Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa
File:                     89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa (raw, json)
Hash identifier:          rN/qiB24t3nm6uJP3YiDHp1EoUnHlf9DoKWxZf7db3c=
Subject key identifier:   3E:32:09:97:A4:A7:26:25:52:6F:09:5A:FC:F2:F9:51:FC:47:2E:50
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F02415F54C525FF876CFC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     202
IP address blocks:        206.164.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:24:15:f5:4c:52:5f:f8:76:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=233a93db-02d3-4b58-b62b-71f3a2fd7017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:fe:68:2b:a3:d3:6a:80:31:8b:12:34:31:
                    f5:04:2a:60:5e:46:bb:f7:0d:85:69:30:db:06:4c:
                    17:12:d0:cd:b4:6d:55:58:c0:85:92:24:8f:bd:85:
                    e5:ca:65:af:96:59:82:dd:18:ab:48:64:32:01:ab:
                    ac:eb:d0:ea:36:fa:6b:d2:ae:2f:e7:b2:cf:fe:96:
                    d5:8f:16:43:77:69:e6:e6:c0:2b:e5:65:68:24:bd:
                    78:63:51:37:79:fb:43:a8:c4:a0:aa:27:b2:df:43:
                    64:4e:ea:35:4b:17:be:53:8e:27:65:6a:97:b8:98:
                    f4:e3:35:c9:17:64:48:54:39:10:eb:4e:a1:9b:56:
                    c6:0f:f1:91:77:c0:99:0e:0f:39:ab:ec:2c:87:97:
                    26:9b:dc:14:3f:2f:c1:56:2c:cb:4e:9a:ba:c2:55:
                    73:0a:79:be:a8:1d:7a:63:73:08:03:96:a1:62:fa:
                    96:4c:30:89:93:1f:f8:88:30:ff:79:dc:80:4c:d8:
                    81:9d:bb:d0:b0:20:d9:9b:3c:c7:7f:de:3c:9f:02:
                    ea:f1:48:b9:d2:0c:28:43:80:07:a3:2b:f6:a3:fc:
                    6e:07:c9:03:d3:10:71:ad:e4:fb:e1:37:4a:c3:da:
                    74:82:a6:11:0d:5f:1f:19:de:df:d2:19:f9:51:dd:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:32:09:97:A4:A7:26:25:52:6F:09:5A:FC:F2:F9:51:FC:47:2E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89a29d46-d778-3d51-9eb5-25e8a39ce4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:45:d0:7d:68:7a:76:01:be:48:8a:77:d5:cd:87:f8:59:dc:
         21:96:4a:a3:ae:a0:a6:c5:1d:9e:54:51:25:b7:30:f4:da:ac:
         e4:0c:98:f4:32:b4:bb:d1:32:47:c7:63:f9:1f:ec:3e:c9:bf:
         a8:4d:50:05:fb:3c:ae:71:74:a2:4a:e3:08:15:1d:ee:fb:22:
         db:49:e8:b5:5e:e7:48:b0:e4:f9:b4:55:6c:ee:2d:56:3f:70:
         d4:45:eb:23:f6:5b:8d:c8:f2:df:a0:67:32:55:05:de:14:82:
         fd:13:53:02:b1:ee:4c:31:6a:53:8b:c7:41:4d:f3:b6:f2:fe:
         00:fc:2d:2c:a9:0e:70:e0:36:5e:c1:ea:00:76:94:40:f9:5d:
         76:ad:99:88:af:61:f2:ae:33:3c:b7:8b:f7:09:68:47:cf:cf:
         d2:e3:e1:d6:94:ae:67:49:dc:15:6e:ea:81:ce:b7:e2:ce:df:
         62:6d:30:dc:a7:ed:1c:27:5d:e1:da:1c:61:f2:e7:70:dd:d7:
         f3:85:55:ae:bd:67:e5:45:27:98:4c:07:31:91:80:70:b4:62:
         9f:bf:f3:45:de:35:10:2f:10:fd:57:3d:6f:24:de:37:7d:81:
         05:6c:88:b1:19:9a:fc:99:b4:92:5d:03:3e:cc:2e:03:9f:5d:
         55:40:ce:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8CQV9UxSX/h2z8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MjMzYTkzZGItMDJkMy00YjU4LWI2MmItNzFmM2EyZmQ3MDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztP+aCuj02qAMYsSNDH1BCpgXka79w2FaTDb
BkwXEtDNtG1VWMCFkiSPvYXlymWvllmC3RirSGQyAaus69DqNvpr0q4v57LP/pbV
jxZDd2nm5sAr5WVoJL14Y1E3eftDqMSgqiey30NkTuo1Sxe+U44nZWqXuJj04zXJ
F2RIVDkQ606hm1bGD/GRd8CZDg85q+wsh5cmm9wUPy/BVizLTpq6wlVzCnm+qB16
Y3MIA5ahYvqWTDCJkx/4iDD/edyATNiBnbvQsCDZmzzHf948nwLq8Ui50gwoQ4AH
oyv2o/xuB8kD0xBxreT74TdKw9p0gqYRDV8fGd7f0hn5Ud3TiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD4yCZekpyYlUm8JWvzy+VH8Ry5QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODlhMjlkNDYtZDc3OC0z
ZDUxLTllYjUtMjVlOGEzOWNlNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqSyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNF0H1oenYBvkiKd9XNh/hZ3CGWSqOuoKbFHZ5UUSW3MPTarOQMmPQy
tLvRMkfHY/kf7D7Jv6hNUAX7PK5xdKJK4wgVHe77IttJ6LVe50iw5Pm0VWzuLVY/
cNRF6yP2W43I8t+gZzJVBd4Ugv0TUwKx7kwxalOLx0FN87by/gD8LSypDnDgNl7B
6gB2lED5XXatmYivYfKuMzy3i/cJaEfPz9Lj4daUrmdJ3BVu6oHOt+LO32JtMNyn
7RwnXeHaHGHy53Dd1/OFVa69Z+VFJ5hMBzGRgHC0Yp+/80XeNRAvEP1XPW8k3jd9
gQVsiLEZmvyZtJJdAz7MLgOfXVVAzhI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:03 2025 by rpki-client