Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/9029043f-1887-3e59-a390-6f99b194b685.roa
File:                     9029043f-1887-3e59-a390-6f99b194b685.roa (raw, json)
Hash identifier:          3o5plFVvvBmNZD0sUvuAGXHvG+RiAYC3D5oyUzxoPUw=
Subject key identifier:   71:4D:37:A6:7B:D0:2B:1B:4B:10:25:C4:B1:28:D5:65:DA:A4:F8:EF
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F43285848494573158A4B2B571B889940
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/9029043f-1887-3e59-a390-6f99b194b685.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     46353
IP address blocks:        192.102.86.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:73:15:8a:4b:2b:57:1b:88:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=b6d45b79-139e-4671-b9dc-cbd9752a52bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f4:57:2a:6e:62:1d:dc:12:c2:c2:c8:0d:95:
                    a5:47:df:8f:82:98:2c:30:c5:51:5d:41:9d:b0:c7:
                    dd:13:f1:22:78:cd:24:55:40:1f:82:9a:3d:bd:af:
                    08:b7:17:99:f1:fd:55:16:71:3d:a9:4e:65:6f:d5:
                    e3:5c:af:a5:a9:0b:99:d9:bb:28:89:d9:56:05:f6:
                    d6:58:bb:51:0e:ae:56:1a:23:54:72:5e:c5:0d:d2:
                    73:8d:c9:02:ad:fa:e9:76:45:7a:55:bd:1e:ea:6a:
                    e4:d4:91:e0:e4:7c:31:bd:ea:24:9c:e8:fc:64:9b:
                    a1:d9:87:da:0d:68:74:6a:ca:d8:08:65:17:ec:ca:
                    ab:59:cd:2e:4e:fc:c2:17:19:f7:13:8c:22:4e:24:
                    3d:ba:13:52:31:22:51:21:ea:3e:9c:13:01:fb:83:
                    0d:3d:a2:85:d9:22:7c:b9:13:22:82:85:ad:e6:97:
                    5c:41:b4:4f:19:98:96:8e:b2:66:d4:8b:66:ee:62:
                    92:12:a1:f9:67:be:2b:0e:a6:42:d3:c9:6c:38:2b:
                    0c:38:c7:32:3c:1a:0c:b3:05:81:2e:34:3f:f5:dd:
                    12:4e:76:ca:22:c9:d7:46:09:1c:86:a3:88:6c:5a:
                    26:c9:dc:88:d6:ad:f7:3f:50:80:c8:00:9d:f3:01:
                    14:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4D:37:A6:7B:D0:2B:1B:4B:10:25:C4:B1:28:D5:65:DA:A4:F8:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/9029043f-1887-3e59-a390-6f99b194b685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e9:b4:4d:a0:59:ef:04:8e:f6:22:58:eb:1c:23:45:44:00:
         10:48:ab:57:e1:6f:22:32:50:39:aa:c7:05:71:c7:86:a8:92:
         eb:4d:36:20:67:79:f3:2a:8a:89:b6:5b:3d:ad:d1:fd:4c:9b:
         2b:58:92:cd:4a:b3:e5:a9:e7:2a:fc:8c:cd:a3:0b:69:5d:62:
         9a:8c:fb:ed:1d:aa:45:61:4a:96:7f:39:32:00:02:23:2c:ca:
         37:d5:62:ec:4b:a3:80:6d:83:31:5b:81:4f:82:cf:8c:f9:84:
         b0:eb:1a:c5:d9:12:9c:80:08:58:96:0a:9c:cc:c0:33:30:ae:
         ae:d5:f7:1a:f7:39:77:73:e5:00:0e:30:4e:21:00:86:ad:87:
         f5:13:76:78:c6:f7:10:4c:ff:96:56:9e:4d:1a:7c:22:ba:f4:
         c3:46:7e:73:b1:0a:d0:07:0f:b0:55:86:59:2a:50:10:f4:89:
         68:d4:f3:33:34:96:0a:aa:1f:0a:89:c9:d1:0e:e0:2f:1c:91:
         24:99:6e:6a:12:2e:2c:1b:0b:0e:6a:1a:fc:73:34:74:bf:ee:
         6d:d5:25:f7:94:f4:df:5e:36:0c:bc:a0:4d:eb:02:16:f3:41:
         83:de:07:9d:45:eb:10:bc:89:3d:fc:97:7e:fb:ec:6a:f7:90:
         5d:f2:81:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRXMViksrVxuImUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjJlYzgwNzktMjkyZC00MDlhLWE3MzYtYmRkZjlhZjhk
OTc5MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
YjZkNDViNzktMTM5ZS00NjcxLWI5ZGMtY2JkOTc1MmE1MmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PRXKm5iHdwSwsLIDZWlR9+PgpgsMMVRXUGd
sMfdE/EieM0kVUAfgpo9va8ItxeZ8f1VFnE9qU5lb9XjXK+lqQuZ2bsoidlWBfbW
WLtRDq5WGiNUcl7FDdJzjckCrfrpdkV6Vb0e6mrk1JHg5HwxveoknOj8ZJuh2Yfa
DWh0asrYCGUX7MqrWc0uTvzCFxn3E4wiTiQ9uhNSMSJRIeo+nBMB+4MNPaKF2SJ8
uRMigoWt5pdcQbRPGZiWjrJm1Itm7mKSEqH5Z74rDqZC08lsOCsMOMcyPBoMswWB
LjQ/9d0STnbKIsnXRgkchqOIbFomydyI1q33P1CAyACd8wEUdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFNN6Z70CsbSxAlxLEo1WXapPjvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MmVj
ODA3OS0yOTJkLTQwOWEtYTczNi1iZGRmOWFmOGQ5NzkvOTAyOTA0M2YtMTg4Ny0z
ZTU5LWEzOTAtNmY5OWIxOTRiNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjJlYzgwNzktMjkyZC00MDlhLWE3
MzYtYmRkZjlhZjhkOTc5LzYyZWM4MDc5LTI5MmQtNDA5YS1hNzM2LWJkZGY5YWY4
ZDk3OS5jcmwwHwYDVR0jBBgwFoAUTx2yIQiGWQkfEoFaMwiTHuYIlwUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82MmVjODA3OS0yOTJkLTQwOWEtYTczNi1iZGRm
OWFmOGQ5NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwGZWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3ptE2gWe8EjvYiWOscI0VEABBIq1fhbyIyUDmqxwVxx4aokutNNiBn
efMqiom2Wz2t0f1MmytYks1Ks+Wp5yr8jM2jC2ldYpqM++0dqkVhSpZ/OTIAAiMs
yjfVYuxLo4BtgzFbgU+Cz4z5hLDrGsXZEpyACFiWCpzMwDMwrq7V9xr3OXdz5QAO
ME4hAIath/UTdnjG9xBM/5ZWnk0afCK69MNGfnOxCtAHD7BVhlkqUBD0iWjU8zM0
lgqqHwqJydEO4C8ckSSZbmoSLiwbCw5qGvxzNHS/7m3VJfeU9N9eNgy8oE3rAhbz
QYPeB51F6xC8iT38l3777Gr3kF3ygRs=
-----END CERTIFICATE-----
Generated at Sun May 11 14:22:23 2025 by rpki-client