Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
File:                     2f245cec-1abd-398c-a715-037e988d18d1.roa (raw, json)
Hash identifier:          6Saukt77Kzl1FHLCLBhXOA/iUrpSXh5J1hzKQFGT2Hw=
Subject key identifier:   86:B5:82:98:EE:EC:17:01:6C:04:6B:2D:9B:73:C5:B1:C9:72:7F:70
Certificate issuer:       /CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
Certificate serial:       010D0C9F432858481C9A79467F188489D667C200
Authority key identifier: BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     10584
IP address blocks:        64.237.108.0/22 maxlen: 24
                          64.237.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:79:46:7f:18:84:89:d6:67:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=b8f9317c-1dac-40f0-89b0-ac061b180877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:30:e9:06:d3:8d:3f:1a:24:7c:b1:18:e7:
                    5e:ca:28:0f:e1:eb:32:32:f4:a7:7f:1f:4a:c5:ba:
                    c1:26:18:c7:69:1e:df:b0:11:ab:c4:bb:37:ff:a6:
                    aa:37:bb:f9:d5:8b:a7:93:22:6f:a6:86:62:fe:4a:
                    09:99:c7:ea:b2:c9:0d:a9:e0:46:d7:2e:cc:0f:30:
                    49:7b:b1:c4:e3:2c:9c:b5:cc:ea:fe:03:15:95:d3:
                    13:7f:3c:49:8a:d9:53:26:1b:ce:e6:d1:43:ab:b7:
                    1a:33:8e:63:d4:27:59:d1:a8:1e:da:55:20:e0:86:
                    e1:81:0d:07:94:d6:39:dd:d1:0d:0d:b7:8e:0f:aa:
                    87:29:35:d2:fe:8f:06:b3:c1:c3:78:d0:13:70:ae:
                    11:42:f0:b1:4e:41:38:56:77:78:08:21:80:54:30:
                    80:fa:82:ed:c3:cf:34:f2:e9:79:29:28:cf:c1:93:
                    88:87:11:d5:2a:02:55:10:fe:1a:d2:63:75:03:f0:
                    b5:aa:2e:db:97:89:f2:15:14:71:7d:40:96:0c:aa:
                    ea:6f:92:98:88:c7:28:68:b2:5b:ce:7e:b7:95:be:
                    2f:5d:be:31:56:5c:bf:44:07:f3:d7:2f:c2:41:28:
                    ca:b4:ed:f0:5f:8d:42:e1:72:51:20:05:73:f4:c6:
                    ab:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B5:82:98:EE:EC:17:01:6C:04:6B:2D:9B:73:C5:B1:C9:72:7F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:16:7f:42:7b:16:56:1c:98:1d:ab:23:89:31:39:9f:f7:
         8d:82:05:d4:c7:80:d2:c8:c3:c2:69:7c:e0:b5:2a:8b:e8:d0:
         7d:60:67:62:02:ef:7a:ca:a7:7d:61:a9:e4:38:33:e9:31:cf:
         af:42:60:27:a1:93:1b:c9:70:39:91:54:d5:2d:f4:5a:1f:81:
         69:f9:cf:d3:65:c8:4f:40:68:3d:32:07:64:c4:b3:8b:87:45:
         ca:ca:ac:c7:64:f0:e5:03:9b:b8:68:d5:15:75:07:ce:b1:b1:
         17:fc:cd:0c:eb:4c:21:12:6b:a0:24:d0:62:54:02:79:09:90:
         d5:52:7e:57:3f:d1:00:33:e1:2e:27:2a:ac:bf:ac:f4:bb:49:
         84:e9:0a:cb:cc:aa:e7:7f:9f:7e:38:07:f3:26:c6:6f:13:2c:
         1e:7a:63:a0:e0:c8:2c:de:ad:6e:ce:9c:8a:1a:1e:39:f8:86:
         db:f2:68:db:77:7a:51:01:5f:e2:08:09:b4:89:b4:64:c2:34:
         ed:f0:95:a1:74:63:f9:4b:20:5a:2c:4c:db:84:6d:74:2e:1d:
         9f:ad:b9:35:d0:7e:ce:f9:f3:58:77:79:37:48:41:0f:8d:16:
         b3:73:65:2e:03:0c:00:d4:72:52:e9:02:e4:be:5d:01:20:47:
         5e:86:93:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmnlGfxiEidZnwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NiNDQ2NTEtNWM2ZC00YTAyLThlYmYtOGMyODEyMDY5
MzQxMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
YjhmOTMxN2MtMWRhYy00MGYwLTg5YjAtYWMwNjFiMTgwODc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG8w6QbTjT8aJHyxGOdeyigP4esyMvSnfx9K
xbrBJhjHaR7fsBGrxLs3/6aqN7v51YunkyJvpoZi/koJmcfqsskNqeBG1y7MDzBJ
e7HE4yyctczq/gMVldMTfzxJitlTJhvO5tFDq7caM45j1CdZ0age2lUg4IbhgQ0H
lNY53dENDbeOD6qHKTXS/o8Gs8HDeNATcK4RQvCxTkE4Vnd4CCGAVDCA+oLtw880
8ul5KSjPwZOIhxHVKgJVEP4a0mN1A/C1qi7bl4nyFRRxfUCWDKrqb5KYiMcoaLJb
zn63lb4vXb4xVly/RAfz1y/CQSjKtO3wX41C4XJRIAVz9MarFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIa1gpju7BcBbARrLZtzxbHJcn9wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jY2I0
NDY1MS01YzZkLTRhMDItOGViZi04YzI4MTIwNjkzNDEvMmYyNDVjZWMtMWFiZC0z
OThjLWE3MTUtMDM3ZTk4OGQxOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2NiNDQ2NTEtNWM2ZC00YTAyLThl
YmYtOGMyODEyMDY5MzQxL2NjYjQ0NjUxLTVjNmQtNGEwMi04ZWJmLThjMjgxMjA2
OTM0MS5jcmwwHwYDVR0jBBgwFoAUvtWj9cQ5Ew3O2hzvVdnKNuSMMdswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jY2I0NDY1MS01YzZkLTRhMDItOGViZi04YzI4
MTIwNjkzNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQO1sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHx8Fn9CexZWHJgdqyOJMTmf942CBdTHgNLIw8JpfOC1Kovo0H1gZ2IC
73rKp31hqeQ4M+kxz69CYCehkxvJcDmRVNUt9FofgWn5z9NlyE9AaD0yB2TEs4uH
RcrKrMdk8OUDm7ho1RV1B86xsRf8zQzrTCESa6Ak0GJUAnkJkNVSflc/0QAz4S4n
Kqy/rPS7SYTpCsvMqud/n344B/Mmxm8TLB56Y6DgyCzerW7OnIoaHjn4htvyaNt3
elEBX+IICbSJtGTCNO3wlaF0Y/lLIFosTNuEbXQuHZ+tuTXQfs7581h3eTdIQQ+N
FrNzZS4DDADUclLpAuS+XQEgR16Gk08=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:50:31 2025 by rpki-client