Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa
File:                     aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa (raw, json)
Hash identifier:          rM4wobAvt32MS1wPX9TLkyJwu875EwUb3fqV8Kx5gV8=
Subject key identifier:   33:E3:DD:6F:20:1D:8E:46:94:78:66:F9:5C:57:47:CD:C7:FF:82:FA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B161DD48D6F0592D01F84
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        47.231.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:16:1d:d4:8d:6f:05:92:d0:1f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=44a9f8e4-012d-4290-8ad5-58b30e1631d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fe:55:fe:51:bf:ac:21:38:29:0d:99:3c:34:
                    32:cf:21:0a:e2:18:15:2e:8f:7d:c3:b1:4e:84:39:
                    cf:bf:af:a9:e3:a5:79:a5:9d:92:91:8c:27:53:34:
                    c8:76:e9:e0:69:ce:a7:51:83:fa:4f:3e:af:0a:df:
                    f4:1a:c5:94:3c:ac:66:3b:33:03:90:a7:38:11:62:
                    79:f6:92:b4:61:7c:2f:d3:b5:68:44:53:54:fc:5a:
                    19:e0:ce:94:a4:29:a5:de:da:30:55:1f:3d:7b:42:
                    db:4f:66:c9:7f:2e:80:55:00:23:dd:56:cf:9b:da:
                    68:9f:f8:b0:72:54:c2:a9:b5:bc:f2:f3:3b:1b:ef:
                    98:e7:6a:b8:d7:4e:68:2a:6d:87:b4:65:42:f5:a4:
                    ec:53:c1:a4:6f:ed:eb:d1:b2:7d:d8:13:4f:f2:2b:
                    9e:df:90:1e:1b:fd:5c:d0:83:a0:10:72:ac:a5:ce:
                    ef:20:c8:0c:b0:32:0f:1d:63:64:f2:40:7c:4f:1e:
                    26:7b:93:94:b5:ca:d9:e5:d3:a1:a9:d7:9b:54:74:
                    d9:16:39:fa:e5:b1:0a:ea:61:f3:7b:7b:5c:fe:af:
                    05:3b:1f:10:a7:d5:d7:99:8f:0a:0d:a8:af:b3:58:
                    ae:4b:d1:cc:3d:41:da:e6:61:79:c2:64:83:c8:a9:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E3:DD:6F:20:1D:8E:46:94:78:66:F9:5C:57:47:CD:C7:FF:82:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:60:77:ca:14:b5:1d:93:6f:38:db:a6:93:1c:b9:3b:57:36:
         0b:dc:b6:86:94:f3:d0:14:87:ea:e5:4b:80:76:ad:cd:44:2c:
         d0:ad:56:e1:b2:03:c6:f0:e9:71:b4:4a:b8:33:3b:2a:9b:c8:
         f1:00:f9:bd:5b:63:66:d6:57:1c:b1:71:1f:04:84:f1:0b:1f:
         1f:12:79:3e:25:c4:3e:d3:38:40:79:2b:63:0b:53:f6:b9:26:
         6d:73:a6:bf:b8:d7:48:a6:b6:09:31:37:30:f2:d4:46:4c:ef:
         02:80:c1:a2:19:42:5f:20:7a:bc:7b:1c:dc:83:2e:56:16:a6:
         9a:57:23:45:5a:93:0c:ca:cf:75:6b:9c:6a:c0:6a:97:a8:70:
         d3:66:c0:74:86:b2:97:01:0a:88:14:a2:93:b5:2a:8c:1a:21:
         9c:d1:7a:5a:31:12:9b:63:3c:51:9b:1f:ad:db:be:23:6a:2c:
         32:b7:41:5b:02:f4:82:1a:3b:cf:75:7f:06:d0:f6:a2:27:7b:
         fb:b0:bc:ff:f0:66:af:58:99:93:48:52:cc:17:28:78:fa:dc:
         0b:60:09:d1:66:6b:20:9b:b4:53:aa:33:d0:1c:69:03:69:f4:
         20:4f:bc:a2:68:f3:4e:61:45:be:6e:47:2b:1f:30:8a:9f:29:
         34:e8:68:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDexYd1I1vBZLQH4QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NDRhOWY4ZTQtMDEyZC00MjkwLThhZDUtNThiMzBlMTYzMWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf5V/lG/rCE4KQ2ZPDQyzyEK4hgVLo99w7FO
hDnPv6+p46V5pZ2SkYwnUzTIdungac6nUYP6Tz6vCt/0GsWUPKxmOzMDkKc4EWJ5
9pK0YXwv07VoRFNU/FoZ4M6UpCml3towVR89e0LbT2bJfy6AVQAj3VbPm9pon/iw
clTCqbW88vM7G++Y52q4105oKm2HtGVC9aTsU8Gkb+3r0bJ92BNP8iue35AeG/1c
0IOgEHKspc7vIMgMsDIPHWNk8kB8Tx4me5OUtcrZ5dOhqdebVHTZFjn65bEK6mHz
e3tc/q8FOx8Qp9XXmY8KDaivs1iuS9HMPUHa5mF5wmSDyKmU9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPj3W8gHY5GlHhm+VxXR83H/4L6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWEyZDM4Y2ItM2M2ZS0z
NjAxLTg1ODAtOGFkNGZmNDA5YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCL+eEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdgd8oUtR2TbzjbppMcuTtXNgvctoaU89AUh+rlS4B2rc1ELNCtVuGy
A8bw6XG0SrgzOyqbyPEA+b1bY2bWVxyxcR8EhPELHx8SeT4lxD7TOEB5K2MLU/a5
Jm1zpr+410imtgkxNzDy1EZM7wKAwaIZQl8gerx7HNyDLlYWpppXI0VakwzKz3Vr
nGrAapeocNNmwHSGspcBCogUopO1KowaIZzReloxEptjPFGbH63bviNqLDK3QVsC
9IIaO891fwbQ9qIne/uwvP/wZq9YmZNIUswXKHj63AtgCdFmayCbtFOqM9AcaQNp
9CBPvKJo805hRb5uRysfMIqfKTToaEA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:13 2025 by rpki-client