Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/06322d38-bbe2-3557-8d34-4a809d951d9d.roa
File:                     06322d38-bbe2-3557-8d34-4a809d951d9d.roa (raw, json)
Hash identifier:          vA1fLQPcb42HRsmGAVWMnKj+6/HvMstecUOcC7WAwB8=
Subject key identifier:   CD:95:EA:80:A1:D3:3E:60:BA:A9:60:FA:C1:B7:0E:C5:37:83:D3:2B
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584832F035CC146D3994D7BB3D60
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/06322d38-bbe2-3557-8d34-4a809d951d9d.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     8137
IP address blocks:        139.104.240.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:35:cc:14:6d:39:94:d7:bb:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=07e1363a-a9cb-4ebd-bca0-ad28c4c67634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:a0:6a:9a:1e:5d:b4:c9:d8:d1:d3:e5:ea:
                    7f:37:16:a1:fd:29:d2:55:97:09:da:18:59:af:2e:
                    2b:f0:d3:7f:bf:c4:7f:96:cf:f2:2b:9c:6b:3f:76:
                    d0:fb:59:57:3d:b7:8c:5e:f5:33:b1:20:02:8f:45:
                    aa:48:19:ed:e4:42:b4:3c:4b:70:c2:b3:f5:80:5e:
                    0b:b2:a6:b9:74:3e:fe:d8:7e:88:f5:d5:0f:46:0d:
                    61:b2:d7:17:5e:1c:7f:f7:15:f0:df:a5:12:77:1a:
                    aa:58:47:84:72:ba:a2:21:8a:d7:c5:27:15:e8:cd:
                    f5:0c:bb:18:b6:69:a4:a6:83:39:e5:55:6d:0b:8b:
                    86:a3:50:59:99:33:0b:de:ee:33:0a:c0:cf:69:4a:
                    b6:5d:5b:78:a4:bd:00:d1:9f:38:e6:68:e2:ed:d6:
                    d3:64:fc:c9:03:e0:63:f4:aa:29:a1:ff:4e:76:0a:
                    14:0f:1c:0d:cd:21:a9:9b:6b:33:90:da:cf:24:80:
                    b3:16:f8:a8:18:06:77:b6:a6:ec:07:12:e2:da:33:
                    8a:95:47:4a:7d:e4:78:43:e1:d4:fa:e6:11:26:72:
                    6d:b8:85:01:e3:c4:8d:fa:b5:8d:10:81:10:ee:f0:
                    0a:90:dc:6d:7a:09:27:aa:c9:f6:67:f6:c4:51:bd:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:95:EA:80:A1:D3:3E:60:BA:A9:60:FA:C1:B7:0E:C5:37:83:D3:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/06322d38-bbe2-3557-8d34-4a809d951d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b1:b0:53:6c:be:4b:74:ed:b8:1b:ea:28:50:c1:92:9b:ea:
         9e:5c:bf:b4:77:1e:07:bb:c5:ee:22:d8:dc:85:b1:1f:af:13:
         cb:d0:5c:56:08:aa:4a:06:93:fe:02:d8:c5:d9:bf:af:1c:21:
         78:6e:47:33:43:fa:7d:4a:b5:00:fe:19:72:4f:b9:8e:0e:1b:
         11:2b:70:45:51:f1:d8:c7:cd:c8:2d:a6:63:5d:b2:85:a0:3e:
         7c:f9:80:50:fd:82:58:8f:8c:bc:ac:22:66:3f:42:73:43:cb:
         4b:10:ec:e0:4d:ee:d7:e6:fb:c4:57:13:61:af:0a:d9:2d:7d:
         6b:38:b3:a5:81:24:a8:61:17:f5:6c:15:f7:8d:bf:5f:be:ce:
         ba:17:a5:b6:e5:31:4d:b4:88:aa:49:77:76:72:54:37:a0:06:
         ca:a1:22:5c:1c:20:cd:25:82:e9:9e:34:e2:2b:cc:e1:c3:44:
         31:b5:f9:96:3b:ff:17:51:96:a4:c7:4e:0c:97:6d:34:dc:8f:
         09:42:f4:f4:74:ad:7b:ca:7e:36:db:6d:80:3f:a9:ef:30:ac:
         9d:4e:de:6f:34:60:e9:1d:c6:17:c4:90:60:87:6b:94:66:de:
         ad:35:31:d0:e0:1a:83:55:ff:e2:24:11:14:84:1d:e3:51:d4:
         a5:0f:28:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DXMFG05lNe7PWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM5YmQ2ODQtODgzYi00MWI4LTk4OTAtOGNkNzgxMTc4
OThjMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDdlMTM2M2EtYTljYi00ZWJkLWJjYTAtYWQyOGM0YzY3NjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljGgapoeXbTJ2NHT5ep/Nxah/SnSVZcJ2hhZ
ry4r8NN/v8R/ls/yK5xrP3bQ+1lXPbeMXvUzsSACj0WqSBnt5EK0PEtwwrP1gF4L
sqa5dD7+2H6I9dUPRg1hstcXXhx/9xXw36USdxqqWEeEcrqiIYrXxScV6M31DLsY
tmmkpoM55VVtC4uGo1BZmTML3u4zCsDPaUq2XVt4pL0A0Z845mji7dbTZPzJA+Bj
9Kopof9OdgoUDxwNzSGpm2szkNrPJICzFvioGAZ3tqbsBxLi2jOKlUdKfeR4Q+HU
+uYRJnJtuIUB48SN+rWNEIEQ7vAKkNxtegknqsn2Z/bEUb0jQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2V6oCh0z5guqlg+sG3DsU3g9MrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYzli
ZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3ODExNzg5OGMvMDYzMjJkMzgtYmJlMi0z
NTU3LThkMzQtNGE4MDlkOTUxZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmM5YmQ2ODQtODgzYi00MWI4LTk4
OTAtOGNkNzgxMTc4OThjL2ZjOWJkNjg0LTg4M2ItNDFiOC05ODkwLThjZDc4MTE3
ODk4Yy5jcmwwHwYDVR0jBBgwFoAUUaHv6hItj28wFZq7IItgmAGJg3gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYzliZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3
ODExNzg5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi2jwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESxsFNsvkt07bgb6ihQwZKb6p5cv7R3Hge7xe4i2NyFsR+vE8vQXFYI
qkoGk/4C2MXZv68cIXhuRzND+n1KtQD+GXJPuY4OGxErcEVR8djHzcgtpmNdsoWg
Pnz5gFD9gliPjLysImY/QnNDy0sQ7OBN7tfm+8RXE2GvCtktfWs4s6WBJKhhF/Vs
FfeNv1++zroXpbblMU20iKpJd3ZyVDegBsqhIlwcIM0lgumeNOIrzOHDRDG1+ZY7
/xdRlqTHTgyXbTTcjwlC9PR0rXvKfjbbbYA/qe8wrJ1O3m80YOkdxhfEkGCHa5Rm
3q01MdDgGoNV/+IkERSEHeNR1KUPKNc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:20:25 2025 by rpki-client