Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa
File:                     d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa (raw, json)
Hash identifier:          yrn4HGC1/XXQr8JKW980j7rmAXRe3K8RL2xQBkR4EXE=
Subject key identifier:   C6:F7:EC:25:CA:E7:B6:26:CA:93:A4:8D:CC:DE:8A:28:E6:55:53:22
Certificate issuer:       /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
Certificate serial:       010D0C9F432858486D90468DB7525F5E594D5700
Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        208.71.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:46:8d:b7:52:5f:5e:59:4d:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=0fedc3aa-d390-4c75-aa87-0ca493ec5939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:6c:ae:69:fa:27:4a:14:b0:24:4f:d4:3c:
                    56:d7:b7:a2:1f:b0:ce:54:b0:9b:1a:f6:83:9d:d8:
                    09:5e:db:38:ae:6a:24:58:d6:8b:30:91:40:f6:e1:
                    d5:f6:6b:2b:b4:36:1b:53:a8:48:ad:93:96:bd:0a:
                    ff:aa:c0:f2:89:13:bd:bf:9b:99:7d:e6:19:d3:69:
                    98:85:85:0e:e8:b2:a0:e7:6e:62:b5:78:90:8e:42:
                    a5:4a:33:31:a8:b9:ee:15:10:f6:38:4e:2c:40:fe:
                    54:26:3e:cf:b5:d0:72:b1:95:26:29:2f:7e:18:db:
                    65:aa:4c:3b:80:72:29:fb:07:58:ce:11:fe:d9:3b:
                    76:b0:35:f0:97:28:10:a2:9a:17:04:03:c5:ac:67:
                    45:c6:14:99:cf:fb:fd:3b:50:1b:f4:18:ad:7d:dd:
                    02:cd:77:71:03:74:42:45:89:ea:11:d3:90:0e:1d:
                    28:e5:b0:4d:ea:0a:4f:79:20:2f:ce:c7:99:8d:d3:
                    79:a2:79:38:bf:47:f1:7f:7c:0d:ce:9f:48:1a:db:
                    4f:c2:89:fe:a0:16:c5:8b:63:95:fd:02:b3:c7:c9:
                    d1:52:81:f8:3b:5a:fb:ff:8b:00:cf:1b:61:4e:cd:
                    e9:6b:a7:a1:db:40:f6:18:9e:0a:5f:47:d5:0c:08:
                    60:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F7:EC:25:CA:E7:B6:26:CA:93:A4:8D:CC:DE:8A:28:E6:55:53:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7c:b6:42:12:69:1b:22:ba:1c:83:47:8f:3d:a9:76:04:46:
         a1:a7:a3:a6:83:27:7a:2a:84:cd:b8:70:4e:b1:73:9e:a8:60:
         a8:bd:60:9d:60:53:b3:f5:06:f2:0c:e0:c5:49:8a:d5:d1:02:
         e0:86:a2:1a:86:aa:84:38:af:8c:83:98:62:ba:98:ea:60:bd:
         ea:4b:b7:28:a2:e4:ea:b4:54:30:8c:d5:83:c5:56:87:fa:7d:
         6f:88:54:4e:0b:ca:a9:0b:2d:4c:a1:c5:ed:3f:27:aa:bb:f4:
         76:40:42:b4:f3:be:3b:00:1c:bd:ec:bd:8c:ae:b3:ba:73:60:
         08:ea:69:2b:08:53:6a:c3:92:fe:37:90:4c:87:8e:28:65:b5:
         96:ad:05:d5:aa:75:67:40:a8:fc:63:e8:88:3f:84:20:cb:3e:
         3b:12:bf:ea:a3:39:ea:18:18:ee:7f:11:d4:e6:b9:e1:ba:21:
         5f:33:df:01:af:b4:cf:37:51:e8:6c:ae:bf:79:11:96:e0:a3:
         02:87:a1:a0:b1:4e:48:8a:a6:e2:03:78:d5:50:d1:12:d5:96:
         6d:7f:d4:84:96:44:7f:3d:a6:6c:d6:6b:15:73:52:54:b0:b6:
         b9:72:ad:d8:f2:5e:23:35:9f:25:41:44:e8:7b:51:65:b8:a4:
         5e:7d:6a:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkEaNt1JfXllNVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlhYTE1NjctODlhOS00Y2U0LThiZDctZTYyNDk5OTA5
MWUzMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MGZlZGMzYWEtZDM5MC00Yzc1LWFhODctMGNhNDkzZWM1OTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMlsrmn6J0oUsCRP1DxW17eiH7DOVLCbGvaD
ndgJXts4rmokWNaLMJFA9uHV9msrtDYbU6hIrZOWvQr/qsDyiRO9v5uZfeYZ02mY
hYUO6LKg525itXiQjkKlSjMxqLnuFRD2OE4sQP5UJj7PtdBysZUmKS9+GNtlqkw7
gHIp+wdYzhH+2Tt2sDXwlygQopoXBAPFrGdFxhSZz/v9O1Ab9Bitfd0CzXdxA3RC
RYnqEdOQDh0o5bBN6gpPeSAvzseZjdN5onk4v0fxf3wNzp9IGttPwon+oBbFi2OV
/QKzx8nRUoH4O1r7/4sAzxthTs3pa6eh20D2GJ4KX0fVDAhgEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMb37CXK57YmypOkjczeiijmVVMiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOWFh
MTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5MDkxZTMvZDVkYmMzYjktYTQ3Yi0z
ZGMwLTlkOTQtZTY2ZDE5NjI2OTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzlhYTE1NjctODlhOS00Y2U0LThi
ZDctZTYyNDk5OTA5MWUzL2M5YWExNTY3LTg5YTktNGNlNC04YmQ3LWU2MjQ5OTkw
OTFlMy5jcmwwHwYDVR0jBBgwFoAU9uKd3POYaXwTuehSHUAHiB0hTQgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0
OTk5MDkxZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJh8tkISaRsiuhyDR489qXYERqGno6aDJ3oqhM24cE6xc56oYKi9YJ1g
U7P1BvIM4MVJitXRAuCGohqGqoQ4r4yDmGK6mOpgvepLtyii5Oq0VDCM1YPFVof6
fW+IVE4LyqkLLUyhxe0/J6q79HZAQrTzvjsAHL3svYyus7pzYAjqaSsIU2rDkv43
kEyHjihltZatBdWqdWdAqPxj6Ig/hCDLPjsSv+qjOeoYGO5/EdTmueG6IV8z3wGv
tM83Uehsrr95EZbgowKHoaCxTkiKpuIDeNVQ0RLVlm1/1ISWRH89pmzWaxVzUlSw
trlyrdjyXiM1nyVBROh7UWW4pF59amc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:02 2025 by rpki-client