Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa
File:                     7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa (raw, json)
Hash identifier:          k9RA6lqLEsyKnBCwa5OsaExiq5QUOxtqVD7yQXRV/b0=
Subject key identifier:   0A:F6:75:9D:E1:29:D8:76:DB:22:C3:26:A7:70:D7:90:31:7F:67:21
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B5EB73EE8A4DD6D2CAF00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     395227
IP address blocks:        71.86.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:5e:b7:3e:e8:a4:dd:6d:2c:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=d0359ec8-09e5-44b1-a239-34bc6e608a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9f:01:c1:f0:e9:fa:a3:85:4d:52:34:75:04:
                    95:34:38:d2:7b:0e:f2:39:87:8a:c7:11:2b:5f:db:
                    9c:25:31:d9:64:bf:46:bf:8b:40:d4:57:dd:d4:43:
                    03:2e:39:af:32:53:6d:df:62:14:f9:33:bf:0d:b3:
                    61:b2:03:97:94:a8:de:e6:ff:67:44:ab:26:67:7e:
                    ae:56:c3:1d:d6:ab:d2:c0:5a:ac:38:9d:f0:57:20:
                    55:95:51:5d:76:72:22:f1:5b:da:ba:14:3f:82:70:
                    a9:9f:7c:52:13:7d:f1:c5:6c:a1:08:ce:93:36:34:
                    85:be:ed:d0:49:19:4e:98:67:a5:89:80:58:0e:9c:
                    e5:04:90:6e:8d:76:5c:fe:f7:b5:b2:10:4f:44:a1:
                    af:9b:55:51:14:bf:1d:10:1c:8f:66:08:53:b4:8c:
                    a0:55:03:95:d2:7b:a4:d5:4c:65:0d:e0:28:80:4e:
                    1a:49:3f:86:c2:32:ca:1b:f9:91:0d:07:7b:32:f6:
                    f8:9c:b9:7c:9b:21:93:62:1b:74:f7:da:c0:81:f0:
                    e9:95:81:c8:a0:d7:da:00:62:c7:e0:b2:a5:e0:45:
                    70:83:1a:07:ab:c1:ec:b0:4a:e5:69:d6:c8:7e:88:
                    36:bf:11:33:75:58:56:88:4f:0e:d7:3c:be:f1:b5:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F6:75:9D:E1:29:D8:76:DB:22:C3:26:A7:70:D7:90:31:7F:67:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:eb:81:f8:a4:0f:a7:c9:d0:de:2e:33:22:2a:60:2f:10:da:
         72:55:fd:16:eb:df:79:39:d0:d5:5b:e8:da:71:66:ba:d4:4f:
         1d:23:c6:54:a7:61:6d:4d:7f:8e:ba:f5:b5:d8:d7:2b:38:06:
         0a:df:7c:51:b9:b6:c9:cc:17:16:1e:1c:07:99:05:dd:67:09:
         18:3f:b7:81:ff:39:ac:9e:03:7b:e9:b1:50:30:9e:e2:9a:0e:
         59:71:6e:65:e5:45:e7:c6:a5:00:a0:55:bb:7b:95:c9:1e:10:
         c7:df:5b:60:b4:eb:78:7a:5c:bd:08:5f:a0:94:70:6a:0e:73:
         dd:3c:93:d1:cd:fd:d8:22:82:d6:55:99:9e:aa:19:d8:29:a0:
         33:7a:43:26:bc:ec:c1:ca:a6:fe:c0:0e:b0:49:97:1a:fa:22:
         84:f9:7a:cf:a7:57:8a:41:cc:0d:aa:fe:e3:42:a7:32:bd:25:
         18:44:7c:6e:30:bf:c0:b2:3a:37:54:6f:c4:dc:55:82:90:c4:
         cd:02:bf:16:ec:ec:00:7a:03:96:92:02:db:71:06:13:6d:05:
         58:d4:a1:dd:c7:0b:ca:7a:dd:2d:d0:e0:df:7e:ce:33:fe:40:
         14:29:1d:46:e4:00:e6:f8:8f:d1:22:11:26:54:95:09:dc:bc:
         d2:21:24:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDe163Puik3W0srwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZDAzNTllYzgtMDllNS00NGIxLWEyMzktMzRiYzZlNjA4YTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ8BwfDp+qOFTVI0dQSVNDjSew7yOYeKxxEr
X9ucJTHZZL9Gv4tA1Ffd1EMDLjmvMlNt32IU+TO/DbNhsgOXlKje5v9nRKsmZ36u
VsMd1qvSwFqsOJ3wVyBVlVFddnIi8VvauhQ/gnCpn3xSE33xxWyhCM6TNjSFvu3Q
SRlOmGeliYBYDpzlBJBujXZc/ve1shBPRKGvm1VRFL8dEByPZghTtIygVQOV0nuk
1UxlDeAogE4aST+GwjLKG/mRDQd7Mvb4nLl8myGTYht099rAgfDplYHIoNfaAGLH
4LKl4EVwgxoHq8HssErladbIfog2vxEzdVhWiE8O1zy+8bXojwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAr2dZ3hKdh22yLDJqdw15Axf2chMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvN2UzZmEzNmMtMjZhZC0z
MzE5LWE0YTgtODNlMDBhNmEyZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR1b8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK3rgfikD6fJ0N4uMyIqYC8Q2nJV/Rbr33k50NVb6NpxZrrUTx0jxlSn
YW1Nf4669bXY1ys4BgrffFG5tsnMFxYeHAeZBd1nCRg/t4H/OayeA3vpsVAwnuKa
DllxbmXlRefGpQCgVbt7lckeEMffW2C063h6XL0IX6CUcGoOc908k9HN/dgigtZV
mZ6qGdgpoDN6Qya87MHKpv7ADrBJlxr6IoT5es+nV4pBzA2q/uNCpzK9JRhEfG4w
v8CyOjdUb8TcVYKQxM0Cvxbs7AB6A5aSAttxBhNtBVjUod3HC8p63S3Q4N9+zjP+
QBQpHUbkAOb4j9EiESZUlQncvNIhJPA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:25:43 2025 by rpki-client