Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/cba58389-1d1d-397f-8bf3-24e5d11fe60e.roa
File:                     cba58389-1d1d-397f-8bf3-24e5d11fe60e.roa (raw, json)
Hash identifier:          iDv5NhPK4evQPuOpy222Of6i9ggqQngGXyAZ9YwDYlY=
Subject key identifier:   CB:00:CE:2E:27:3A:F9:F0:93:41:CB:56:9C:11:C5:2E:6C:6A:D9:E7
Certificate issuer:       /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Certificate serial:       010D0C9F43285847E78F64C1C326E0A9A1AEB1EC
Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/cba58389-1d1d-397f-8bf3-24e5d11fe60e.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     63221
IP address blocks:        206.83.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:64:c1:c3:26:e0:a9:a1:ae:b1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=876cba82-076d-45d2-a25c-5f99f14fd61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:6a:af:4c:f9:48:da:66:a5:14:9e:f9:90:
                    73:09:63:d8:53:cc:8a:b9:31:64:dc:4f:16:02:48:
                    06:53:8f:ef:d6:eb:7f:24:00:8c:04:81:7b:b9:12:
                    83:f8:35:28:20:f0:f5:9c:97:b6:0f:3e:3b:57:41:
                    44:b9:b0:8a:04:2e:a1:fd:b1:72:fd:f1:5b:75:49:
                    13:38:4f:55:dc:22:27:3d:51:19:70:a2:8c:91:91:
                    c8:a8:86:3e:ab:85:bb:c1:e5:55:98:1e:b9:49:9f:
                    f3:c7:c3:95:ee:a7:7f:60:d1:60:42:be:6d:fb:b4:
                    0f:62:21:c4:52:4c:af:fd:11:38:d3:05:85:26:08:
                    1e:1d:34:2b:dd:63:43:01:4a:c4:fd:d8:5e:6f:5e:
                    d0:52:2b:9a:12:ff:0c:01:6b:c6:0f:e6:16:5a:59:
                    70:21:12:fa:68:e8:67:c2:fe:91:ad:78:9a:d5:fd:
                    2e:b0:6c:f2:52:68:9e:72:af:38:49:93:06:5b:be:
                    35:82:49:b2:dd:96:68:c5:44:cc:f1:c1:39:2b:ad:
                    98:e3:66:53:58:74:48:e9:86:d2:ba:11:bc:85:88:
                    c4:86:54:83:74:1a:33:f1:60:d0:2c:eb:a7:90:43:
                    22:67:2a:a6:be:84:91:96:93:d7:38:fc:6a:47:2d:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:CE:2E:27:3A:F9:F0:93:41:CB:56:9C:11:C5:2E:6C:6A:D9:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/cba58389-1d1d-397f-8bf3-24e5d11fe60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f5:c9:24:d6:57:21:e5:92:a9:7c:ac:49:85:8d:ec:82:43:
         41:39:8b:b1:ab:ba:38:ed:5a:88:dd:9b:16:2f:1e:dc:37:38:
         10:65:27:78:5c:0b:68:a5:c2:9c:29:32:e9:87:28:92:c9:fd:
         45:16:15:ed:38:17:65:24:b6:7f:69:2d:22:2e:c2:dd:b3:d5:
         03:27:40:50:22:2c:6a:41:4a:45:b1:79:a5:9c:4d:cb:f2:dd:
         f5:2a:57:58:d9:83:f9:8f:a2:8d:83:1b:e7:8a:2e:28:d9:e8:
         f6:91:ed:68:65:4c:e8:dc:9f:b1:7e:8b:7d:07:64:57:68:a4:
         9a:3f:9a:02:31:26:b0:63:82:30:ba:0c:f4:fb:38:ff:86:08:
         e9:04:e2:33:50:88:73:8d:85:c0:06:fc:76:ae:41:f2:88:44:
         a0:36:7b:dc:bf:55:b8:13:fc:0e:1a:a9:f7:d2:08:b3:c8:46:
         7f:26:c8:5f:45:d5:43:9c:9a:ca:bf:2c:f8:3f:ce:eb:87:23:
         36:52:65:b2:dd:84:e9:63:31:68:e8:55:7f:20:a9:76:fa:db:
         fa:d4:4f:d9:1b:03:50:1e:89:d1:de:b4:a3:07:83:ee:eb:a8:
         08:fa:b0:03:1d:dd:22:a6:fd:8d:0e:e0:7b:53:68:f5:0f:57:
         5f:0a:7d:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj2TBwybgqaGusewwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy
MmQ2MB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk
ODc2Y2JhODItMDc2ZC00NWQyLWEyNWMtNWY5OWYxNGZkNjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHhqr0z5SNpmpRSe+ZBzCWPYU8yKuTFk3E8W
AkgGU4/v1ut/JACMBIF7uRKD+DUoIPD1nJe2Dz47V0FEubCKBC6h/bFy/fFbdUkT
OE9V3CInPVEZcKKMkZHIqIY+q4W7weVVmB65SZ/zx8OV7qd/YNFgQr5t+7QPYiHE
Ukyv/RE40wWFJggeHTQr3WNDAUrE/dheb17QUiuaEv8MAWvGD+YWWllwIRL6aOhn
wv6RrXia1f0usGzyUmiecq84SZMGW741gkmy3ZZoxUTM8cE5K62Y42ZTWHRI6YbS
uhG8hYjEhlSDdBoz8WDQLOunkEMiZyqmvoSRlpPXOPxqRy2R9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsAzi4nOvnwk0HLVpwRxS5satnnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2
NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvY2JhNTgzODktMWQxZC0z
OTdmLThiZjMtMjRlNWQxMWZlNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh
OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw
MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1
MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzlMJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJT1ySTWVyHlkql8rEmFjeyCQ0E5i7GrujjtWojdmxYvHtw3OBBlJ3hc
C2ilwpwpMumHKJLJ/UUWFe04F2Uktn9pLSIuwt2z1QMnQFAiLGpBSkWxeaWcTcvy
3fUqV1jZg/mPoo2DG+eKLijZ6PaR7WhlTOjcn7F+i30HZFdopJo/mgIxJrBjgjC6
DPT7OP+GCOkE4jNQiHONhcAG/HauQfKIRKA2e9y/VbgT/A4aqffSCLPIRn8myF9F
1UOcmsq/LPg/zuuHIzZSZbLdhOljMWjoVX8gqXb62/rUT9kbA1AeidHetKMHg+7r
qAj6sAMd3SKm/Y0O4HtTaPUPV18Kfbc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:51:28 2025 by rpki-client