Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/442c63df-c0a3-3159-955b-66d48fc740bf.roa
File:                     442c63df-c0a3-3159-955b-66d48fc740bf.roa (raw, json)
Hash identifier:          mNtXgk2S1UajO8aDSO1geByNC2LA5SmxRsfrymvA5NA=
Subject key identifier:   07:E3:84:CB:13:50:C0:07:9B:82:EF:CB:76:19:FB:E2:46:E0:D6:3C
Certificate issuer:       /CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc
Certificate serial:       010D0C9F43285848100A81CDD6ACCAF737109E90
Authority key identifier: 9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/442c63df-c0a3-3159-955b-66d48fc740bf.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     16509
IP address blocks:        192.58.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:81:cd:d6:ac:ca:f7:37:10:9e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=b9352f78-3a59-47c7-9ccf-8a0d2182c090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b0:78:1a:46:9b:4e:e3:9c:5f:0c:a2:c8:9a:
                    b5:cc:6a:10:af:fe:26:48:a3:7a:ec:bd:1e:0a:df:
                    cf:e0:a2:30:2d:03:a3:24:94:1b:68:1c:6c:7b:c2:
                    17:ce:9f:a0:01:1e:58:a4:e1:ce:c8:2a:91:22:7f:
                    ba:96:1c:89:0d:e0:13:f3:01:9f:13:72:17:24:1c:
                    de:29:10:5a:68:09:d0:02:92:60:28:fb:9c:cc:a7:
                    dc:72:f0:5d:a9:19:73:03:e9:32:8f:28:8a:14:5c:
                    20:5b:66:3a:a3:32:c6:95:fa:61:5a:bb:db:57:6c:
                    91:18:37:63:64:79:32:07:f7:86:4c:7b:05:6c:a0:
                    ab:c2:4a:b6:5b:87:ab:77:75:89:65:a4:ff:55:3c:
                    20:77:6e:ea:9c:1d:a3:1d:c7:07:c6:ed:10:0b:8d:
                    1d:b8:30:1c:c2:dd:f8:3b:5f:5c:a5:25:12:83:4c:
                    f7:48:a1:c4:06:26:d8:da:ad:f7:f4:bd:16:45:16:
                    fc:50:0b:a0:ae:56:88:e7:2a:4f:bf:4d:81:aa:d2:
                    d7:d9:aa:e5:be:c1:9c:b9:7f:75:05:5c:2e:2c:0b:
                    1e:7e:44:c4:1d:e4:bc:6e:74:31:f2:7d:9d:c7:3e:
                    6d:64:95:5b:99:f0:8f:be:61:49:0b:fb:19:b0:87:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E3:84:CB:13:50:C0:07:9B:82:EF:CB:76:19:FB:E2:46:E0:D6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/442c63df-c0a3-3159-955b-66d48fc740bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl

            X509v3 Authority Key Identifier:
                keyid:9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:81:57:5a:4a:0a:7d:5c:d0:c2:87:78:11:d4:8f:9c:46:2b:
         f2:81:0a:00:38:99:d2:22:0f:b1:53:0d:f5:6a:fa:cb:53:73:
         ff:4e:f4:be:e4:b1:a5:c0:52:6c:0d:40:0d:1b:60:fa:24:c7:
         12:05:90:f5:37:96:41:7d:7f:fe:0d:77:08:15:5a:67:ad:a0:
         e3:77:eb:20:da:3e:e0:07:bf:7b:1b:e8:25:70:48:64:9b:6b:
         72:80:58:66:29:8d:b9:2d:54:ad:00:03:3c:ba:9f:ea:7e:a9:
         65:a4:51:d2:23:92:3d:e5:89:ab:83:1a:f8:05:1d:4a:e5:18:
         9e:df:bf:26:6c:7b:41:af:e2:fa:93:e4:53:18:66:2c:87:7c:
         87:80:ae:59:c1:18:1f:c0:f9:5b:20:8b:3e:ce:97:72:ce:49:
         e4:14:73:5f:58:00:7e:19:62:46:88:38:65:d2:4e:26:65:ce:
         7f:30:e7:20:a1:7e:3f:fb:c4:8b:55:71:72:14:bf:25:03:80:
         91:a8:bf:d3:30:b8:ba:14:57:cd:79:a3:90:cb:d8:7c:74:81:
         dd:83:00:6b:74:76:2e:09:5b:00:39:6f:06:64:77:61:43:7c:
         f9:b2:95:10:c7:11:48:42:33:53:59:7c:25:24:42:6c:f4:ec:
         9e:50:cb:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCoHN1qzK9zcQnpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JmNjgwOWYtMGI0NS00N2Q1LWI3Y2MtN2Y4OTJkZGRh
MGRjMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
YjkzNTJmNzgtM2E1OS00N2M3LTljY2YtOGEwZDIxODJjMDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7B4GkabTuOcXwyiyJq1zGoQr/4mSKN67L0e
Ct/P4KIwLQOjJJQbaBxse8IXzp+gAR5YpOHOyCqRIn+6lhyJDeAT8wGfE3IXJBze
KRBaaAnQApJgKPuczKfccvBdqRlzA+kyjyiKFFwgW2Y6ozLGlfphWrvbV2yRGDdj
ZHkyB/eGTHsFbKCrwkq2W4erd3WJZaT/VTwgd27qnB2jHccHxu0QC40duDAcwt34
O19cpSUSg0z3SKHEBibY2q339L0WRRb8UAugrlaI5ypPv02BqtLX2arlvsGcuX91
BVwuLAsefkTEHeS8bnQx8n2dxz5tZJVbmfCPvmFJC/sZsIcAvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAfjhMsTUMAHm4Lvy3YZ++JG4NY8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2
ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5MmRkZGEwZGMvNDQyYzYzZGYtYzBhMy0z
MTU5LTk1NWItNjZkNDhmYzc0MGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JmNjgwOWYtMGI0NS00N2Q1LWI3
Y2MtN2Y4OTJkZGRhMGRjL2NiZjY4MDlmLTBiNDUtNDdkNS1iN2NjLTdmODkyZGRk
YTBkYy5jcmwwHwYDVR0jBBgwFoAUmwap4jKSLvGtTIQEPijY3xF1DZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5
MmRkZGEwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDr8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCBV1pKCn1c0MKHeBHUj5xGK/KBCgA4mdIiD7FTDfVq+stTc/9O9L7k
saXAUmwNQA0bYPokxxIFkPU3lkF9f/4NdwgVWmetoON36yDaPuAHv3sb6CVwSGSb
a3KAWGYpjbktVK0AAzy6n+p+qWWkUdIjkj3liauDGvgFHUrlGJ7fvyZse0Gv4vqT
5FMYZiyHfIeArlnBGB/A+Vsgiz7Ol3LOSeQUc19YAH4ZYkaIOGXSTiZlzn8w5yCh
fj/7xItVcXIUvyUDgJGov9MwuLoUV815o5DL2Hx0gd2DAGt0di4JWwA5bwZkd2FD
fPmylRDHEUhCM1NZfCUkQmz07J5Qy6E=
-----END CERTIFICATE-----
Generated at Tue May 6 00:44:14 2025 by rpki-client