Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
File:                     da715157-9227-3031-a55c-e864ec645b9b.roa (raw, json)
Hash identifier:          TeF2Zu+wpF9nd0LOTMVvp2bOoHwmPZqTgouQfGqzZzI=
Subject key identifier:   72:87:EB:81:E8:C0:93:AB:64:C2:DF:F1:FE:63:EC:20:75:82:88:60
Certificate issuer:       /CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
Certificate serial:       010D0C9F43285847DB2904D651C5DD20A7A2E580
Authority key identifier: 4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
Signing time:             Tue 12 Nov 2024 15:24:38 +0000
ROA not before:           Tue 12 Nov 2024 15:24:38 +0000
ROA not after:            Mon 10 Feb 2025 15:24:38 +0000
asID:                     611
IP address blocks:        138.73.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:29:04:d6:51:c5:dd:20:a7:a2:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
        Validity
            Not Before: Nov 12 15:24:38 2024 GMT
            Not After : Feb 10 15:24:38 2025 GMT
        Subject: CN=13b78835-0f7b-4644-a21b-c98cb35293b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:21:bd:ca:e9:ad:e8:b7:3a:0d:55:26:e9:
                    ae:75:1c:60:6b:0c:21:5c:c7:34:7b:5e:53:5e:0c:
                    23:b8:00:e1:19:10:82:03:65:66:35:08:42:02:a5:
                    1c:ff:3a:e2:44:9e:73:64:17:94:2c:fd:fe:70:df:
                    b9:7f:07:5b:f9:21:3b:ae:e2:4f:20:9c:8c:8f:05:
                    04:c7:7d:95:f8:a2:d6:08:40:0f:94:08:08:cd:43:
                    6f:bc:13:c8:c0:8a:3a:43:68:b9:d0:88:04:8e:f0:
                    a7:7b:dd:d8:b8:1a:b7:18:89:e1:23:76:f6:42:b7:
                    ed:5c:3f:ca:28:10:97:89:06:20:a9:b1:15:6a:06:
                    0f:53:5e:ee:e3:04:29:72:06:8a:24:81:83:c6:07:
                    3e:e0:12:1c:70:ac:ea:4a:f3:89:ab:38:ed:b8:2b:
                    ce:93:fe:8f:ec:70:24:3a:28:a4:81:8d:16:97:c8:
                    2c:36:f8:c1:cf:91:68:20:e7:fb:74:3a:26:1f:ba:
                    78:2c:14:e2:2b:b4:7a:81:97:ab:51:e7:4f:69:07:
                    c3:75:8d:45:85:b4:92:7b:05:46:f5:45:8e:36:73:
                    10:85:87:70:b2:0c:ae:b0:a7:73:be:01:38:09:52:
                    f6:60:e7:7e:eb:14:b3:e9:00:27:ec:42:df:ef:3e:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:87:EB:81:E8:C0:93:AB:64:C2:DF:F1:FE:63:EC:20:75:82:88:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.crl

            X509v3 Authority Key Identifier:
                keyid:4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:61:e1:2a:fe:26:73:b8:04:93:e7:22:1a:d6:8f:48:12:71:
         03:18:c5:02:38:a5:5e:8b:40:fc:e8:2c:b9:d8:2b:1a:91:e5:
         64:f2:c9:1b:a6:2f:b3:3c:98:ee:04:eb:d6:e8:54:51:ea:d3:
         41:57:2e:a6:40:d4:e5:94:a8:2d:b4:2b:26:72:a7:94:53:69:
         cf:2a:1b:dd:f6:19:00:3b:40:77:44:b3:a0:e2:06:d8:91:2b:
         5f:ca:6e:ba:cf:ca:68:15:a2:13:a3:87:1b:e0:f7:8f:c6:0e:
         a8:a0:57:78:c5:04:02:f0:58:ae:a2:da:6d:71:53:b3:33:04:
         64:da:b6:e2:00:cf:39:af:ba:20:19:60:8e:b5:3e:b1:6e:d9:
         25:e3:83:e0:22:56:cc:0a:86:49:47:c4:bd:dd:84:c5:c7:9b:
         b5:28:67:46:6e:69:31:1b:91:8b:8a:39:52:6d:fd:e9:bb:de:
         24:26:4f:b2:76:4a:3d:ae:e5:81:07:26:3b:cb:0d:48:1b:8c:
         5a:f3:d3:9d:54:ff:f7:d2:97:2d:c0:21:78:4c:f7:80:94:29:
         50:f9:a7:12:3e:37:a3:ec:30:8b:04:d7:a9:83:71:ce:3c:8d:
         90:55:8e:5a:60:e4:44:ed:01:df:f9:4e:3e:1f:08:b1:48:5a:
         ff:7e:88:d5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfbKQTWUcXdIKei5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjViNGFiYjEtNThlYS00ZDNmLTk3MDMtMjI0MzhhYzlm
NTQ1MB4XDTI0MTExMjE1MjQzOFoXDTI1MDIxMDE1MjQzOFowLzEtMCsGA1UEAxMk
MTNiNzg4MzUtMGY3Yi00NjQ0LWEyMWItYzk4Y2IzNTI5M2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVAhvcrprei3Og1VJumudRxgawwhXMc0e15T
XgwjuADhGRCCA2VmNQhCAqUc/zriRJ5zZBeULP3+cN+5fwdb+SE7ruJPIJyMjwUE
x32V+KLWCEAPlAgIzUNvvBPIwIo6Q2i50IgEjvCne93YuBq3GInhI3b2QrftXD/K
KBCXiQYgqbEVagYPU17u4wQpcgaKJIGDxgc+4BIccKzqSvOJqzjtuCvOk/6P7HAk
OiikgY0Wl8gsNvjBz5FoIOf7dDomH7p4LBTiK7R6gZerUedPaQfDdY1FhbSSewVG
9UWONnMQhYdwsgyusKdzvgE4CVL2YOd+6xSz6QAn7ELf7z56KQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHKH64HowJOrZMLf8f5j7CB1gohgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NWI0
YWJiMS01OGVhLTRkM2YtOTcwMy0yMjQzOGFjOWY1NDUvZGE3MTUxNTctOTIyNy0z
MDMxLWE1NWMtZTg2NGVjNjQ1YjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjViNGFiYjEtNThlYS00ZDNmLTk3
MDMtMjI0MzhhYzlmNTQ1LzY1YjRhYmIxLTU4ZWEtNGQzZi05NzAzLTIyNDM4YWM5
ZjU0NS5jcmwwHwYDVR0jBBgwFoAUTLGdVpClEoPt0w1Hp5MaGDlEzGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NWI0YWJiMS01OGVhLTRkM2YtOTcwMy0yMjQz
OGFjOWY1NDUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAikkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGmHhKv4mc7gEk+ciGtaPSBJxAxjFAjilXotA/OgsudgrGpHlZPLJG6Yv
szyY7gTr1uhUUerTQVcupkDU5ZSoLbQrJnKnlFNpzyob3fYZADtAd0SzoOIG2JEr
X8puus/KaBWiE6OHG+D3j8YOqKBXeMUEAvBYrqLabXFTszMEZNq24gDPOa+6IBlg
jrU+sW7ZJeOD4CJWzAqGSUfEvd2ExcebtShnRm5pMRuRi4o5Um396bveJCZPsnZK
Pa7lgQcmO8sNSBuMWvPTnVT/99KXLcAheEz3gJQpUPmnEj43o+wwiwTXqYNxzjyN
kFWOWmDkRO0B3/lOPh8IsUha/36I1Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:39 2025 by rpki-client