Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/2f308d69-5465-3883-9d00-359dc3eb41de.roa
File:                     2f308d69-5465-3883-9d00-359dc3eb41de.roa (raw, json)
Hash identifier:          bmBe9buV9g0euo08WbW03Bod+x73fnMWd+lrpl8PiLU=
Subject key identifier:   AB:C1:44:15:97:A8:0B:D0:B5:CA:75:64:16:E6:F1:4B:46:99:0F:6D
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F432858487A2C45B37CE1D66A4392AD00
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/2f308d69-5465-3883-9d00-359dc3eb41de.roa
Signing time:             Wed 08 Jan 2025 14:24:43 +0000
ROA not before:           Wed 08 Jan 2025 14:24:43 +0000
ROA not after:            Tue 08 Apr 2025 13:24:43 +0000
asID:                     40788
IP address blocks:        24.140.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:2c:45:b3:7c:e1:d6:6a:43:92:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: Jan  8 14:24:43 2025 GMT
            Not After : Apr  8 13:24:43 2025 GMT
        Subject: CN=fed448f8-2083-49ed-87dc-770098148fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:0b:29:94:94:30:c9:6d:65:8d:30:29:35:
                    c2:d1:be:4b:ad:bc:4b:90:c0:c7:dc:78:c2:06:be:
                    24:2c:e7:58:0e:df:2b:6d:bd:d5:88:31:3a:64:55:
                    f1:b0:fb:f4:04:c9:96:fd:d6:f8:64:47:ea:22:66:
                    0f:74:8b:9f:28:1c:66:db:4c:ea:b6:07:22:00:1f:
                    3a:30:69:7b:72:ab:71:c5:a7:a7:b7:8e:dd:c7:61:
                    2a:c4:93:bc:c3:4a:f8:e6:3c:e7:46:5b:a6:13:d0:
                    c4:bc:40:a6:97:aa:14:9c:9b:f3:e7:c6:d1:d9:ba:
                    3d:57:8d:88:f5:28:eb:91:53:d0:b6:b4:96:5b:23:
                    dc:c2:7e:02:db:8f:a8:ff:0b:2f:dd:66:49:9e:7b:
                    c5:3f:46:7b:01:fa:c3:53:fe:77:a4:cb:d5:a1:16:
                    e8:06:c6:8a:7c:ec:20:c3:6d:28:63:f9:bd:43:31:
                    9b:8d:44:65:e1:1d:72:23:5b:28:46:b5:91:88:a8:
                    f1:b4:ed:4c:3f:32:45:5d:c5:ef:22:13:0b:98:2d:
                    c2:3d:d6:32:6c:55:81:b4:b1:34:89:15:7e:d3:6b:
                    5d:09:56:7a:d9:f5:02:70:b4:f0:90:33:25:2d:50:
                    36:81:df:42:3a:e9:17:4f:4e:55:e8:24:69:0f:86:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C1:44:15:97:A8:0B:D0:B5:CA:75:64:16:E6:F1:4B:46:99:0F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/2f308d69-5465-3883-9d00-359dc3eb41de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:18:f7:4d:99:77:81:48:ea:f8:89:d8:36:58:7d:4f:cf:
         c7:03:40:0a:69:c3:e6:8c:85:d9:c2:01:d3:b2:b5:1d:82:ff:
         16:6f:74:b7:a3:36:d9:93:09:c1:f8:7d:20:d5:58:7b:42:c5:
         68:da:3b:b6:60:e8:db:66:c5:c0:65:4b:ff:af:db:86:48:c4:
         7e:32:1b:a2:a7:16:77:ca:1a:e9:cc:fb:5d:dd:37:78:90:53:
         f5:0c:6b:c8:e3:1f:47:bb:d8:f7:de:31:9e:3a:7c:7b:44:aa:
         d2:59:a2:9c:cf:91:5b:84:06:77:1f:48:7a:f0:56:4d:19:7b:
         a1:cc:94:4a:3c:40:72:81:9f:15:bc:90:fd:ca:17:9d:cf:f1:
         97:a2:ff:8c:6c:84:ff:99:04:ff:5b:b0:35:95:ee:96:26:4f:
         07:30:ca:da:fa:a6:db:04:ec:5d:25:63:9f:cd:9e:63:91:64:
         25:c8:6b:26:c9:50:1c:59:20:96:e6:5b:b8:89:72:03:ec:ce:
         cc:9d:c8:db:c7:a7:fa:1f:31:56:d4:d5:a9:02:f9:df:65:71:
         ee:80:47:7c:42:93:67:66:8e:74:7b:c8:10:2f:6c:18:91:78:
         4b:26:97:4b:1e:cf:18:df:09:68:eb:3d:38:2e:ad:6d:fa:7e:
         06:a1:7f:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6LEWzfOHWakOSrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0Y2QwZDQtNmRhOC00OTdjLWIyNzAtY2I2NThkNDVm
NGU4MB4XDTI1MDEwODE0MjQ0M1oXDTI1MDQwODEzMjQ0M1owLzEtMCsGA1UEAxMk
ZmVkNDQ4ZjgtMjA4My00OWVkLTg3ZGMtNzcwMDk4MTQ4ZmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XgLKZSUMMltZY0wKTXC0b5LrbxLkMDH3HjC
Br4kLOdYDt8rbb3ViDE6ZFXxsPv0BMmW/db4ZEfqImYPdIufKBxm20zqtgciAB86
MGl7cqtxxaent47dx2EqxJO8w0r45jznRlumE9DEvECml6oUnJvz58bR2bo9V42I
9SjrkVPQtrSWWyPcwn4C24+o/wsv3WZJnnvFP0Z7AfrDU/53pMvVoRboBsaKfOwg
w20oY/m9QzGbjURl4R1yI1soRrWRiKjxtO1MPzJFXcXvIhMLmC3CPdYybFWBtLE0
iRV+02tdCVZ62fUCcLTwkDMlLVA2gd9COukXT05V6CRpD4Y/QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKvBRBWXqAvQtcp1ZBbm8UtGmQ9tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80NjRj
ZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0NWY0ZTgvMmYzMDhkNjktNTQ2NS0z
ODgzLTlkMDAtMzU5ZGMzZWI0MWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDY0Y2QwZDQtNmRhOC00OTdjLWIy
NzAtY2I2NThkNDVmNGU4LzQ2NGNkMGQ0LTZkYTgtNDk3Yy1iMjcwLWNiNjU4ZDQ1
ZjRlOC5jcmwwHwYDVR0jBBgwFoAUS39fShDtIwmAi5OI16u8VyHwb6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1
OGQ0NWY0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACG6GPdNmXeBSOr4idg2WH1Pz8cDQAppw+aMhdnCAdOytR2C/xZvdLej
NtmTCcH4fSDVWHtCxWjaO7Zg6NtmxcBlS/+v24ZIxH4yG6KnFnfKGunM+13dN3iQ
U/UMa8jjH0e72PfeMZ46fHtEqtJZopzPkVuEBncfSHrwVk0Ze6HMlEo8QHKBnxW8
kP3KF53P8Zei/4xshP+ZBP9bsDWV7pYmTwcwytr6ptsE7F0lY5/NnmORZCXIaybJ
UBxZIJbmW7iJcgPszsydyNvHp/ofMVbU1akC+d9lce6AR3xCk2dmjnR7yBAvbBiR
eEsml0sezxjfCWjrPTgurW36fgahf0Q=
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:52:20 2025 by rpki-client