Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/8bccc4c6-312e-323b-8801-038f17a9eac0.roa
File:                     8bccc4c6-312e-323b-8801-038f17a9eac0.roa (raw, json)
Hash identifier:          6NGUe4cWsI0EHuslMnJRijcqOnS/XA6/lt2KbSlcPzA=
Subject key identifier:   A2:20:92:6E:6F:3B:EE:F8:96:EB:AC:09:80:0A:85:9D:6B:FD:10:5A
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858485A057CAD026F88A3982A4300
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/8bccc4c6-312e-323b-8801-038f17a9eac0.roa
Signing time:             Sat 28 Dec 2024 02:00:38 +0000
ROA not before:           Sat 28 Dec 2024 02:00:38 +0000
ROA not after:            Fri 28 Mar 2025 01:00:38 +0000
asID:                     212374
IP address blocks:        69.168.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5a:05:7c:ad:02:6f:88:a3:98:2a:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Dec 28 02:00:38 2024 GMT
            Not After : Mar 28 01:00:38 2025 GMT
        Subject: CN=49f3c3ba-db90-42c9-8132-75bc5825426e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:4e:ad:10:dc:7e:96:e5:e3:b8:9c:58:96:
                    e5:21:82:cf:d0:a0:ae:67:27:11:df:ed:bf:37:c5:
                    d8:a5:4d:89:2a:d3:47:79:05:02:c3:3c:65:c4:96:
                    f2:85:3e:bc:bb:3c:8f:8c:0b:70:c6:60:1f:46:f0:
                    76:ac:42:e5:be:49:cc:db:9e:e7:02:db:98:e2:9a:
                    9f:51:26:b9:bd:8f:ed:a7:43:d3:cb:c0:e2:6a:44:
                    ed:be:2b:3b:d9:c6:03:c4:a0:83:32:8d:8c:71:55:
                    22:a3:fc:97:28:4f:37:32:b6:83:ef:6b:48:7d:f5:
                    94:82:55:79:6d:2b:f4:e2:b9:2d:71:5b:31:a1:0a:
                    38:2e:17:da:f8:78:47:73:21:e1:71:e9:64:e4:da:
                    9c:cc:e9:3a:59:60:2d:9d:a4:de:62:1b:e3:79:66:
                    b8:30:f8:e9:40:7e:c6:31:1f:99:ed:5c:d3:14:23:
                    ee:94:8f:cc:9c:95:80:91:02:e6:e4:d3:67:b9:cf:
                    33:76:48:a1:19:c9:d3:e4:60:2d:d2:f6:3e:6d:ba:
                    45:38:e5:94:42:0d:bc:7f:72:35:61:93:00:7a:4e:
                    57:93:9c:4f:16:d4:38:4a:dd:0c:1e:fd:6b:09:9c:
                    98:af:2e:a4:49:8d:34:88:ea:75:13:1b:a2:58:87:
                    28:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:20:92:6E:6F:3B:EE:F8:96:EB:AC:09:80:0A:85:9D:6B:FD:10:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/8bccc4c6-312e-323b-8801-038f17a9eac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4e:e7:0d:7e:e1:6c:5e:1a:63:48:9d:5a:44:a9:a7:bb:b8:
         76:3e:f6:8f:19:76:71:cc:be:b1:ed:d7:b2:f4:c2:1c:57:17:
         2b:d3:16:03:69:ca:6e:df:bb:51:b7:4b:4d:7a:e5:96:35:69:
         51:1e:83:37:7d:03:8b:c6:46:b8:1c:a4:a9:61:f8:49:5e:4a:
         7d:6f:64:fa:94:99:ca:73:75:12:d5:4b:22:3a:23:bd:90:68:
         e9:58:b8:cf:1b:80:73:99:58:eb:4b:94:df:0a:cd:2d:c4:6a:
         97:de:5c:18:d6:6a:4e:dc:86:29:9b:bd:44:eb:49:32:a1:62:
         c1:6e:3d:64:46:78:07:75:dc:35:01:e5:ea:37:4d:c1:d3:24:
         ea:e2:65:9b:2d:cf:bf:6a:69:73:62:4a:92:d3:92:d9:37:39:
         71:0f:e7:45:68:33:db:32:e6:46:65:8a:92:4a:f3:78:05:4e:
         cb:f1:4f:ce:35:5e:e5:26:f8:3f:ff:0d:75:9c:fb:76:b1:8c:
         08:6c:8e:e0:24:ee:28:38:49:10:0e:aa:ff:c3:be:95:33:94:
         32:59:a9:cc:bc:08:13:d1:f6:5c:18:93:74:5c:c5:81:44:c9:
         d6:97:d0:a7:9a:63:98:35:18:38:c4:80:40:f5:21:b7:37:82:
         9e:2a:31:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhaBXytAm+Io5gqQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm
MjE4MB4XDTI0MTIyODAyMDAzOFoXDTI1MDMyODAxMDAzOFowLzEtMCsGA1UEAxMk
NDlmM2MzYmEtZGI5MC00MmM5LTgxMzItNzViYzU4MjU0MjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1xOrRDcfpbl47icWJblIYLP0KCuZycR3+2/
N8XYpU2JKtNHeQUCwzxlxJbyhT68uzyPjAtwxmAfRvB2rELlvknM257nAtuY4pqf
USa5vY/tp0PTy8DiakTtvis72cYDxKCDMo2McVUio/yXKE83MraD72tIffWUglV5
bSv04rktcVsxoQo4Lhfa+HhHcyHhcelk5NqczOk6WWAtnaTeYhvjeWa4MPjpQH7G
MR+Z7VzTFCPulI/MnJWAkQLm5NNnuc8zdkihGcnT5GAt0vY+bbpFOOWUQg28f3I1
YZMAek5Xk5xPFtQ4St0MHv1rCZyYry6kSY00iOp1ExuiWIcogQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKIgkm5vO+74luusCYAKhZ1r/RBaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx
ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvOGJjY2M0YzYtMzEyZS0z
MjNiLTg4MDEtMDM4ZjE3YTllYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm
NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm
ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk
ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1O5w1+4WxeGmNInVpEqae7uHY+9o8ZdnHMvrHt17L0whxXFyvTFgNp
ym7fu1G3S0165ZY1aVEegzd9A4vGRrgcpKlh+EleSn1vZPqUmcpzdRLVSyI6I72Q
aOlYuM8bgHOZWOtLlN8KzS3EapfeXBjWak7chimbvUTrSTKhYsFuPWRGeAd13DUB
5eo3TcHTJOriZZstz79qaXNiSpLTktk3OXEP50VoM9sy5kZlipJK83gFTsvxT841
XuUm+D//DXWc+3axjAhsjuAk7ig4SRAOqv/DvpUzlDJZqcy8CBPR9lwYk3RcxYFE
ydaX0KeaY5g1GDjEgED1Ibc3gp4qMY4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:16:51 2025 by rpki-client