Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/7716d967-0f16-3e8a-bdd2-6bacd66e739e.roa
File:                     7716d967-0f16-3e8a-bdd2-6bacd66e739e.roa (raw, json)
Hash identifier:          LlELno4EMff8RL7uzrBBTzt2bd+DZgq230/AaVv2HHA=
Subject key identifier:   11:F7:DC:27:73:2C:1F:21:86:0B:0C:D1:E1:15:52:17:C3:CD:79:14
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F432858485B6B02793DF0C0D45796BF80
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/7716d967-0f16-3e8a-bdd2-6bacd66e739e.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     9500
IP address blocks:        47.72.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6b:02:79:3d:f0:c0:d4:57:96:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=b14d270b-280b-4381-b080-8ef9f2b772c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:df:0f:91:08:3b:dc:50:dd:9d:9a:d1:e7:
                    90:84:d7:a4:20:fc:c5:37:b9:de:f5:7f:de:c4:26:
                    8d:6a:4a:cb:85:bb:7f:86:ce:3b:5d:c5:b0:2e:ce:
                    5e:d5:ee:e8:ec:53:46:61:07:3e:b4:03:6d:2d:0b:
                    c8:19:15:e5:f0:40:e9:a9:2b:12:ce:5c:60:60:1c:
                    ff:8f:b7:6b:b0:75:b9:8b:3e:f2:e5:bf:d9:06:0f:
                    0f:7a:7d:83:7d:72:3b:7d:74:00:d1:01:0b:e3:93:
                    bc:bd:f8:ef:a9:04:94:28:7b:ac:7d:0d:d0:85:69:
                    e3:f0:4e:db:86:77:70:8a:5f:67:f1:64:10:0f:d8:
                    58:e2:1b:59:e1:41:75:d5:1e:7c:c5:b1:75:ad:ca:
                    04:be:2d:c5:1c:50:23:2d:bd:ed:5e:e2:6f:87:7d:
                    df:6c:ea:98:8e:65:4d:2d:98:99:51:6c:15:53:5b:
                    23:93:ee:1d:ec:3e:92:01:9f:05:a4:36:31:26:c5:
                    8f:7f:ed:50:32:e9:d7:e6:20:bd:51:c6:ac:29:d0:
                    62:b0:2f:d9:22:df:19:74:6d:7e:69:e6:e9:7a:71:
                    dc:7d:7e:a4:3b:d1:50:81:5d:da:16:54:49:02:c2:
                    f1:62:95:65:d2:bb:ae:af:7e:f1:ba:ab:35:12:ee:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F7:DC:27:73:2C:1F:21:86:0B:0C:D1:E1:15:52:17:C3:CD:79:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/7716d967-0f16-3e8a-bdd2-6bacd66e739e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.72.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:9a:06:96:94:6a:01:dc:61:67:e6:30:54:f6:32:7e:81:ad:
         0d:0d:79:5a:40:e3:fa:49:66:11:12:66:12:32:fa:75:91:bd:
         7e:f6:e2:f3:b6:92:e3:c2:c9:47:99:05:66:bf:00:8f:40:27:
         4c:98:05:7d:83:37:34:b3:28:95:d6:5c:11:e2:de:3e:ef:e2:
         74:a7:32:32:a9:6a:c2:03:e5:f9:03:8e:99:a3:98:9b:55:dd:
         6f:2d:42:92:81:b0:93:f0:67:66:4a:48:f5:eb:fa:5c:8a:90:
         d2:33:f0:f8:80:c1:97:62:90:bd:60:a2:03:59:be:51:8d:4e:
         d5:ef:f3:6b:1a:36:9e:09:45:a2:a1:1e:4b:c9:b4:b7:d5:52:
         32:43:d7:1d:07:b4:49:8c:06:22:05:72:9d:aa:04:9a:c6:0e:
         08:df:3b:3b:f6:d1:d1:f7:ca:c8:fd:f0:5d:78:48:ce:82:7f:
         07:85:94:db:01:f6:2d:59:0b:12:e9:ac:a6:fe:79:32:86:0d:
         4e:16:d0:b1:83:58:91:c2:26:95:7c:68:61:13:a3:ea:46:c8:
         3c:a2:e4:06:54:9b:34:94:de:00:a3:7e:d6:8e:b6:57:36:5b:
         d2:75:de:2e:5d:e4:5c:63:4a:a8:3a:9f:5f:51:3a:cb:3f:74:
         4b:e3:1f:73
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhbawJ5PfDA1FeWv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0
NWMxMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
YjE0ZDI3MGItMjgwYi00MzgxLWIwODAtOGVmOWYyYjc3MmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxLfD5EIO9xQ3Z2a0eeQhNekIPzFN7ne9X/e
xCaNakrLhbt/hs47XcWwLs5e1e7o7FNGYQc+tANtLQvIGRXl8EDpqSsSzlxgYBz/
j7drsHW5iz7y5b/ZBg8Pen2DfXI7fXQA0QEL45O8vfjvqQSUKHusfQ3QhWnj8E7b
hndwil9n8WQQD9hY4htZ4UF11R58xbF1rcoEvi3FHFAjLb3tXuJvh33fbOqYjmVN
LZiZUWwVU1sjk+4d7D6SAZ8FpDYxJsWPf+1QMunX5iC9UcasKdBisC/ZIt8ZdG1+
aebpenHcfX6kO9FQgV3aFlRJAsLxYpVl0ruur37xuqs1Eu4y5QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBH33CdzLB8hhgsM0eEVUhfDzXkUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5
ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvNzcxNmQ5NjctMGYxNi0z
ZThhLWJkZDItNmJhY2Q2NmU3MzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh
ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1
NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky
YjdhNTQ1YzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL0gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsZoGlpRqAdxhZ+YwVPYyfoGtDQ15WkDj+klmERJmEjL6dZG9fvbi87aS
48LJR5kFZr8Aj0AnTJgFfYM3NLMoldZcEeLePu/idKcyMqlqwgPl+QOOmaOYm1Xd
by1CkoGwk/BnZkpI9ev6XIqQ0jPw+IDBl2KQvWCiA1m+UY1O1e/zaxo2nglFoqEe
S8m0t9VSMkPXHQe0SYwGIgVynaoEmsYOCN87O/bR0ffKyP3wXXhIzoJ/B4WU2wH2
LVkLEumspv55MoYNThbQsYNYkcImlXxoYROj6kbIPKLkBlSbNJTeAKN+1o62VzZb
0nXeLl3kXGNKqDqfX1E6yz90S+Mfcw==
-----END CERTIFICATE-----
Generated at Mon May 5 23:36:18 2025 by rpki-client