Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa
File:                     c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa (raw, json)
Hash identifier:          G20W6Y8IQwLKzx8I5rBw68jv+dcj01DrNAvsD0hlBWY=
Subject key identifier:   5A:30:E4:80:4A:A3:E8:EA:71:35:D0:D3:42:99:3B:93:65:71:69:40
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F432858481F6535197CA5F03F7A2C4440
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     20014
IP address blocks:        209.151.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:35:19:7c:a5:f0:3f:7a:2c:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=a0b07a0c-e646-4ba1-9a6a-8da2b4ed3826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:28:34:08:53:11:a1:c3:42:8d:4b:f0:c4:
                    42:fb:da:54:49:f5:a3:c8:a5:aa:bd:7b:f0:e4:c4:
                    c3:a7:42:4b:65:3d:91:2d:bc:d2:03:1d:36:72:98:
                    86:c3:88:51:24:ee:58:09:be:2f:a2:ff:46:7a:12:
                    89:f2:98:09:10:d6:5a:4c:80:f9:f5:7b:ff:16:55:
                    73:7e:33:69:08:8e:f5:a1:5a:75:58:a2:a8:27:d9:
                    36:f8:4b:a2:b9:28:66:91:3e:02:a1:d3:7f:4d:27:
                    e7:eb:cd:3b:46:14:9c:55:2b:97:01:0a:37:a2:11:
                    63:6b:09:28:83:80:e7:e9:d1:62:73:d2:37:d3:45:
                    8e:ff:5d:26:19:45:aa:93:c2:d7:19:3f:d8:67:f3:
                    de:26:77:5c:15:76:32:88:f8:5f:61:47:bb:1d:1c:
                    7e:cd:86:89:4b:63:d1:db:bb:25:8d:ae:76:12:16:
                    90:0f:61:6b:9f:12:25:d2:64:b3:4d:c9:2c:b2:40:
                    70:15:b0:f1:fb:45:cc:a2:7b:2b:6e:7f:d4:bd:05:
                    00:e9:ad:c9:61:84:bc:40:70:4b:c6:dd:e9:5e:f2:
                    1b:db:ab:8a:18:c5:2a:8f:c0:11:57:e4:13:5a:c4:
                    e5:b7:ca:82:44:3d:91:c6:3a:26:cd:79:3a:bc:26:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:30:E4:80:4A:A3:E8:EA:71:35:D0:D3:42:99:3B:93:65:71:69:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:eb:7c:ee:07:b4:af:74:90:e7:91:77:aa:66:1c:fb:e8:28:
         59:2c:2e:5f:bc:4e:79:32:b2:38:f0:0a:0e:36:72:1b:c0:f3:
         1e:d0:e3:c4:22:1a:ab:3e:c2:12:68:1e:99:7f:df:3b:b2:d6:
         27:32:b5:f9:6f:a3:8d:a6:ed:d5:c4:ee:5e:7a:c4:31:93:61:
         cb:00:74:72:f7:cd:2c:5f:ba:19:d6:01:23:16:af:51:4a:31:
         91:4f:98:a6:8d:7b:6f:ee:b5:0e:4d:c7:bf:37:ba:38:f7:71:
         0c:5a:cb:d3:0d:8f:a3:87:90:8c:73:f8:59:de:57:b9:fa:69:
         3e:5c:6e:2e:ac:76:b7:81:4a:d6:8f:15:cf:3b:7c:6e:54:85:
         c8:36:50:d8:df:c2:2b:b6:87:d0:4e:34:c8:98:cd:02:bd:c5:
         14:1f:53:60:03:f7:d5:91:0d:a1:7d:6d:ba:df:15:f8:fa:18:
         ff:e5:c3:9f:35:c8:21:d7:a5:d8:63:4c:1b:7b:a0:8a:5e:f8:
         5d:03:05:90:3c:58:b1:16:f6:53:ad:74:e5:6b:a0:74:2e:da:
         36:f2:80:31:55:ce:58:af:28:97:ba:68:1d:8d:16:a3:57:82:
         88:97:fb:dd:90:0e:ff:1d:0b:cf:66:08:4b:48:f6:71:c8:d3:
         ea:dc:3d:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTUZfKXwP3osREAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
YTBiMDdhMGMtZTY0Ni00YmExLTlhNmEtOGRhMmI0ZWQzODI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU0oNAhTEaHDQo1L8MRC+9pUSfWjyKWqvXvw
5MTDp0JLZT2RLbzSAx02cpiGw4hRJO5YCb4vov9GehKJ8pgJENZaTID59Xv/FlVz
fjNpCI71oVp1WKKoJ9k2+EuiuShmkT4CodN/TSfn6807RhScVSuXAQo3ohFjawko
g4Dn6dFic9I300WO/10mGUWqk8LXGT/YZ/PeJndcFXYyiPhfYUe7HRx+zYaJS2PR
27slja52EhaQD2FrnxIl0mSzTcksskBwFbDx+0XMonsrbn/UvQUA6a3JYYS8QHBL
xt3pXvIb26uKGMUqj8ARV+QTWsTlt8qCRD2RxjomzXk6vCYFOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFow5IBKo+jqcTXQ00KZO5NlcWlAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzkxYjFiZGUtMDRiOC0z
Yzc2LWI2ZjUtMzU4NzdhNWVkMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZexMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7rfO4HtK90kOeRd6pmHPvoKFksLl+8TnkysjjwCg42chvA8x7Q48Qi
Gqs+whJoHpl/3zuy1icytflvo42m7dXE7l56xDGTYcsAdHL3zSxfuhnWASMWr1FK
MZFPmKaNe2/utQ5Nx783ujj3cQxay9MNj6OHkIxz+FneV7n6aT5cbi6sdreBStaP
Fc87fG5Uhcg2UNjfwiu2h9BONMiYzQK9xRQfU2AD99WRDaF9bbrfFfj6GP/lw581
yCHXpdhjTBt7oIpe+F0DBZA8WLEW9lOtdOVroHQu2jbygDFVzlivKJe6aB2NFqNX
goiX+92QDv8dC89mCEtI9nHI0+rcPW8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:54 2025 by rpki-client