Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/08ba0a50-b2f2-3799-a4ee-e7a9d6c609c6.roa
File:                     08ba0a50-b2f2-3799-a4ee-e7a9d6c609c6.roa (raw, json)
Hash identifier:          1LC723c4Vg3SuSGP5wC9TXPgO1VaGhR0n3qrexbfcgU=
Subject key identifier:   DA:A3:5A:28:9C:B8:18:68:FA:17:FF:0D:E0:FE:9C:9D:E0:50:B1:3D
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285848037B605D030B663F9500C180
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/08ba0a50-b2f2-3799-a4ee-e7a9d6c609c6.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     19961
IP address blocks:        69.74.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:60:5d:03:0b:66:3f:95:00:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=c587d993-a33b-4aab-8530-425f979f323c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:a5:b3:87:e4:0a:22:d4:30:bc:a5:be:eb:
                    1b:09:5d:8f:71:dd:13:93:b0:30:b4:ca:d4:95:9b:
                    5d:95:80:76:50:71:21:f3:ee:a4:4b:cf:a9:65:e4:
                    12:fb:90:8a:12:86:9f:b0:9c:f0:ed:2d:d6:b8:47:
                    23:f6:73:09:73:ee:67:40:b0:1a:78:6c:e8:df:a1:
                    8f:c0:1f:fd:6f:ef:df:e6:a6:09:70:46:d7:78:4e:
                    23:be:54:cb:bc:96:3a:c7:2c:7b:57:91:8c:c0:ae:
                    5e:5b:ae:ad:1e:76:f8:e5:3b:55:be:5a:dd:ee:27:
                    c4:e1:4d:48:8f:3d:dc:d1:52:2e:2a:90:b4:4c:d7:
                    e1:91:d1:d4:c9:dc:96:e4:2d:9a:31:a6:0e:f1:9e:
                    57:c0:29:8b:17:27:31:15:b1:bf:1b:79:f7:4d:ce:
                    56:b7:92:1b:79:8d:14:73:55:45:59:62:3c:42:28:
                    4a:e9:df:9a:c0:a8:73:a2:1b:ed:4f:84:60:eb:92:
                    68:ec:c6:92:d9:d8:87:83:31:0f:1f:76:26:88:ab:
                    99:83:86:8f:bd:c7:59:65:1b:89:8e:cb:1a:75:b5:
                    69:c2:ef:6f:79:03:f7:80:fa:e2:08:3e:dc:e4:9d:
                    30:36:07:9f:e7:06:42:95:9c:68:2c:a7:57:5e:da:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A3:5A:28:9C:B8:18:68:FA:17:FF:0D:E0:FE:9C:9D:E0:50:B1:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/08ba0a50-b2f2-3799-a4ee-e7a9d6c609c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:0e:7a:a9:87:af:d9:b2:95:e1:41:a3:a0:3a:20:4d:65:a8:
         56:c7:52:76:ae:af:47:27:56:a7:e3:9c:68:ce:27:9f:e1:c2:
         8c:9c:bb:ce:38:82:e0:6e:27:f2:3a:45:39:48:f9:27:56:19:
         ae:a5:75:df:e9:33:f7:b9:72:25:5b:fe:df:f2:32:52:8a:9e:
         62:1e:06:09:4b:77:69:0c:fe:88:d2:25:37:04:f0:d4:84:53:
         d1:20:f6:1b:9d:79:04:ed:28:da:e7:30:29:d7:31:00:56:2e:
         bf:5e:86:c5:d5:df:f2:30:35:c5:69:7b:98:82:12:ac:c3:ef:
         bb:95:96:8a:46:3a:76:0d:44:39:77:48:ca:d8:60:90:7b:b6:
         15:e9:57:5e:7e:b1:d8:cb:ef:b6:f8:34:c6:3a:48:51:53:9e:
         e0:a5:6d:5c:7f:cd:14:7d:9e:bb:3e:18:80:fd:03:53:1b:9f:
         b8:68:5f:50:11:e2:e6:5a:8f:66:1c:f7:d8:79:a5:2d:7e:62:
         4d:09:02:82:cf:6f:a2:18:31:62:e6:61:b6:c1:10:a6:25:ce:
         3c:c6:e8:6f:be:09:21:4f:c5:40:97:1e:1e:88:6a:85:0a:38:
         e2:57:94:d3:d3:9b:46:61:e1:60:3a:41:40:d0:49:c7:af:23:
         e5:aa:dd:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDe2BdAwtmP5UAwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
YzU4N2Q5OTMtYTMzYi00YWFiLTg1MzAtNDI1Zjk3OWYzMjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NWls4fkCiLUMLylvusbCV2Pcd0Tk7AwtMrU
lZtdlYB2UHEh8+6kS8+pZeQS+5CKEoafsJzw7S3WuEcj9nMJc+5nQLAaeGzo36GP
wB/9b+/f5qYJcEbXeE4jvlTLvJY6xyx7V5GMwK5eW66tHnb45TtVvlrd7ifE4U1I
jz3c0VIuKpC0TNfhkdHUydyW5C2aMaYO8Z5XwCmLFycxFbG/G3n3Tc5Wt5IbeY0U
c1VFWWI8QihK6d+awKhzohvtT4Rg65Jo7MaS2diHgzEPH3YmiKuZg4aPvcdZZRuJ
jssadbVpwu9veQP3gPriCD7c5J0wNgef5wZClZxoLKdXXtpWewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqjWiicuBho+hf/DeD+nJ3gULE9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvMDhiYTBhNTAtYjJmMi0z
Nzk5LWE0ZWUtZTdhOWQ2YzYwOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUpbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOEOeqmHr9myleFBo6A6IE1lqFbHUnaur0cnVqfjnGjOJ5/hwoycu844
guBuJ/I6RTlI+SdWGa6ldd/pM/e5ciVb/t/yMlKKnmIeBglLd2kM/ojSJTcE8NSE
U9Eg9hudeQTtKNrnMCnXMQBWLr9ehsXV3/IwNcVpe5iCEqzD77uVlopGOnYNRDl3
SMrYYJB7thXpV15+sdjL77b4NMY6SFFTnuClbVx/zRR9nrs+GID9A1Mbn7hoX1AR
4uZaj2Yc99h5pS1+Yk0JAoLPb6IYMWLmYbbBEKYlzjzG6G++CSFPxUCXHh6IaoUK
OOJXlNPTm0Zh4WA6QUDQScevI+Wq3d8=
-----END CERTIFICATE-----
Generated at Mon May 12 09:28:40 2025 by rpki-client