Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa
File:                     276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa (raw, json)
Hash identifier:          LhHsk1IOib3nBHko13t3cJHs9O1g5V3wKRGgtpQ8ckw=
Subject key identifier:   E2:DC:03:A9:30:42:5E:67:5C:09:D2:0B:23:6E:B4:1D:1E:BD:3C:07
Certificate issuer:       /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial:       010D0C9F43285848159FF66B93CDBA8EB84B8E80
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     8075
IP address blocks:        134.65.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f6:6b:93:cd:ba:8e:b8:4b:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=ed9742a0-9d5b-4748-ac08-d5edf76b28ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:d4:64:fa:28:41:7e:e6:5c:8c:3a:a2:0f:
                    eb:57:c2:ad:8b:a8:b3:8e:61:59:9b:d1:78:a7:42:
                    8b:be:c5:c1:a5:71:f1:da:30:90:7c:5c:2f:4b:5e:
                    fe:ed:ea:01:65:33:5f:85:02:2b:f6:8f:33:b1:95:
                    61:72:3f:ea:d5:7c:2d:03:8f:2a:45:0c:eb:6e:36:
                    2d:26:b1:3e:08:45:e7:fe:cc:52:23:e2:4b:71:db:
                    88:03:30:ea:3d:fb:a7:49:a2:11:d9:d7:ec:e8:e0:
                    c0:87:b2:78:ec:01:1e:04:2c:ec:ae:22:42:34:e2:
                    2c:83:77:21:2f:a5:ce:6f:65:7b:27:2a:b2:7a:7b:
                    69:39:1a:a0:5c:34:11:1b:ff:6f:f3:fd:54:89:5c:
                    11:56:83:42:37:f6:87:c0:5f:63:01:81:ca:eb:4d:
                    49:0e:da:29:e2:c4:c4:28:e2:05:81:77:d8:19:7a:
                    94:e8:69:19:80:2c:94:11:72:2c:f0:ea:ec:95:ce:
                    f1:9f:d6:c5:43:ff:86:dc:9b:ca:f6:e2:f1:f5:77:
                    2d:9f:b7:c7:07:c5:3b:c4:8b:65:a5:92:3b:c9:00:
                    57:52:0d:63:5c:4d:f9:84:5a:ad:f4:51:d4:8d:cd:
                    97:fd:97:9f:fc:93:98:a5:cb:b8:5d:9c:04:69:31:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DC:03:A9:30:42:5E:67:5C:09:D2:0B:23:6E:B4:1D:1E:BD:3C:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:f1:3c:1c:66:c1:fa:e0:db:26:75:7f:28:e5:f6:06:a8:71:
         bc:3b:eb:e6:48:02:0b:e0:64:82:ee:3d:b4:ee:1a:97:17:75:
         ea:58:7a:80:c2:ae:e8:5f:b9:e5:6a:98:e3:f4:d2:cd:05:f2:
         72:36:d5:ac:e0:7f:e6:9c:34:03:5e:f9:22:fe:6c:9d:7b:b2:
         38:93:bb:6f:b4:1a:fb:00:3d:2c:10:13:a0:88:01:6d:77:a3:
         3e:27:21:46:21:89:85:88:5d:39:8b:51:01:da:76:9c:33:bf:
         d7:56:79:e9:0a:cc:3d:da:28:96:18:53:8c:38:cc:d0:5d:c1:
         97:b9:54:c0:4c:5a:a2:a9:99:cf:65:c9:8a:b6:09:53:af:be:
         36:de:37:87:7e:6a:16:63:cc:5d:76:fd:8a:59:17:fe:b4:1b:
         ab:51:a1:d2:4e:c2:19:b6:41:ea:1d:26:16:83:af:f6:a1:79:
         6c:30:4b:23:80:48:f1:cf:eb:7b:27:0d:78:36:10:54:d9:c3:
         07:58:58:c1:7a:27:81:a6:39:74:49:9d:3c:db:3f:9c:6b:e7:
         3a:f7:74:c0:f0:ba:6b:bb:f1:88:19:58:59:50:09:8f:8b:f3:
         4b:72:c6:cd:e3:b5:8a:4e:54:17:c1:ea:6c:5b:1e:3d:6a:72:
         94:af:c0:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn/Zrk826jrhLjoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm
YzRiMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
ZWQ5NzQyYTAtOWQ1Yi00NzQ4LWFjMDgtZDVlZGY3NmIyOGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fHUZPooQX7mXIw6og/rV8Kti6izjmFZm9F4
p0KLvsXBpXHx2jCQfFwvS17+7eoBZTNfhQIr9o8zsZVhcj/q1XwtA48qRQzrbjYt
JrE+CEXn/sxSI+JLcduIAzDqPfunSaIR2dfs6ODAh7J47AEeBCzsriJCNOIsg3ch
L6XOb2V7JyqyentpORqgXDQRG/9v8/1UiVwRVoNCN/aHwF9jAYHK601JDtop4sTE
KOIFgXfYGXqU6GkZgCyUEXIs8Orslc7xn9bFQ/+G3JvK9uLx9Xctn7fHB8U7xItl
pZI7yQBXUg1jXE35hFqt9FHUjc2X/Zef/JOYpcu4XZwEaTFgRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOLcA6kwQl5nXAnSCyNutB0evTwHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk
Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvMjc2YzFlMzYtNDhmYS0z
ZGIzLWE0YjAtZWFmNDcxZDVhOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl
YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1
ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx
OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhkGoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALXxPBxmwfrg2yZ1fyjl9gaocbw76+ZIAgvgZILuPbTuGpcXdepYeoDC
ruhfueVqmOP00s0F8nI21azgf+acNANe+SL+bJ17sjiTu2+0GvsAPSwQE6CIAW13
oz4nIUYhiYWIXTmLUQHadpwzv9dWeekKzD3aKJYYU4w4zNBdwZe5VMBMWqKpmc9l
yYq2CVOvvjbeN4d+ahZjzF12/YpZF/60G6tRodJOwhm2QeodJhaDr/aheWwwSyOA
SPHP63snDXg2EFTZwwdYWMF6J4GmOXRJnTzbP5xr5zr3dMDwumu78YgZWFlQCY+L
80tyxs3jtYpOVBfB6mxbHj1qcpSvwA0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:14 2025 by rpki-client