Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa
File:                     c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa (raw, json)
Hash identifier:          39XdU+vxluvLInWtxnoTiJQ48AbfBZobYrEzyjhIHtE=
Subject key identifier:   DB:DD:C9:A3:4D:73:73:FD:05:C6:12:36:57:F8:7B:C3:70:32:20:12
Certificate issuer:       /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
Certificate serial:       010D0C9F432858485CD0345EF224B08D49D0EB80
Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     11472
IP address blocks:        216.7.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:34:5e:f2:24:b0:8d:49:d0:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=faa105e2-ce7e-468c-834d-d4da234c2697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:f4:26:ad:06:cf:8f:1a:e9:ea:ff:2f:ba:
                    19:7c:f4:0a:f1:62:a4:eb:ad:84:6b:cf:d0:6d:d1:
                    67:f1:3e:2d:47:b4:80:8a:df:75:82:b2:29:59:2c:
                    58:44:76:74:1e:b8:53:78:45:81:ab:e7:24:ae:97:
                    ee:f5:17:58:22:0a:a4:15:a2:ff:71:46:57:c3:9f:
                    5d:7a:66:96:28:c1:42:7f:a1:75:05:0e:02:4f:16:
                    2a:1a:4d:25:7c:1e:c7:09:10:c4:76:18:a2:37:6c:
                    de:dc:8e:ed:2e:da:a5:a9:1b:bb:e5:97:7d:63:71:
                    c4:b4:8e:eb:09:0b:9b:98:2f:33:81:a1:2d:f9:fa:
                    9e:6f:b9:06:9f:f9:28:26:08:a5:fe:88:25:4f:4f:
                    3c:8e:80:2e:55:78:d7:be:36:46:28:fa:eb:88:bd:
                    2b:30:95:43:db:1d:33:73:f1:d8:4c:cf:26:da:fc:
                    29:d3:3d:c7:81:1b:7d:55:49:a8:1d:45:34:2b:9c:
                    8a:23:30:52:51:97:8b:58:a9:7e:18:58:07:4a:db:
                    31:f8:49:77:4e:49:65:88:c8:06:b0:29:42:4a:33:
                    d8:18:e6:dd:97:47:75:d5:b8:55:d0:aa:4a:0f:e7:
                    b5:58:02:dc:a9:91:4f:0f:74:9e:30:6e:4b:4d:28:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DD:C9:A3:4D:73:73:FD:05:C6:12:36:57:F8:7B:C3:70:32:20:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl

            X509v3 Authority Key Identifier:
                keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.7.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f8:ea:af:c2:f5:4a:d6:65:3d:a7:f1:b3:c6:27:43:4a:f1:
         a1:90:46:8b:f8:37:f1:bf:04:ef:27:39:7f:33:45:58:6f:a5:
         8c:39:7f:9d:c8:11:bf:b7:c9:84:33:42:6d:f2:ad:30:05:40:
         82:48:7a:72:4b:ac:f8:87:3f:12:48:53:0b:98:27:52:a7:e6:
         ca:b7:d8:45:e1:5a:58:e5:a8:49:32:39:c3:41:a5:fa:0d:ae:
         59:1e:fd:71:6e:8f:11:79:9c:e7:25:bf:5a:7b:45:f2:6a:d0:
         cb:54:ae:3c:3c:55:df:7e:32:e1:af:bd:4c:4a:00:06:6a:84:
         f0:d4:6e:fc:02:32:d8:b8:ca:f3:4b:57:07:c3:6c:1a:55:ab:
         d5:fe:e2:3e:a3:ae:fb:00:de:8f:e9:7a:97:88:7e:04:59:d6:
         b3:22:54:39:75:ab:25:5d:78:83:44:29:55:bc:70:93:45:12:
         e4:4e:d7:f6:7a:ef:7e:19:f1:e5:ec:ce:48:3b:b6:10:14:1c:
         02:17:c7:ca:da:2e:2b:ac:30:3e:5d:09:1e:2e:75:aa:6e:e1:
         5e:7a:45:ae:24:0d:d2:ee:12:a0:cc:21:8c:00:fa:da:95:ed:
         a7:81:c9:ad:c1:32:78:57:98:1f:c6:25:67:57:60:51:a3:2c:
         ea:f8:ca:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0DRe8iSwjUnQ64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE5NGE5ZWQtNjVlMS00ZGYxLTg1YWEtOWEzNWM1NzEy
NTNiMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZmFhMTA1ZTItY2U3ZS00NjhjLTgzNGQtZDRkYTIzNGMyNjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSX0Jq0Gz48a6er/L7oZfPQK8WKk662Ea8/Q
bdFn8T4tR7SAit91grIpWSxYRHZ0HrhTeEWBq+ckrpfu9RdYIgqkFaL/cUZXw59d
emaWKMFCf6F1BQ4CTxYqGk0lfB7HCRDEdhiiN2ze3I7tLtqlqRu75Zd9Y3HEtI7r
CQubmC8zgaEt+fqeb7kGn/koJgil/oglT088joAuVXjXvjZGKPrriL0rMJVD2x0z
c/HYTM8m2vwp0z3HgRt9VUmoHUU0K5yKIzBSUZeLWKl+GFgHStsx+El3TklliMgG
sClCSjPYGObdl0d11bhV0KpKD+e1WALcqZFPD3SeMG5LTSjClQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNvdyaNNc3P9BcYSNlf4e8NwMiASMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0
YTllZC02NWUxLTRkZjEtODVhYS05YTM1YzU3MTI1M2IvYzUxZWQwMTItZjA2ZS0z
M2E2LWE5MzQtYjJlZjdhZDI0NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjE5NGE5ZWQtNjVlMS00ZGYxLTg1
YWEtOWEzNWM1NzEyNTNiL2IxOTRhOWVkLTY1ZTEtNGRmMS04NWFhLTlhMzVjNTcx
MjUzYi5jcmwwHwYDVR0jBBgwFoAUiRTq4jC8zw1lBsAefDSTsaNdzYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0YTllZC02NWUxLTRkZjEtODVhYS05YTM1
YzU3MTI1M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH746q/C9UrWZT2n8bPGJ0NK8aGQRov4N/G/BO8nOX8zRVhvpYw5f53I
Eb+3yYQzQm3yrTAFQIJIenJLrPiHPxJIUwuYJ1Kn5sq32EXhWljlqEkyOcNBpfoN
rlke/XFujxF5nOclv1p7RfJq0MtUrjw8Vd9+MuGvvUxKAAZqhPDUbvwCMti4yvNL
VwfDbBpVq9X+4j6jrvsA3o/pepeIfgRZ1rMiVDl1qyVdeINEKVW8cJNFEuRO1/Z6
734Z8eXszkg7thAUHAIXx8raLiusMD5dCR4udapu4V56Ra4kDdLuEqDMIYwA+tqV
7aeBya3BMnhXmB/GJWdXYFGjLOr4yuE=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:49:05 2025 by rpki-client