Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83b017a7-d238-3646-bfd8-324ad9ed4a22.roa
File:                     83b017a7-d238-3646-bfd8-324ad9ed4a22.roa (raw, json)
Hash identifier:          KxEzl+TeibuDIDhEeHVM6G/56ZPOeaOkXPUvs+jB2Dw=
Subject key identifier:   B4:29:5F:97:14:B4:B1:88:8A:25:73:CF:90:A6:00:34:F5:4F:2D:6A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858485F9AEB8DA77D61CF0B2EC000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83b017a7-d238-3646-bfd8-324ad9ed4a22.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     399162
IP address blocks:        204.74.120.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:eb:8d:a7:7d:61:cf:0b:2e:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=08c30d2e-8b20-4efe-975e-9e6bc7c058eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:ab:92:03:da:b7:6b:c4:e7:65:7e:bd:d1:
                    8a:aa:25:35:79:f4:90:3c:08:f1:08:f2:82:59:2a:
                    ab:8f:14:09:00:b9:72:e5:17:fa:27:7d:06:70:40:
                    e5:fa:51:50:f9:0c:f9:59:9e:0d:ee:6b:33:b8:e0:
                    2a:39:40:46:49:24:57:99:f8:b0:ff:67:2d:22:80:
                    c5:d5:ff:84:0c:96:b9:d9:23:ff:8e:e3:63:71:bc:
                    2f:2d:32:0a:4d:84:9f:3b:fa:d1:c2:fe:d2:b1:c0:
                    f4:f9:78:df:86:89:51:54:91:93:24:62:4a:93:2b:
                    e0:6b:18:b9:71:c6:c5:0f:33:c2:84:34:52:12:8d:
                    d2:0b:28:5f:5a:de:0d:5d:75:cc:4c:d2:31:09:47:
                    7d:0d:cd:14:c6:f7:7f:40:0d:6f:f9:c7:3f:25:6d:
                    2d:33:d3:26:7e:f3:d0:c9:0e:ef:98:4f:78:81:2f:
                    97:e1:a2:7c:37:05:00:fa:02:09:76:a5:60:2a:55:
                    1a:63:d8:c7:f4:19:0a:12:3f:3b:2a:95:7b:bd:b8:
                    24:0c:35:b1:ba:9e:75:1b:69:af:32:d6:5b:b4:53:
                    24:b8:62:33:8e:c2:87:c9:46:76:28:e9:22:73:ec:
                    9d:51:9f:d8:46:b5:5a:71:f5:c9:17:b6:33:47:38:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:29:5F:97:14:B4:B1:88:8A:25:73:CF:90:A6:00:34:F5:4F:2D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83b017a7-d238-3646-bfd8-324ad9ed4a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:33:b1:e1:bd:74:44:ec:95:28:bb:fd:05:96:f4:12:9c:0d:
         0a:5f:a6:68:6d:7b:43:70:82:4a:9c:e7:cf:57:ef:06:5f:b5:
         f9:f3:68:4b:93:04:e6:d2:68:31:20:1e:a3:00:a9:99:f4:89:
         2a:5c:fc:cd:40:eb:d4:9c:f8:26:84:74:46:cf:07:d4:37:37:
         ed:ba:3e:95:26:c7:a5:f9:b6:45:5e:2a:e2:22:0d:11:e0:7b:
         4b:63:4f:1d:9c:35:8b:d3:bd:58:5d:e1:b2:52:3f:38:25:c7:
         51:8a:49:6a:34:06:10:07:13:3b:0b:01:b9:f6:1d:70:fa:a0:
         47:60:b4:d7:bc:2b:43:ba:5a:1c:a4:6a:5b:65:8b:d8:dc:87:
         3d:ab:06:30:9b:91:9f:2f:7e:47:50:d5:b2:da:d8:62:7a:96:
         58:d3:7a:be:d5:56:61:7a:e7:a2:0c:d1:1f:65:92:4f:3c:fe:
         ed:53:ae:b5:7b:5f:1e:36:cd:ae:11:1d:36:cc:08:ef:50:72:
         ac:34:e1:87:15:90:a5:b7:30:2c:1c:d8:bb:a1:8f:65:ab:f7:
         08:2c:cc:00:82:a3:52:64:8b:45:4b:ab:6a:48:0a:0f:77:e6:
         55:ff:4e:e9:54:84:e3:85:36:59:b8:1b:da:dc:36:6e:fd:ad:
         cb:94:d0:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuuNp31hzwsuwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
MDhjMzBkMmUtOGIyMC00ZWZlLTk3NWUtOWU2YmM3YzA1OGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc2rkgPat2vE52V+vdGKqiU1efSQPAjxCPKC
WSqrjxQJALly5Rf6J30GcEDl+lFQ+Qz5WZ4N7mszuOAqOUBGSSRXmfiw/2ctIoDF
1f+EDJa52SP/juNjcbwvLTIKTYSfO/rRwv7SscD0+XjfholRVJGTJGJKkyvgaxi5
ccbFDzPChDRSEo3SCyhfWt4NXXXMTNIxCUd9Dc0Uxvd/QA1v+cc/JW0tM9MmfvPQ
yQ7vmE94gS+X4aJ8NwUA+gIJdqVgKlUaY9jH9BkKEj87KpV7vbgkDDWxup51G2mv
MtZbtFMkuGIzjsKHyUZ2KOkic+ydUZ/YRrVacfXJF7YzRzh9YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQpX5cUtLGIiiVzz5CmADT1Ty1qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODNiMDE3YTctZDIzOC0z
NjQ2LWJmZDgtMzI0YWQ5ZWQ0YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEp4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0zseG9dETslSi7/QWW9BKcDQpfpmhte0Nwgkqc589X7wZftfnzaEuT
BObSaDEgHqMAqZn0iSpc/M1A69Sc+CaEdEbPB9Q3N+26PpUmx6X5tkVeKuIiDRHg
e0tjTx2cNYvTvVhd4bJSPzglx1GKSWo0BhAHEzsLAbn2HXD6oEdgtNe8K0O6Whyk
altli9jchz2rBjCbkZ8vfkdQ1bLa2GJ6lljTer7VVmF656IM0R9lkk88/u1TrrV7
Xx42za4RHTbMCO9Qcqw04YcVkKW3MCwc2Luhj2Wr9wgszACCo1Jki0VLq2pICg93
5lX/TulUhOOFNlm4G9rcNm79rcuU0P8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:07:42 2025 by rpki-client