Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa
File:                     c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa (raw, json)
Hash identifier:          Gj7Y+Go/7lrYhYksEhSh/Ynwx2VJhrcUgWq3knUM6yA=
Subject key identifier:   77:72:E6:0B:2F:0A:47:B1:24:51:5D:48:D6:3C:A7:61:E4:2F:58:CB
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F43285848100A753571852023AFD691C0
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     16509
IP address blocks:        165.224.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:75:35:71:85:20:23:af:d6:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=14534781-5281-4851-b9ec-65b623750645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:5e:70:ea:1d:ef:ff:27:15:b9:f9:a6:23:
                    1f:05:44:c2:18:73:84:25:bc:c5:06:52:02:b1:51:
                    e6:9d:ee:28:3f:b6:ff:05:df:20:af:fb:11:22:ee:
                    ad:18:e5:d9:b4:da:22:a9:40:94:40:32:6c:c6:47:
                    62:f7:aa:4a:3a:24:9a:4b:bc:47:82:a5:ce:ac:af:
                    b4:4e:12:31:19:26:12:62:15:19:e0:e3:d6:81:55:
                    3a:3a:fd:0a:c4:f5:e1:d1:52:7d:bf:89:60:5f:d1:
                    97:86:fc:d9:73:d9:4f:c0:3f:27:50:ea:e1:b4:d2:
                    11:51:1c:7b:08:e2:04:db:82:18:6e:3f:68:2e:4b:
                    dc:c1:bc:73:64:5e:f5:50:f0:b2:a6:04:3e:30:16:
                    ac:3d:cb:52:76:4e:7c:b4:ca:b6:78:f7:bb:8c:c7:
                    b7:36:af:3c:20:80:8f:25:48:59:56:69:33:5d:a2:
                    8e:bd:27:a4:11:d7:3e:43:91:3b:c8:08:11:d9:d2:
                    81:05:15:79:44:b7:7d:34:ba:62:48:3a:2c:74:83:
                    4e:38:7a:cd:c4:4d:cc:07:29:73:da:be:33:8d:16:
                    c4:00:a8:3a:cd:9e:fa:99:ed:46:04:64:25:f0:02:
                    b7:d0:76:85:2c:3c:1f:2d:84:51:90:87:64:b6:c4:
                    8f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:72:E6:0B:2F:0A:47:B1:24:51:5D:48:D6:3C:A7:61:E4:2F:58:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.224.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:27:13:19:91:8d:63:c8:bf:c5:fa:bb:fc:56:a6:07:21:
         a4:c6:a0:17:23:ef:7c:c0:3d:f0:d0:d3:c5:3a:85:8e:44:16:
         a1:02:09:61:34:c1:22:2d:1a:64:38:c2:df:3d:02:bb:02:7a:
         5b:da:fd:8b:ec:20:1d:60:3c:af:97:c9:6c:7e:7a:17:29:7b:
         39:cc:57:03:69:a0:af:64:ad:9b:8e:1f:d7:20:ae:9b:2b:97:
         3a:a1:bc:a6:ff:f4:b4:3a:2e:fe:2a:4d:d4:a5:08:9c:ec:9a:
         50:16:f1:c1:22:96:0b:b1:73:fd:ab:5b:19:d1:14:b3:a9:b6:
         8a:64:34:2f:6b:22:53:01:94:74:ce:09:c8:e7:d2:fe:67:a0:
         d8:f1:e7:cd:84:a6:f8:89:29:1f:6b:5f:52:d6:c6:b2:00:fc:
         81:f6:57:44:25:8b:38:60:27:09:74:e2:68:c5:0f:f0:df:0e:
         58:18:7a:3a:ab:0d:7c:83:cc:09:63:9b:8a:84:26:21:a5:d0:
         86:7b:f5:52:45:ab:8c:38:dd:86:78:27:e3:11:2a:04:bc:45:
         ea:e5:f2:a5:11:17:d7:6a:a9:ca:20:65:38:b0:a7:89:20:d7:
         f8:f7:75:da:fb:91:fb:44:fb:49:d7:38:44:11:43:99:32:7e:
         06:12:2c:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCnU1cYUgI6/WkcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0
ZDdiMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
MTQ1MzQ3ODEtNTI4MS00ODUxLWI5ZWMtNjViNjIzNzUwNjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPdecOod7/8nFbn5piMfBUTCGHOEJbzFBlIC
sVHmne4oP7b/Bd8gr/sRIu6tGOXZtNoiqUCUQDJsxkdi96pKOiSaS7xHgqXOrK+0
ThIxGSYSYhUZ4OPWgVU6Ov0KxPXh0VJ9v4lgX9GXhvzZc9lPwD8nUOrhtNIRURx7
COIE24IYbj9oLkvcwbxzZF71UPCypgQ+MBasPctSdk58tMq2ePe7jMe3Nq88IICP
JUhZVmkzXaKOvSekEdc+Q5E7yAgR2dKBBRV5RLd9NLpiSDosdINOOHrNxE3MBylz
2r4zjRbEAKg6zZ76me1GBGQl8AK30HaFLDwfLYRRkIdktsSPlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdy5gsvCkexJFFdSNY8p2HkL1jLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0
MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYzk4NzY0OGUtNWJjNS0z
YzkxLTk5NzItZWU3Yzg2ZTlhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll
MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4
NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw
NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0xJxMZkY1jyL/F+rv8VqYHIaTGoBcj73zAPfDQ08U6hY5EFqECCWE0
wSItGmQ4wt89ArsCelva/YvsIB1gPK+XyWx+ehcpeznMVwNpoK9krZuOH9cgrpsr
lzqhvKb/9LQ6Lv4qTdSlCJzsmlAW8cEilguxc/2rWxnRFLOptopkNC9rIlMBlHTO
Ccjn0v5noNjx582EpviJKR9rX1LWxrIA/IH2V0QlizhgJwl04mjFD/DfDlgYejqr
DXyDzAljm4qEJiGl0IZ79VJFq4w43YZ4J+MRKgS8Rerl8qURF9dqqcogZTiwp4kg
1/j3ddr7kftE+0nXOEQRQ5kyfgYSLLo=
-----END CERTIFICATE-----
Generated at Thu May 8 14:00:24 2025 by rpki-client