Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/dea4a2fc-0903-3302-b458-78b62049a403.roa
File:                     dea4a2fc-0903-3302-b458-78b62049a403.roa (raw, json)
Hash identifier:          tHPkO4J6vK9yle6po75Vv/gPWr0FkFVqgyAUH0ShdPM=
Subject key identifier:   41:A7:69:A5:DA:94:BD:B3:F5:A6:5F:A9:92:E4:91:4A:42:4D:2F:05
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F432858480644F37DA86A1BCFAAC95AE0
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/dea4a2fc-0903-3302-b458-78b62049a403.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     30324
IP address blocks:        204.83.21.0/24 maxlen: 24
                          204.83.22.0/24 maxlen: 24
                          204.83.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f3:7d:a8:6a:1b:cf:aa:c9:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=ea7ed8f0-dda9-4c6d-b9f9-ea8021a6dc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:81:d8:31:8c:a7:d3:c5:2d:68:10:4d:d9:
                    77:20:d7:58:77:02:1a:80:18:6f:a4:b9:51:4e:7d:
                    cf:e2:14:0a:f8:97:a5:43:c0:c4:0c:1b:c9:af:aa:
                    bd:50:f9:7a:68:28:c6:a4:f7:37:e9:7e:2c:f6:6a:
                    89:8d:d3:f1:4b:de:0c:64:a1:10:3e:a3:39:82:50:
                    35:93:73:41:37:62:23:24:dc:78:99:d1:ee:93:20:
                    3e:79:7c:9a:9b:5d:74:f8:e8:66:e8:e0:00:5f:7a:
                    7a:69:cf:61:71:20:46:23:36:c7:e7:3f:db:bf:0e:
                    18:fa:7f:c3:1f:0d:16:e1:e2:d1:e6:f4:55:50:20:
                    3a:58:26:45:62:e3:cb:f6:8e:53:bd:8d:a3:51:7c:
                    7f:0a:03:b2:35:ab:06:ad:9d:cc:3b:ae:37:30:a8:
                    40:d3:79:cf:64:7d:ce:15:78:e6:81:87:5e:21:5b:
                    ee:30:fc:a1:27:07:da:3a:fb:2c:9f:7a:59:b7:b2:
                    7e:84:2c:a7:99:0d:33:5f:6c:08:11:bf:a4:ce:d3:
                    70:df:f9:c1:77:07:f6:d1:c9:63:25:73:e8:f0:4d:
                    10:06:14:44:aa:45:dc:4c:19:57:45:93:ee:cc:a4:
                    78:33:4f:9a:85:8d:98:6a:63:f1:aa:4f:8a:18:bb:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A7:69:A5:DA:94:BD:B3:F5:A6:5F:A9:92:E4:91:4A:42:4D:2F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/dea4a2fc-0903-3302-b458-78b62049a403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.21.0-204.83.23.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:91:0e:2f:4c:e7:04:ed:41:73:12:09:6b:77:fd:6c:e3:74:
         e3:58:6f:a2:ab:d4:fd:7b:3d:7e:b1:97:2c:12:39:57:fe:1c:
         51:c7:bf:ea:b5:f0:3c:1e:0a:99:ca:be:7f:b1:51:95:f8:5d:
         e4:6b:29:d8:e8:c7:62:e6:92:bb:cf:46:8e:6a:64:dd:d9:6c:
         c3:3a:22:fa:55:b6:e6:0f:1e:dd:46:80:a4:eb:cf:ff:d4:1f:
         c2:06:75:7b:bc:69:0f:86:9f:69:d8:8c:56:6b:aa:01:da:c9:
         66:ca:91:b5:3b:54:24:f6:43:4f:8f:a0:53:35:8e:9b:ad:aa:
         e7:24:7d:4e:c8:46:39:56:60:ae:0a:7c:96:fb:81:8d:c7:1a:
         f1:fd:7e:5e:d1:37:d3:c8:11:7a:4d:47:3d:0f:b9:7c:dd:92:
         d6:60:4f:72:04:3f:5e:e3:65:07:89:63:f3:58:f4:7b:53:ac:
         40:af:28:38:ac:d3:65:24:ee:06:bc:5a:d7:e7:72:d1:69:a2:
         a4:55:6d:14:27:16:1c:dc:a7:ce:28:e9:35:8e:92:eb:15:b7:
         dd:a9:f8:1e:11:c9:22:9b:94:55:a3:69:c6:6d:d7:46:25:07:
         08:78:3d:ec:5f:39:4c:03:bc:a1:b2:d7:59:01:72:3f:36:bc:
         64:60:a8:ef
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgGRPN9qGobz6rJWuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTY0YzkyZjUtZWIwNC00NDhkLTg5MzktMzc5NDM0YjIy
OGIzMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
ZWE3ZWQ4ZjAtZGRhOS00YzZkLWI5ZjktZWE4MDIxYTZkYzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQeB2DGMp9PFLWgQTdl3INdYdwIagBhvpLlR
Tn3P4hQK+JelQ8DEDBvJr6q9UPl6aCjGpPc36X4s9mqJjdPxS94MZKEQPqM5glA1
k3NBN2IjJNx4mdHukyA+eXyam110+Ohm6OAAX3p6ac9hcSBGIzbH5z/bvw4Y+n/D
Hw0W4eLR5vRVUCA6WCZFYuPL9o5TvY2jUXx/CgOyNasGrZ3MO643MKhA03nPZH3O
FXjmgYdeIVvuMPyhJwfaOvssn3pZt7J+hCynmQ0zX2wIEb+kztNw3/nBdwf20clj
JXPo8E0QBhREqkXcTBlXRZPuzKR4M0+ahY2YamPxqk+KGLt65QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEGnaaXalL2z9aZfqZLkkUpCTS8FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjRj
OTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRiMjI4YjMvZGVhNGEyZmMtMDkwMy0z
MzAyLWI0NTgtNzhiNjIwNDlhNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTY0YzkyZjUtZWIwNC00NDhkLTg5
MzktMzc5NDM0YjIyOGIzLzU2NGM5MmY1LWViMDQtNDQ4ZC04OTM5LTM3OTQzNGIy
MjhiMy5jcmwwHwYDVR0jBBgwFoAU3XZv4maXpZNiEaRYPOTVyeFZ1IAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0
MzRiMjI4YjMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMUxUD
BAPMUxAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAkpEOL0znBO1BcxIJa3f9bON041hvoqvU/Xs9frGXLBI5
V/4cUce/6rXwPB4Kmcq+f7FRlfhd5Gsp2OjHYuaSu89Gjmpk3dlswzoi+lW25g8e
3UaApOvP/9QfwgZ1e7xpD4afadiMVmuqAdrJZsqRtTtUJPZDT4+gUzWOm62q5yR9
TshGOVZgrgp8lvuBjcca8f1+XtE308gRek1HPQ+5fN2S1mBPcgQ/XuNlB4lj81j0
e1OsQK8oOKzTZSTuBrxa1+dy0WmipFVtFCcWHNynzijpNY6S6xW33an4HhHJIpuU
VaNpxm3XRiUHCHg97F85TAO8obLXWQFyPza8ZGCo7w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:40 2025 by rpki-client