Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5df3b6dc-070b-3384-a937-f559c6050d1d.roa
File:                     5df3b6dc-070b-3384-a937-f559c6050d1d.roa (raw, json)
Hash identifier:          +yzOxK18G5LVoRloslmrVWwel+gXPPsYoEjhyxGZgsE=
Subject key identifier:   EB:1F:0D:E0:D8:E7:2C:C8:2C:47:55:02:74:C9:26:B5:9B:51:4F:20
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E8F5169A45388B33FA6817C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5df3b6dc-070b-3384-a937-f559c6050d1d.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36040
IP address blocks:        64.15.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:16:9a:45:38:8b:33:fa:68:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=5607dbab-ee90-40fd-a69f-2573acce546f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:5d:98:c2:de:52:63:ca:d5:ea:61:93:13:
                    ef:f2:a2:d8:2b:b5:61:fc:09:c8:93:55:30:20:74:
                    38:c0:69:b7:f8:10:48:74:e3:0d:3c:18:38:50:a3:
                    8f:06:16:f5:2a:33:37:e1:93:b0:71:20:62:83:d8:
                    ad:d1:04:4f:5c:c3:2b:95:7c:cc:94:f0:fa:fd:d8:
                    01:5c:8e:49:71:4c:3a:a5:0c:04:a2:3f:36:64:46:
                    73:82:84:d5:bf:61:6e:98:d8:76:d9:8a:3b:73:c8:
                    8e:d3:f1:6a:9d:e7:24:c9:fa:04:27:52:9d:e6:4b:
                    11:de:a4:f2:77:bc:31:14:25:16:32:ae:6d:d7:f1:
                    a4:01:cb:06:0d:e8:05:9b:da:8e:34:f1:8f:ea:48:
                    fa:04:0f:fc:7e:39:89:ba:a6:af:8a:70:32:e3:2e:
                    59:4a:45:3d:b9:20:6b:38:5a:d7:6b:05:57:62:63:
                    82:75:3c:f0:50:d9:24:94:2c:58:fa:5e:59:4c:61:
                    87:01:cf:fc:e4:61:7d:62:3f:a5:52:10:c8:33:ef:
                    a0:cc:e7:fe:5c:ac:9c:4c:8d:13:43:8f:b4:af:7e:
                    16:23:61:fb:5f:fb:a1:ab:b7:a2:d5:fd:4d:b9:4c:
                    c7:3f:07:50:0d:1d:0a:28:1b:e5:92:a6:b9:43:3d:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1F:0D:E0:D8:E7:2C:C8:2C:47:55:02:74:C9:26:B5:9B:51:4F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5df3b6dc-070b-3384-a937-f559c6050d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:22:51:d7:28:38:5c:90:e1:30:c4:75:cd:de:b7:da:5c:17:
         33:74:63:3b:15:02:ad:a1:b7:f3:7c:8f:ad:1f:da:d2:e8:a4:
         a7:de:2a:bb:ef:30:a9:6a:8c:56:94:4b:05:71:72:f5:a7:9c:
         a0:81:60:04:0d:e0:ad:d2:e0:53:ba:94:80:29:b0:b4:6a:d4:
         41:de:78:08:42:85:33:14:35:2a:f9:8e:69:c2:b2:3d:5e:e9:
         27:3f:50:07:db:ce:c1:d8:eb:5b:c2:82:ae:18:44:94:d4:13:
         52:03:89:63:ee:18:fe:26:44:a5:8f:18:44:cb:bc:ac:42:90:
         b4:cc:90:cb:11:70:dc:b8:d5:a0:e5:10:84:81:1e:a0:dd:16:
         22:ed:a2:3e:f8:63:c1:8d:df:96:ac:1b:54:22:90:5e:d7:65:
         be:70:a5:95:15:79:7e:c3:23:d6:a5:75:e5:fe:63:8e:1d:30:
         94:73:90:6f:3d:49:b7:f8:50:ee:cc:da:6b:2b:35:35:f7:0b:
         4f:63:f0:00:8c:ce:54:1e:7a:ac:fc:77:2d:a0:6f:fb:d2:69:
         a9:b5:5e:32:1c:19:0e:19:2e:1a:82:f7:04:a5:4a:23:58:4d:
         f7:3a:3d:69:93:51:b1:1e:7d:ec:a2:61:9b:eb:48:02:29:33:
         01:ee:c4:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9RaaRTiLM/poF8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NTYwN2RiYWItZWU5MC00MGZkLWE2OWYtMjU3M2FjY2U1NDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgNdmMLeUmPK1ephkxPv8qLYK7Vh/AnIk1Uw
IHQ4wGm3+BBIdOMNPBg4UKOPBhb1KjM34ZOwcSBig9it0QRPXMMrlXzMlPD6/dgB
XI5JcUw6pQwEoj82ZEZzgoTVv2FumNh22Yo7c8iO0/FqneckyfoEJ1Kd5ksR3qTy
d7wxFCUWMq5t1/GkAcsGDegFm9qONPGP6kj6BA/8fjmJuqavinAy4y5ZSkU9uSBr
OFrXawVXYmOCdTzwUNkklCxY+l5ZTGGHAc/85GF9Yj+lUhDIM++gzOf+XKycTI0T
Q4+0r34WI2H7X/uhq7ei1f1NuUzHPwdQDR0KKBvlkqa5Qz2mDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsfDeDY5yzILEdVAnTJJrWbUU8gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvNWRmM2I2ZGMtMDcwYi0z
Mzg0LWE5MzctZjU1OWM2MDUwZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQA91MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgiUdcoOFyQ4TDEdc3et9pcFzN0YzsVAq2ht/N8j60f2tLopKfeKrvv
MKlqjFaUSwVxcvWnnKCBYAQN4K3S4FO6lIApsLRq1EHeeAhChTMUNSr5jmnCsj1e
6Sc/UAfbzsHY61vCgq4YRJTUE1IDiWPuGP4mRKWPGETLvKxCkLTMkMsRcNy41aDl
EISBHqDdFiLtoj74Y8GN35asG1QikF7XZb5wpZUVeX7DI9aldeX+Y44dMJRzkG89
Sbf4UO7M2msrNTX3C09j8ACMzlQeeqz8dy2gb/vSaam1XjIcGQ4ZLhqC9wSlSiNY
Tfc6PWmTUbEefeyiYZvrSAIpMwHuxL0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:02:10 2025 by rpki-client