Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46d66a4e-b01a-3f9a-bf3d-15d8bbc6f00d.roa
File:                     46d66a4e-b01a-3f9a-bf3d-15d8bbc6f00d.roa (raw, json)
Hash identifier:          XHClmApTHxnEq1aFF9rt5bvd11krtUK8ZZhATf5Z3f0=
Subject key identifier:   AA:8C:58:48:F6:04:C6:0A:E4:CC:4B:AA:5E:B4:27:B3:5A:97:2B:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F049DF31161FA73B1B0B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46d66a4e-b01a-3f9a-bf3d-15d8bbc6f00d.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        100.40.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:49:df:31:16:1f:a7:3b:1b:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=7267410d-f462-44f9-8875-5c379f1d05d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:84:52:eb:09:2f:e1:e8:2e:48:ef:e6:f1:
                    7e:ce:6b:64:11:a2:0d:52:0d:ec:c0:25:55:a2:d0:
                    f0:de:8a:7d:e6:c3:7f:09:b8:55:bc:6f:19:8f:62:
                    2d:ab:d0:37:8e:67:83:04:a4:cf:b7:a9:80:c1:41:
                    cf:f7:e6:ac:38:c1:81:16:ff:da:cc:7e:89:0e:f4:
                    b2:5c:67:61:36:47:6c:b3:a5:22:77:96:70:39:72:
                    02:07:c7:ff:77:a7:db:96:47:d7:7a:0c:0e:e7:6e:
                    6b:0f:b0:d9:20:94:f1:b7:ca:d1:d4:15:aa:cf:60:
                    a0:c6:ec:83:b8:a8:1c:fc:47:8b:e5:83:ae:98:63:
                    03:66:1c:7b:7f:18:db:67:51:12:65:d7:0f:04:25:
                    79:f5:72:f6:e4:da:fd:2c:3e:aa:7b:14:8f:33:8f:
                    0f:e0:0c:18:1d:38:e2:72:89:54:fc:be:b5:8c:3e:
                    0d:47:68:b9:77:69:52:59:8d:39:5c:83:1e:6c:f3:
                    08:71:47:58:31:0a:1f:e1:a5:95:c9:3b:cc:9a:b0:
                    ca:dd:64:7a:73:ef:9a:f2:d6:89:09:51:ff:db:f2:
                    87:d7:86:99:4f:16:4a:dc:ee:50:2d:4a:90:e5:c8:
                    16:9a:e9:ef:16:99:ea:f8:0d:7d:b6:f4:76:5f:95:
                    08:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8C:58:48:F6:04:C6:0A:E4:CC:4B:AA:5E:B4:27:B3:5A:97:2B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46d66a4e-b01a-3f9a-bf3d-15d8bbc6f00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.40.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:50:36:c5:cd:87:dc:3b:ce:03:b7:ec:34:8d:bc:58:8a:
         76:fb:f2:8f:33:fa:ed:e7:89:be:cd:63:88:ae:04:4e:7e:bc:
         e3:7d:77:7d:96:40:0e:67:32:ac:fd:ef:07:3f:ce:49:3a:69:
         3a:d5:43:c1:89:b3:38:d5:f1:05:d1:a6:e0:63:b1:ad:e1:d0:
         b5:af:da:09:45:76:d5:ab:e4:10:12:82:14:87:df:4d:ad:98:
         12:04:de:8d:df:87:16:23:e7:fd:7e:58:75:58:e4:d3:ab:5e:
         69:28:df:23:15:ae:51:f4:7b:d3:6f:c8:08:1b:d6:11:97:84:
         fe:86:c5:e0:11:3d:c3:78:e1:15:ef:1e:9a:c5:37:6a:a9:e9:
         30:5b:5d:d5:9c:7f:39:35:e5:c3:3b:26:e4:54:50:46:23:d4:
         68:8b:ed:da:e8:e4:a4:25:a1:8f:2f:70:a3:1e:d6:33:24:97:
         54:77:c1:7e:11:3a:2c:25:a8:ae:59:7c:d9:14:a1:21:48:7b:
         db:da:31:3f:e8:4f:93:d3:da:54:f8:c4:52:33:9d:83:31:41:
         4e:4f:59:3c:f0:84:89:10:aa:d6:ce:b2:59:5a:39:4d:ea:91:
         24:22:da:48:fc:6b:34:db:61:18:23:6a:53:76:9e:bb:1b:c2:
         d9:13:f2:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8EnfMRYfpzsbC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzI2NzQxMGQtZjQ2Mi00NGY5LTg4NzUtNWMzNzlmMWQwNWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qaEUusJL+HoLkjv5vF+zmtkEaINUg3swCVV
otDw3op95sN/CbhVvG8Zj2Itq9A3jmeDBKTPt6mAwUHP9+asOMGBFv/azH6JDvSy
XGdhNkdss6Uid5ZwOXICB8f/d6fblkfXegwO525rD7DZIJTxt8rR1BWqz2CgxuyD
uKgc/EeL5YOumGMDZhx7fxjbZ1ESZdcPBCV59XL25Nr9LD6qexSPM48P4AwYHTji
colU/L61jD4NR2i5d2lSWY05XIMebPMIcUdYMQof4aWVyTvMmrDK3WR6c++a8taJ
CVH/2/KH14aZTxZK3O5QLUqQ5cgWmunvFpnq+A19tvR2X5UI6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKqMWEj2BMYK5MxLql60J7NalyvgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDZkNjZhNGUtYjAxYS0z
ZjlhLWJmM2QtMTVkOGJiYzZmMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHZCiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXRUDbFzYfcO84Dt+w0jbxYinb78o8z+u3nib7NY4iuBE5+vON9d32W
QA5nMqz97wc/zkk6aTrVQ8GJszjV8QXRpuBjsa3h0LWv2glFdtWr5BASghSH302t
mBIE3o3fhxYj5/1+WHVY5NOrXmko3yMVrlH0e9NvyAgb1hGXhP6GxeARPcN44RXv
HprFN2qp6TBbXdWcfzk15cM7JuRUUEYj1GiL7dro5KQloY8vcKMe1jMkl1R3wX4R
OiwlqK5ZfNkUoSFIe9vaMT/oT5PT2lT4xFIznYMxQU5PWTzwhIkQqtbOsllaOU3q
kSQi2kj8azTbYRgjalN2nrsbwtkT8gM=
-----END CERTIFICATE-----
Generated at Fri May 9 17:23:48 2025 by rpki-client