Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa
File:                     15f75e85-b2fd-3814-915a-0e36851d49a1.roa (raw, json)
Hash identifier:          N+pWzMmg8tF8yXzQJ6GWadz5mAXdEXQDZP9Wd0CNhFI=
Subject key identifier:   C8:91:34:99:5F:79:57:63:33:74:ED:29:37:9B:59:AB:68:6B:BF:5B
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584827C53F007E1B2A4A612D8280
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     399812
IP address blocks:        64.29.136.0/24 maxlen: 24
                          2607:f3a0:a008::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:3f:00:7e:1b:2a:4a:61:2d:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=bcd6a0ae-8d53-4905-b51f-33b72863bac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:65:58:18:98:f7:a0:6f:74:56:56:c6:48:
                    01:b8:66:b0:92:0c:8e:06:a1:5a:4c:dc:81:66:dd:
                    2e:a1:97:d5:1a:d6:47:8e:2f:6d:eb:9a:47:cb:ff:
                    9f:10:f9:bd:0a:2c:dc:ab:13:cd:77:f2:06:3b:fe:
                    d9:30:eb:29:f4:d8:07:ca:c9:f0:f3:05:46:3d:57:
                    0e:3d:1d:31:2d:07:0b:39:b9:03:ef:60:c7:93:f6:
                    6f:50:a4:5c:7b:7e:5e:0b:d0:31:71:04:e7:9e:03:
                    0b:3d:8b:61:28:2c:04:6d:3f:f3:dc:ee:94:88:db:
                    ad:a2:74:2a:d9:d7:e8:c3:de:61:43:87:fc:3a:74:
                    86:a2:eb:3c:38:c0:62:08:cb:36:e0:60:ac:f4:67:
                    c1:44:dc:66:13:04:94:c5:f6:ae:87:df:92:73:0b:
                    78:b8:2d:55:7f:0e:9c:10:aa:fc:d1:8a:3d:ae:31:
                    dc:30:42:d2:80:f9:85:19:07:0b:bc:5c:8c:ea:1b:
                    1d:88:b3:e7:3a:28:fb:58:45:aa:29:22:3b:f9:6c:
                    14:12:15:ef:97:9a:24:a2:71:a0:24:31:92:4e:49:
                    e7:26:d9:18:4e:0e:f3:28:d4:8d:93:39:63:2e:11:
                    9a:89:d1:13:ff:de:46:26:42:02:f9:86:36:d0:94:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:34:99:5F:79:57:63:33:74:ED:29:37:9B:59:AB:68:6B:BF:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.136.0/24
                IPv6:
                  2607:f3a0:a008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1c:a5:2f:69:db:c5:9f:c3:a5:f8:8f:b7:6c:ed:d1:35:32:
         c0:c9:5e:c7:8a:5e:e2:ce:f5:70:74:75:2d:37:37:2e:8e:09:
         ab:4f:48:6e:b7:e1:73:5d:35:fd:a7:9b:d3:12:cd:61:cd:d3:
         4f:3a:91:b8:c4:92:4a:00:f7:79:51:69:e8:88:3d:a9:3b:bf:
         17:9f:c0:4b:bb:6f:04:d2:71:f5:bc:dd:d1:f5:85:44:be:f9:
         df:95:90:80:50:e3:7d:c3:3c:e6:0d:a9:d1:ec:da:de:24:03:
         cd:bb:74:af:54:bf:fe:8c:52:d2:4d:d2:69:b2:c9:f1:ec:36:
         6e:c8:df:c0:68:96:ee:ef:2f:5b:36:86:78:ec:79:14:af:c2:
         7a:d3:1c:dd:ad:61:e0:c4:9c:dd:a7:66:59:1f:51:fc:e2:51:
         24:ed:e9:26:3c:02:f7:63:ec:96:8a:e9:57:1c:a1:d8:a4:64:
         b3:02:89:37:bf:87:31:2f:b4:31:05:cf:99:bb:61:be:fd:7c:
         ab:a5:8e:bf:ec:93:e0:e7:ec:9b:6a:a2:06:8a:54:3d:a8:52:
         d4:1f:94:d4:2b:d4:3a:ed:df:39:e7:29:cf:3a:95:e9:2c:06:
         8b:f2:9f:e0:67:d2:04:29:8e:fc:fe:1a:a2:0f:4e:08:63:b4:
         ff:4b:97:8c
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgnxT8AfhsqSmEtgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0
YjczMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
YmNkNmEwYWUtOGQ1My00OTA1LWI1MWYtMzNiNzI4NjNiYWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMVlWBiY96BvdFZWxkgBuGawkgyOBqFaTNyB
Zt0uoZfVGtZHji9t65pHy/+fEPm9CizcqxPNd/IGO/7ZMOsp9NgHysnw8wVGPVcO
PR0xLQcLObkD72DHk/ZvUKRce35eC9AxcQTnngMLPYthKCwEbT/z3O6UiNutonQq
2dfow95hQ4f8OnSGous8OMBiCMs24GCs9GfBRNxmEwSUxfauh9+Scwt4uC1Vfw6c
EKr80Yo9rjHcMELSgPmFGQcLvFyM6hsdiLPnOij7WEWqKSI7+WwUEhXvl5okonGg
JDGSTknnJtkYTg7zKNSNkzljLhGaidET/95GJkIC+YY20JT/gwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFMiRNJlfeVdjM3TtKTebWatoa79bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3
MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvMTVmNzVlODUtYjJmZC0z
ODE0LTkxNWEtMGUzNjg1MWQ0OWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy
NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh
NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi
MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2IMA8E
AgACMAkDBwAmB/OgoAgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJhylL2nbxZ/DpfiPt2zt0TUywMlex4pe
4s71cHR1LTc3Lo4Jq09Ibrfhc101/aeb0xLNYc3TTzqRuMSSSgD3eVFp6Ig9qTu/
F5/AS7tvBNJx9bzd0fWFRL7535WQgFDjfcM85g2p0eza3iQDzbt0r1S//oxS0k3S
abLJ8ew2bsjfwGiW7u8vWzaGeOx5FK/CetMc3a1h4MSc3admWR9R/OJRJO3pJjwC
92PslorpVxyh2KRkswKJN7+HMS+0MQXPmbthvv18q6WOv+yT4Ofsm2qiBopUPahS
1B+U1CvUOu3fOecpzzqV6SwGi/Kf4GfSBCmO/P4aog9OCGO0/0uXjA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:59:23 2025 by rpki-client