Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa
File:                     8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa (raw, json)
Hash identifier:          n9GxcSYke8VIW81BkBVq5Vw6yNkDsODcHy1jnCCCZQo=
Subject key identifier:   8F:04:14:A3:23:89:47:A6:64:9C:AF:41:DF:A9:C7:D9:97:DF:33:6F
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F432858483885530AB6F330CA8E36C6C0
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     399629
IP address blocks:        64.190.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:53:0a:b6:f3:30:ca:8e:36:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=1020e340-0eaf-4626-a4a8-6a93bae9dad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:49:ad:71:62:f1:ff:85:1b:e1:7a:9f:79:
                    38:e5:5d:8b:91:af:4f:ab:72:b6:79:b3:26:f6:46:
                    d8:f9:e1:e8:c2:ed:86:01:e8:94:2d:27:4f:5a:9a:
                    df:e4:35:e7:8e:ee:cd:af:32:74:93:50:d3:47:a4:
                    6d:07:4d:b5:5e:c8:f0:6d:ba:54:8c:8b:d9:8e:f8:
                    97:ae:76:2f:bd:3a:1a:23:63:ac:68:b5:59:8f:75:
                    14:94:a2:3a:69:3b:16:06:aa:20:0f:3d:b0:c5:4c:
                    2b:d2:68:88:1b:cf:7a:1c:22:1c:81:db:a2:ca:7f:
                    26:7a:bc:53:73:af:f9:b6:fc:b5:ad:2a:0d:a8:78:
                    ba:39:1c:99:3d:5b:c8:b7:f4:89:e8:14:44:ec:91:
                    f2:17:b7:e0:c6:96:94:9a:a1:29:0b:45:41:2c:dc:
                    72:c6:1d:7b:47:0a:d2:c7:2d:c8:af:39:3a:81:89:
                    0f:fb:de:6e:9d:56:77:83:b3:50:d1:96:2e:cc:76:
                    bc:b3:5c:04:f4:d2:75:6d:0f:74:e1:8d:c3:0d:3f:
                    84:92:59:c4:66:1e:44:1e:87:a9:31:1c:21:41:29:
                    bf:9b:50:7c:86:b6:4c:9a:80:e1:27:b5:e7:11:c8:
                    4d:84:02:c0:67:75:a9:79:f0:7c:9e:91:16:ec:85:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:04:14:A3:23:89:47:A6:64:9C:AF:41:DF:A9:C7:D9:97:DF:33:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:13:11:0a:01:3a:c3:5d:16:1d:d5:0d:0f:ce:8e:8c:84:
         97:e8:42:eb:68:80:5c:26:a8:aa:2c:86:55:43:ee:37:76:4d:
         1c:a0:84:17:66:b9:96:f0:f3:66:58:a3:b3:b9:f0:a9:51:fb:
         28:61:75:4b:08:5a:6a:fe:f5:26:58:6a:ef:e3:f5:95:f5:5f:
         62:45:16:c3:72:74:d5:d7:26:8e:38:de:2b:3d:f1:dd:0d:09:
         c5:e6:72:b8:a8:ae:51:08:e5:fe:13:40:45:f4:99:d1:ce:21:
         96:eb:8c:0a:1b:9b:8a:c6:20:62:1c:64:18:e2:9f:d1:f4:ab:
         85:7b:44:93:93:e0:98:be:b3:1b:a9:8c:fb:a1:8f:20:15:28:
         8e:0d:69:7f:3a:30:85:e4:47:25:36:23:11:98:d0:8c:27:77:
         89:e0:30:7c:ba:68:1c:c9:49:6f:9d:9b:48:e4:45:54:85:d9:
         d8:1b:bd:0a:63:d3:46:2b:db:82:65:f3:7b:b9:40:c5:79:b7:
         7c:b3:77:ce:85:e7:b5:6b:82:68:57:98:7d:af:b3:81:bf:4f:
         49:c1:8e:c9:56:6e:a3:cc:17:a1:7b:11:c7:c7:41:17:81:f3:
         b1:33:2d:17:b2:a4:e4:db:05:04:be:36:3b:44:31:1d:61:cf:
         9d:6e:58:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hVMKtvMwyo42xsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MTAyMGUzNDAtMGVhZi00NjI2LWE0YTgtNmE5M2JhZTlkYWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0RJrXFi8f+FG+F6n3k45V2Lka9Pq3K2ebMm
9kbY+eHowu2GAeiULSdPWprf5DXnju7NrzJ0k1DTR6RtB021XsjwbbpUjIvZjviX
rnYvvToaI2OsaLVZj3UUlKI6aTsWBqogDz2wxUwr0miIG896HCIcgduiyn8merxT
c6/5tvy1rSoNqHi6ORyZPVvIt/SJ6BRE7JHyF7fgxpaUmqEpC0VBLNxyxh17RwrS
xy3Irzk6gYkP+95unVZ3g7NQ0ZYuzHa8s1wE9NJ1bQ904Y3DDT+EklnEZh5EHoep
MRwhQSm/m1B8hrZMmoDhJ7XnEchNhALAZ3WpefB8npEW7IXGuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8EFKMjiUemZJyvQd+px9mX3zNvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvOGVmM2M4ZTItOTY3YS0z
MWRlLTg4Y2QtNmNiZGY1YjVjNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL5xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3kExEKATrDXRYd1Q0Pzo6MhJfoQutogFwmqKoshlVD7jd2TRyghBdm
uZbw82ZYo7O58KlR+yhhdUsIWmr+9SZYau/j9ZX1X2JFFsNydNXXJo443is98d0N
CcXmcriorlEI5f4TQEX0mdHOIZbrjAobm4rGIGIcZBjin9H0q4V7RJOT4Ji+sxup
jPuhjyAVKI4NaX86MIXkRyU2IxGY0Iwnd4ngMHy6aBzJSW+dm0jkRVSF2dgbvQpj
00Yr24Jl83u5QMV5t3yzd86F57VrgmhXmH2vs4G/T0nBjslWbqPMF6F7EcfHQReB
87EzLReypOTbBQS+NjtEMR1hz51uWDU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:07 2025 by rpki-client