Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5f090dd-7752-3520-b324-111195cf61b3.roa
File:                     b5f090dd-7752-3520-b324-111195cf61b3.roa (raw, json)
Hash identifier:          LA8dc9ooOHGYmdmjDgZrVF1tDopho8Zp+BfOqu/pO7E=
Subject key identifier:   6C:9F:3E:BC:38:7F:27:D2:39:1F:28:6B:41:BC:35:60:9A:21:B1:1D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F53C9F2DB61F5777070980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5f090dd-7752-3520-b324-111195cf61b3.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.228.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:3c:9f:2d:b6:1f:57:77:07:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=4e4c5eb1-17d1-4cbe-a651-f09c140e274f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:8f:53:93:18:a8:12:69:32:22:82:00:8e:
                    08:cd:10:b0:ab:e3:76:68:a3:fa:5c:ee:52:ab:c4:
                    c1:7b:d6:45:17:ce:20:8f:ee:c7:15:e3:40:91:d5:
                    3d:b7:b7:a7:ba:6f:57:a3:e0:29:49:9c:83:c5:27:
                    b7:c3:4a:6d:b9:f3:9a:75:1c:84:7f:89:52:f3:21:
                    ff:24:9a:af:4c:a2:d0:22:70:51:cb:a9:24:87:11:
                    b6:2b:24:56:5d:ea:9a:47:15:87:4f:a1:90:af:44:
                    6c:be:78:5b:ef:77:0a:3b:a2:a9:6e:06:32:62:ea:
                    98:a2:8f:2b:27:cb:d0:29:e0:3d:a9:c3:9f:3f:c6:
                    62:04:bc:04:51:26:f9:7f:81:54:aa:bc:5a:5b:65:
                    ff:70:ba:e9:9b:dc:d8:79:1f:09:a3:75:9b:9c:66:
                    52:64:55:38:58:99:44:78:b2:79:5b:0d:b3:08:26:
                    63:dd:e4:e0:ba:b7:48:47:12:94:2b:25:2e:54:b4:
                    2c:ae:de:f3:19:a2:d0:95:d2:27:06:f8:41:13:d2:
                    13:f5:54:f9:f3:e6:3f:a1:a9:69:e1:6e:3e:cf:34:
                    23:85:72:81:c2:c5:04:1f:4a:39:a2:19:bb:c0:43:
                    ea:e8:69:f7:c4:55:e6:18:e3:77:19:74:0f:99:eb:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9F:3E:BC:38:7F:27:D2:39:1F:28:6B:41:BC:35:60:9A:21:B1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5f090dd-7752-3520-b324-111195cf61b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.228.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a6:8b:c9:3d:8a:61:d6:a8:60:5a:21:6e:5d:f5:45:bd:3b:
         07:cc:fa:4d:31:89:70:31:48:1f:83:45:c0:51:48:26:b4:de:
         e2:36:bd:c6:84:ec:e7:f6:64:8a:01:41:40:41:99:7b:c8:32:
         4b:9d:0b:f6:02:a0:6c:1f:2d:c9:20:30:b8:93:76:b3:47:ab:
         19:ad:22:7b:78:56:e2:60:f0:64:f6:61:4d:9c:44:64:c1:f0:
         40:72:61:cd:e1:d7:ae:5c:ab:11:38:f2:a6:3e:21:d0:f9:0f:
         37:36:c4:ec:32:60:03:da:0f:a8:0f:38:2e:1b:6d:83:91:10:
         45:3c:e7:88:ee:7c:17:bc:a9:d3:fb:47:70:33:a6:78:8e:2b:
         1a:fa:b1:df:87:18:a3:0c:30:01:1a:c1:fe:71:24:0f:76:15:
         1e:e5:81:2f:f4:d7:9e:dc:93:20:01:b0:2e:e0:ae:d0:8f:3c:
         b1:d6:9f:f0:17:e6:78:f6:33:e6:20:fe:b1:44:10:32:77:75:
         97:53:8b:76:89:e1:f9:9a:08:88:56:f2:ed:49:48:90:f9:2a:
         b2:ea:d7:c9:be:2a:00:4c:1e:7b:9a:56:28:b6:a4:3a:7b:8c:
         99:59:e8:8b:d3:eb:ea:a6:4e:b5:e5:8b:2a:c3:2f:6e:d9:24:
         b7:a3:ae:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TyfLbYfV3cHCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NGU0YzVlYjEtMTdkMS00Y2JlLWE2NTEtZjA5YzE0MGUyNzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaaPU5MYqBJpMiKCAI4IzRCwq+N2aKP6XO5S
q8TBe9ZFF84gj+7HFeNAkdU9t7enum9Xo+ApSZyDxSe3w0ptufOadRyEf4lS8yH/
JJqvTKLQInBRy6kkhxG2KyRWXeqaRxWHT6GQr0Rsvnhb73cKO6KpbgYyYuqYoo8r
J8vQKeA9qcOfP8ZiBLwEUSb5f4FUqrxaW2X/cLrpm9zYeR8Jo3WbnGZSZFU4WJlE
eLJ5Ww2zCCZj3eTgurdIRxKUKyUuVLQsrt7zGaLQldInBvhBE9IT9VT58+Y/oalp
4W4+zzQjhXKBwsUEH0o5ohm7wEPq6Gn3xFXmGON3GXQPmeumPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGyfPrw4fyfSOR8oa0G8NWCaIbEdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjVmMDkwZGQtNzc1Mi0z
NTIwLWIzMjQtMTExMTk1Y2Y2MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+QwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2mi8k9imHWqGBaIW5d9UW9OwfM+k0xiXAxSB+DRcBRSCa03uI2vcaE
7Of2ZIoBQUBBmXvIMkudC/YCoGwfLckgMLiTdrNHqxmtInt4VuJg8GT2YU2cRGTB
8EByYc3h165cqxE48qY+IdD5Dzc2xOwyYAPaD6gPOC4bbYOREEU854jufBe8qdP7
R3AzpniOKxr6sd+HGKMMMAEawf5xJA92FR7lgS/0157ckyABsC7grtCPPLHWn/AX
5nj2M+Yg/rFEEDJ3dZdTi3aJ4fmaCIhW8u1JSJD5KrLq18m+KgBMHnuaVii2pDp7
jJlZ6IvT6+qmTrXliyrDL27ZJLejroc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:17 2025 by rpki-client