvQkRkb3h7bITkquhpJNyc6cICfBakgJJ/EF8BOpo+18KP78DJe6voR0mA0CFFrB
lwdL5uNbFxB5sTANIfxvabagfq2ds+k=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:30 2025 by rpki-client