Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a178e96-d37d-3ffd-9abd-52d4c597377e.roa
File:                     9a178e96-d37d-3ffd-9abd-52d4c597377e.roa (raw, json)
Hash identifier:          RW8RUW7Z6ycPlWe+XjlXVJEv/ISRKltAq8IHlRFB5OM=
Subject key identifier:   D2:9A:7F:F8:78:28:92:B2:D5:4F:A3:39:F9:AC:57:DD:94:9C:44:B3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848222FEF58A03F7D715E3A1C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a178e96-d37d-3ffd-9abd-52d4c597377e.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     20940
IP address blocks:        96.7.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:ef:58:a0:3f:7d:71:5e:3a:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=0629ad57-3ea1-4831-bd9c-c51f0e6378a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:f3:23:ee:13:62:21:9a:df:14:0c:bb:db:
                    80:ad:4e:89:46:27:f2:12:91:cd:7d:cb:ab:37:ca:
                    71:70:a2:2a:cc:62:26:c2:9c:f8:f8:54:80:cf:97:
                    7f:1b:ed:e0:36:0f:9e:f8:b6:3c:90:b0:70:0b:80:
                    54:94:10:28:cf:ae:5d:9c:67:54:16:ce:a9:16:ef:
                    9f:30:c1:b5:57:a6:89:48:3a:47:c4:55:3e:64:e6:
                    94:70:55:6c:0a:9a:f7:1a:4c:34:03:ee:c5:40:fe:
                    7f:c5:ed:41:c0:78:39:23:56:ba:b7:e7:01:84:69:
                    5d:0d:56:b5:81:ff:72:40:73:9f:77:c3:81:45:e6:
                    5c:c4:3c:9a:8e:52:48:91:15:8d:7c:39:14:15:9b:
                    9d:52:93:2e:29:2e:42:6d:93:c7:1b:03:93:e4:9c:
                    b8:be:74:39:61:47:5f:11:41:95:cd:3a:87:e8:7b:
                    f7:e6:94:c1:8a:d9:e6:28:0d:6c:1b:9b:ef:6f:cd:
                    fc:e7:b2:cb:31:79:ca:2b:4d:fd:c2:7a:1b:c6:e3:
                    32:99:07:83:56:cc:99:c4:ad:93:cb:75:3f:50:30:
                    54:bb:58:5a:38:c5:1d:a5:b4:81:3f:e5:33:3b:3f:
                    cc:46:c0:37:41:e9:46:08:c8:f3:f9:ce:93:55:a4:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9A:7F:F8:78:28:92:B2:D5:4F:A3:39:F9:AC:57:DD:94:9C:44:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a178e96-d37d-3ffd-9abd-52d4c597377e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:66:34:16:26:a3:b8:56:b9:f1:96:71:51:bc:93:53:ce:38:
         0a:9e:0c:26:76:8f:f4:b7:08:12:62:f9:25:74:71:c8:69:d3:
         c0:34:26:fa:35:44:74:2a:0a:4c:d7:a3:a1:35:99:21:1c:6d:
         c4:dc:bd:10:94:d9:8b:7f:d0:28:d9:1e:3e:27:86:5f:7c:13:
         ca:3e:08:88:43:c0:95:f0:9d:26:7e:c7:cc:20:df:8a:ff:a0:
         df:c2:a5:ee:a2:32:72:de:5e:be:3a:4c:76:0d:83:7b:f5:f4:
         ef:52:92:3a:1d:2c:9c:9d:04:8a:b8:d4:5d:51:54:5c:75:c6:
         a5:3c:97:82:7e:fe:33:ae:36:d9:dc:66:41:08:68:1b:57:b2:
         47:83:58:e2:53:eb:8c:d8:46:ea:a2:13:a9:8f:24:1a:b9:c9:
         47:db:ce:e7:0c:e9:75:05:5b:3c:aa:59:01:69:9c:2c:f3:99:
         60:e2:c2:74:39:9c:30:52:4b:a9:df:f8:67:10:b1:1b:32:43:
         2e:40:50:42:32:39:61:0d:7f:13:f8:9a:94:56:f0:66:6b:ef:
         e9:80:c4:3e:a9:ce:62:c7:06:bb:43:a9:a0:90:26:75:0e:e0:
         3c:95:53:48:47:3b:19:06:b6:3b:3d:ad:77:45:bf:c4:d1:9e:
         47:ef:00:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+9YoD99cV46HAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
MDYyOWFkNTctM2VhMS00ODMxLWJkOWMtYzUxZjBlNjM3OGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3rzI+4TYiGa3xQMu9uArU6JRifyEpHNfcur
N8pxcKIqzGImwpz4+FSAz5d/G+3gNg+e+LY8kLBwC4BUlBAoz65dnGdUFs6pFu+f
MMG1V6aJSDpHxFU+ZOaUcFVsCpr3Gkw0A+7FQP5/xe1BwHg5I1a6t+cBhGldDVa1
gf9yQHOfd8OBReZcxDyajlJIkRWNfDkUFZudUpMuKS5CbZPHGwOT5Jy4vnQ5YUdf
EUGVzTqH6Hv35pTBitnmKA1sG5vvb83857LLMXnKK039wnobxuMymQeDVsyZxK2T
y3U/UDBUu1haOMUdpbSBP+UzOz/MRsA3QelGCMjz+c6TVaTxEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKaf/h4KJKy1U+jOfmsV92UnESzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWExNzhlOTYtZDM3ZC0z
ZmZkLTlhYmQtNTJkNGM1OTczNzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAfkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJmNBYmo7hWufGWcVG8k1POOAqeDCZ2j/S3CBJi+SV0cchp08A0Jvo1
RHQqCkzXo6E1mSEcbcTcvRCU2Yt/0CjZHj4nhl98E8o+CIhDwJXwnSZ+x8wg34r/
oN/Cpe6iMnLeXr46THYNg3v19O9SkjodLJydBIq41F1RVFx1xqU8l4J+/jOuNtnc
ZkEIaBtXskeDWOJT64zYRuqiE6mPJBq5yUfbzucM6XUFWzyqWQFpnCzzmWDiwnQ5
nDBSS6nf+GcQsRsyQy5AUEIyOWENfxP4mpRW8GZr7+mAxD6pzmLHBrtDqaCQJnUO
4DyVU0hHOxkGtjs9rXdFv8TRnkfvANw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:17 2025 by rpki-client