Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15dc1ec8-2cdf-3adf-ac4e-65664390e40d.roa
File:                     15dc1ec8-2cdf-3adf-ac4e-65664390e40d.roa (raw, json)
Hash identifier:          Ew4ZfTsi/BC4UyyBKBPDAPjoLe2zVmnegd/uWTI/0SM=
Subject key identifier:   5F:04:9C:FA:88:EE:A2:E9:64:AE:10:F6:D2:1D:76:42:4B:F8:44:BB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E8F52F68F75946C5A05D23D0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15dc1ec8-2cdf-3adf-ac4e-65664390e40d.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        64.233.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:2f:68:f7:59:46:c5:a0:5d:23:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=64b9c893-06b9-4f14-9eb0-013e9d6dcb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:24:08:61:ef:27:90:32:bb:33:b5:35:db:
                    05:67:ab:e9:85:7e:bb:34:5a:82:05:ff:20:79:92:
                    03:a2:92:83:72:9e:bb:56:58:d3:f2:ae:3b:72:19:
                    dc:3d:02:52:44:95:a2:1b:2f:03:0a:46:20:ac:e6:
                    9a:f7:97:dc:38:1d:06:13:e0:ab:69:1a:d6:b5:f9:
                    b4:ce:99:7e:9e:3c:61:fa:0d:07:23:89:21:76:bc:
                    6c:18:7d:cb:27:37:72:09:aa:3a:a9:b7:f4:75:08:
                    3d:0e:04:3d:bb:b7:19:18:bd:13:e8:59:57:03:77:
                    1a:e3:bf:8e:da:f0:6e:3d:25:75:cc:f5:d8:86:ea:
                    a0:b4:ad:d8:e6:56:47:30:ef:0c:86:9c:f2:75:83:
                    48:9d:10:79:4d:4e:7d:8f:1f:b3:fc:63:59:87:34:
                    28:53:ac:52:f5:ad:79:91:79:b6:60:6d:6f:0b:4a:
                    1c:cb:06:1e:2c:ef:4d:2b:d7:06:6d:3a:f7:a9:6b:
                    98:05:00:65:2d:8a:9e:f3:1a:8a:9f:a7:18:32:f7:
                    c5:ae:7c:fa:28:43:62:5b:c4:ad:ad:dc:df:d4:4f:
                    35:c8:c7:63:3b:4f:6a:a7:aa:09:b0:e9:4d:8e:82:
                    d1:63:76:15:86:8f:db:e4:8f:08:2d:98:61:10:55:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:9C:FA:88:EE:A2:E9:64:AE:10:F6:D2:1D:76:42:4B:F8:44:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15dc1ec8-2cdf-3adf-ac4e-65664390e40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d0:5f:2c:6b:2d:08:e2:97:e0:67:a8:a5:f7:46:57:a4:f8:
         15:be:31:f7:0f:bf:4e:c3:c7:2f:3d:9c:89:da:d0:9f:bd:15:
         6d:67:62:b3:a1:fd:1f:eb:83:44:21:76:d8:b6:0b:91:16:a9:
         24:8a:b7:f1:9a:bb:9b:ed:bc:41:30:17:63:30:5e:cd:92:77:
         5a:2e:54:de:fa:74:07:8f:3b:31:b2:0f:f7:ba:6e:11:2d:65:
         82:43:22:eb:2b:b4:cb:15:4a:4f:c2:5f:cf:4f:69:6b:88:e6:
         32:b7:4f:09:5e:97:3d:ed:b1:83:4a:91:7c:c9:ca:66:c1:a5:
         27:ff:45:76:b3:87:24:e0:27:46:b4:fb:f5:ae:34:9c:06:2d:
         aa:6b:2e:3d:9c:08:e5:10:6e:ab:7c:7e:fe:e8:d6:ba:87:e9:
         54:91:e4:c1:91:d3:fe:6a:51:8f:df:8e:b8:54:82:28:4a:81:
         44:4e:c2:1f:fa:02:f9:9c:ef:35:94:42:a2:26:d6:18:38:9b:
         36:03:60:76:2f:36:1b:2a:53:88:da:83:e8:66:c5:54:76:f7:
         88:02:eb:bd:65:b0:ea:89:8d:95:a6:c1:bc:7a:21:31:90:25:
         8b:1d:d9:76:47:41:8b:99:4e:d1:98:8f:9e:45:c4:c4:0d:48:
         19:7b:05:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9S9o91lGxaBdI9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NjRiOWM4OTMtMDZiOS00ZjE0LTllYjAtMDEzZTlkNmRjYjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPQkCGHvJ5AyuzO1NdsFZ6vphX67NFqCBf8g
eZIDopKDcp67VljT8q47chncPQJSRJWiGy8DCkYgrOaa95fcOB0GE+CraRrWtfm0
zpl+njxh+g0HI4khdrxsGH3LJzdyCao6qbf0dQg9DgQ9u7cZGL0T6FlXA3ca47+O
2vBuPSV1zPXYhuqgtK3Y5lZHMO8MhpzydYNInRB5TU59jx+z/GNZhzQoU6xS9a15
kXm2YG1vC0ocywYeLO9NK9cGbTr3qWuYBQBlLYqe8xqKn6cYMvfFrnz6KENiW8St
rdzf1E81yMdjO09qp6oJsOlNjoLRY3YVho/b5I8ILZhhEFX19wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8EnPqI7qLpZK4Q9tIddkJL+ES7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTVkYzFlYzgtMmNkZi0z
YWRmLWFjNGUtNjU2NjQzOTBlNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACPQXyxrLQjil+BnqKX3Rlek+BW+MfcPv07Dxy89nIna0J+9FW1nYrOh
/R/rg0Qhdti2C5EWqSSKt/Gau5vtvEEwF2MwXs2Sd1ouVN76dAePOzGyD/e6bhEt
ZYJDIusrtMsVSk/CX89PaWuI5jK3Twlelz3tsYNKkXzJymbBpSf/RXazhyTgJ0a0
+/WuNJwGLaprLj2cCOUQbqt8fv7o1rqH6VSR5MGR0/5qUY/fjrhUgihKgUROwh/6
Avmc7zWUQqIm1hg4mzYDYHYvNhsqU4jag+hmxVR294gC671lsOqJjZWmwbx6ITGQ
JYsd2XZHQYuZTtGYj55FxMQNSBl7BSY=
-----END CERTIFICATE-----
Generated at Fri May 9 18:48:28 2025 by rpki-client