Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/81b08043-aa8e-3de8-a7af-0950367e9609.roa
File:                     81b08043-aa8e-3de8-a7af-0950367e9609.roa (raw, json)
Hash identifier:          T3gKRL/rPnRHgwwiZw5613dmJul3z7A+984IQBk276w=
Subject key identifier:   B5:D8:6B:2B:0E:2D:E4:9F:2D:EB:4D:E2:A8:12:E6:59:30:9E:C7:78
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F432858484EDAD04EA7F1327AB07A8800
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/81b08043-aa8e-3de8-a7af-0950367e9609.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     11260
IP address blocks:        24.137.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:d0:4e:a7:f1:32:7a:b0:7a:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=123f7962-d43d-48b4-ade7-c2dce777d348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:30:f2:99:13:70:d9:66:55:e0:9e:9a:cb:30:
                    01:80:d2:b7:5c:55:6f:d4:80:c8:c8:60:9a:52:e0:
                    42:0b:4c:48:d2:cb:61:03:b9:2a:93:46:8e:2f:a3:
                    d7:0b:b5:59:e0:70:98:dd:ac:bb:99:b3:c7:e8:7b:
                    e9:d5:6c:4f:af:f6:2f:df:bb:80:e4:3b:cd:69:53:
                    05:b6:5e:07:31:aa:71:52:73:93:b8:27:c0:ca:bc:
                    1d:be:1c:a3:b1:ea:c4:c7:1c:eb:22:e5:fa:f1:37:
                    cb:66:23:65:02:61:7a:6c:6f:c1:f9:19:b2:86:db:
                    3b:ae:57:0b:24:a9:e8:be:a3:ec:ca:cd:88:5e:bb:
                    76:ef:23:a1:87:93:89:6a:3b:27:c5:3a:23:88:53:
                    fe:4f:d7:ac:8d:5f:11:e7:ad:83:71:28:ad:46:a7:
                    6c:af:34:e5:a2:08:eb:04:2f:71:de:df:a8:5c:19:
                    37:71:a5:a6:c4:09:5d:1d:5b:fe:84:37:03:03:0d:
                    e3:55:fa:b4:67:26:dc:93:40:87:b2:b1:d7:df:38:
                    0e:aa:40:b8:a1:48:fe:b8:7b:9f:c9:f5:70:d8:24:
                    60:8b:ed:3e:98:44:f8:0f:3c:29:3d:86:95:21:4e:
                    38:20:47:63:5d:de:b3:14:fc:94:ed:e3:c7:16:11:
                    48:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D8:6B:2B:0E:2D:E4:9F:2D:EB:4D:E2:A8:12:E6:59:30:9E:C7:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/81b08043-aa8e-3de8-a7af-0950367e9609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.137.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e3:56:f0:4b:45:af:cc:e1:28:09:76:81:8a:f1:d8:97:2c:
         99:94:49:3f:16:a2:6b:e5:40:1a:06:f1:64:26:cf:f6:1d:10:
         32:5a:a0:d7:8b:dd:85:c9:3b:88:a7:2d:45:a0:26:40:88:59:
         7e:9d:5a:50:aa:8f:f3:1d:e0:ef:9d:47:3e:14:23:01:2a:e3:
         90:bc:28:d6:3a:dd:b6:93:d8:e8:1b:f8:58:bd:59:34:cd:7a:
         68:6c:05:bb:b1:7f:6a:95:dc:57:21:d3:f7:f1:66:74:a0:3c:
         dd:5e:5b:98:7c:6b:8a:b8:0b:76:65:73:f8:3c:53:1e:57:d7:
         e1:ea:12:96:32:46:bb:c8:90:62:30:7e:cf:d9:ca:e9:a4:fe:
         99:cc:09:23:45:50:df:ca:98:d2:db:81:0f:94:2a:93:fe:f3:
         a4:4c:41:fb:6c:e3:96:e6:79:fe:28:32:a5:fe:31:1b:c0:ca:
         89:32:07:2f:c4:9e:bd:63:fa:0e:d6:81:a8:a2:cc:58:b5:63:
         7b:4a:69:88:af:e3:33:d9:d4:19:30:96:fa:c7:6f:88:bb:95:
         8b:41:11:d2:cd:b0:6d:e8:81:4d:bf:01:17:95:8d:cd:67:35:
         67:dd:36:2a:83:cf:fc:d0:83:81:70:fd:31:fe:6c:1a:ac:99:
         8e:bd:67:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2tBOp/EyerB6iAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4
OTViMB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
MTIzZjc5NjItZDQzZC00OGI0LWFkZTctYzJkY2U3NzdkMzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zDymRNw2WZV4J6ayzABgNK3XFVv1IDIyGCa
UuBCC0xI0sthA7kqk0aOL6PXC7VZ4HCY3ay7mbPH6Hvp1WxPr/Yv37uA5DvNaVMF
tl4HMapxUnOTuCfAyrwdvhyjserExxzrIuX68TfLZiNlAmF6bG/B+Rmyhts7rlcL
JKnovqPsys2IXrt27yOhh5OJajsnxTojiFP+T9esjV8R562DcSitRqdsrzTlogjr
BC9x3t+oXBk3caWmxAldHVv+hDcDAw3jVfq0Zybck0CHsrHX3zgOqkC4oUj+uHuf
yfVw2CRgi+0+mET4DzwpPYaVIU44IEdjXd6zFPyU7ePHFhFIRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXYaysOLeSfLetN4qgS5lkwnsd4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4
MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvODFiMDgwNDMtYWE4ZS0z
ZGU4LWE3YWYtMDk1MDM2N2U5NjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi
NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh
ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy
M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGIlIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACfjVvBLRa/M4SgJdoGK8diXLJmUST8WomvlQBoG8WQmz/YdEDJaoNeL
3YXJO4inLUWgJkCIWX6dWlCqj/Md4O+dRz4UIwEq45C8KNY63baT2Ogb+Fi9WTTN
emhsBbuxf2qV3Fch0/fxZnSgPN1eW5h8a4q4C3Zlc/g8Ux5X1+HqEpYyRrvIkGIw
fs/Zyumk/pnMCSNFUN/KmNLbgQ+UKpP+86RMQfts45bmef4oMqX+MRvAyokyBy/E
nr1j+g7WgaiizFi1Y3tKaYiv4zPZ1BkwlvrHb4i7lYtBEdLNsG3ogU2/AReVjc1n
NWfdNiqDz/zQg4Fw/TH+bBqsmY69Zy8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:43 2025 by rpki-client