Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa
File:                     9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa (raw, json)
Hash identifier:          V3lN1Lln67lFO2qGv5aJ9TZC7NixbGhHGv5F6+xMji0=
Subject key identifier:   86:B8:8A:84:42:CA:A3:BF:E3:30:17:A5:7B:41:6B:88:84:DF:FB:DE
Certificate issuer:       /CN=4638d5d1-44fb-4ecc-9e21-685a28c0b0b4
Certificate serial:       010D0C9F432858483455685574119C443632C080
Authority key identifier: AE:00:06:1A:E2:3C:4C:D1:26:F3:52:C7:6C:7A:1F:C7:BA:D2:44:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     19743
IP address blocks:        216.39.228.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:68:55:74:11:9c:44:36:32:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4638d5d1-44fb-4ecc-9e21-685a28c0b0b4
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=8ca72c06-02b6-41fb-995f-9d6e09e5bb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:77:ec:38:ec:c9:ab:00:78:66:e6:7d:44:
                    47:3a:96:de:7a:14:03:4c:39:c8:50:17:48:70:3b:
                    78:52:c2:d8:7f:22:f8:b9:9f:c7:78:7f:f4:74:f2:
                    87:b8:ad:10:02:19:4e:c6:88:40:e8:61:de:b7:c0:
                    08:da:7b:c8:39:c0:f2:74:4b:2b:3d:26:ad:fb:d5:
                    c3:4b:dc:3a:44:8f:29:3c:0b:a8:b7:96:15:c3:db:
                    7e:7e:fc:fe:ce:46:14:ef:1f:f3:2d:34:fb:8c:2b:
                    cb:29:e4:ff:dc:80:00:6c:0c:6c:c3:6b:0d:88:ff:
                    9b:c0:26:7a:a2:5f:e5:c8:2f:8c:1e:7f:ed:99:00:
                    2e:5b:ea:eb:c2:36:a9:14:72:15:6d:05:a9:49:9e:
                    30:9c:75:8e:fd:ce:3e:3e:68:5d:92:fd:07:6b:63:
                    8d:01:d0:a8:6f:8a:5d:e7:59:71:e0:58:5a:8e:de:
                    66:58:b2:01:e6:5b:1d:6e:d9:b2:0e:a8:c2:21:4d:
                    22:38:89:cf:ca:c5:86:84:64:ee:4e:d1:ad:16:c4:
                    67:73:f9:d3:a2:3b:7d:e9:46:22:c7:33:81:50:a6:
                    58:40:9d:45:be:2e:5e:80:08:91:2b:ad:e8:25:e8:
                    32:58:c4:a3:f7:65:c8:7b:57:cf:c6:62:33:c1:85:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B8:8A:84:42:CA:A3:BF:E3:30:17:A5:7B:41:6B:88:84:DF:FB:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.crl

            X509v3 Authority Key Identifier:
                keyid:AE:00:06:1A:E2:3C:4C:D1:26:F3:52:C7:6C:7A:1F:C7:BA:D2:44:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:1c:86:bd:0b:85:a9:f2:6f:38:d2:24:3b:97:69:32:78:
         a0:3c:06:c4:8d:20:10:6c:ea:33:8a:52:77:39:0e:db:76:e8:
         83:7a:ce:7b:0f:fa:9a:4c:c0:e1:90:98:a5:1e:36:a1:94:59:
         e7:8a:af:e2:fb:ad:72:52:3c:1f:1b:1a:59:52:bb:b8:f8:19:
         5e:71:6e:c6:60:b5:26:c9:a3:96:68:68:2f:d0:98:0f:bf:c0:
         88:36:9a:fa:3f:aa:4c:3c:8b:12:1d:85:67:1a:04:ce:18:02:
         5d:71:09:03:7f:0b:5a:2a:2e:71:7a:cd:ed:22:74:18:81:51:
         82:c2:e2:b0:98:f4:80:57:8b:89:a5:c5:9e:24:50:19:44:e3:
         db:7c:83:f8:2d:09:55:1c:c0:2d:54:ec:bb:b3:0c:78:14:fb:
         68:bd:a0:19:da:a9:e7:25:5a:56:5c:c0:8d:8d:51:6f:a3:6c:
         88:e1:d0:61:3e:6a:bf:d2:27:b1:88:f2:3d:95:37:9c:fb:76:
         c6:8e:6d:6b:dd:2a:03:18:b5:b8:cf:f7:f9:f2:90:bf:08:e5:
         dd:a4:32:2a:dc:4c:3f:bd:7a:92:9b:1e:4e:c8:ff:6c:fb:99:
         ad:97:57:f6:7a:14:15:be:3a:ed:99:1b:75:ca:72:b0:48:0c:
         7c:56:f8:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VWhVdBGcRDYywIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDYzOGQ1ZDEtNDRmYi00ZWNjLTllMjEtNjg1YTI4YzBi
MGI0MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
OGNhNzJjMDYtMDJiNi00MWZiLTk5NWYtOWQ2ZTA5ZTViYjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwJ37DjsyasAeGbmfURHOpbeehQDTDnIUBdI
cDt4UsLYfyL4uZ/HeH/0dPKHuK0QAhlOxohA6GHet8AI2nvIOcDydEsrPSat+9XD
S9w6RI8pPAuot5YVw9t+fvz+zkYU7x/zLTT7jCvLKeT/3IAAbAxsw2sNiP+bwCZ6
ol/lyC+MHn/tmQAuW+rrwjapFHIVbQWpSZ4wnHWO/c4+Pmhdkv0Ha2ONAdCob4pd
51lx4Fhajt5mWLIB5lsdbtmyDqjCIU0iOInPysWGhGTuTtGtFsRnc/nTojt96UYi
xzOBUKZYQJ1Fvi5egAiRK63oJegyWMSj92XIe1fPxmIzwYWwHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIa4ioRCyqO/4zAXpXtBa4iE3/veMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NjM4
ZDVkMS00NGZiLTRlY2MtOWUyMS02ODVhMjhjMGIwYjQvOTY4MmUwMjQtYzhhYi0z
YTQwLWFkM2MtZWY4MzY1YzIyYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDYzOGQ1ZDEtNDRmYi00ZWNjLTll
MjEtNjg1YTI4YzBiMGI0LzQ2MzhkNWQxLTQ0ZmItNGVjYy05ZTIxLTY4NWEyOGMw
YjBiNC5jcmwwHwYDVR0jBBgwFoAUrgAGGuI8TNEm81LHbHofx7rSRFswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NjM4ZDVkMS00NGZiLTRlY2MtOWUyMS02ODVh
MjhjMGIwYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2CfkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGctHIa9C4Wp8m840iQ7l2kyeKA8BsSNIBBs6jOKUnc5Dtt26IN6znsP
+ppMwOGQmKUeNqGUWeeKr+L7rXJSPB8bGllSu7j4GV5xbsZgtSbJo5ZoaC/QmA+/
wIg2mvo/qkw8ixIdhWcaBM4YAl1xCQN/C1oqLnF6ze0idBiBUYLC4rCY9IBXi4ml
xZ4kUBlE49t8g/gtCVUcwC1U7LuzDHgU+2i9oBnaqeclWlZcwI2NUW+jbIjh0GE+
ar/SJ7GI8j2VN5z7dsaObWvdKgMYtbjP9/nykL8I5d2kMircTD+9epKbHk7I/2z7
ma2XV/Z6FBW+Ou2ZG3XKcrBIDHxW+KU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:03 2025 by rpki-client