Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa
File:                     d1b03864-302d-3895-a9cf-9c42e250ce86.roa (raw, json)
Hash identifier:          eRLK/C8l3UWqahnL6aWs3Cw3ORyQtuVb25xsFFPAbMQ=
Subject key identifier:   1E:51:38:0B:E1:A2:5A:E7:B5:57:C4:99:CC:4E:30:19:BE:5B:E1:0A
Certificate issuer:       /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
Certificate serial:       010D0C9F43285848159FF08F99A781E023C79300
Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     14860
IP address blocks:        64.88.192.0/19 maxlen: 24
                          173.209.64.0/20 maxlen: 24
                          192.154.132.0/22 maxlen: 24
                          198.203.0.0/22 maxlen: 24
                          208.89.24.0/22 maxlen: 24
                          208.123.96.0/20 maxlen: 24
                          2604:5680::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f0:8f:99:a7:81:e0:23:c7:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=0030377b-0f70-416c-929f-03c0a455bdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1e:a0:42:60:24:7e:85:be:ed:98:07:84:41:
                    55:22:01:04:3c:c1:f4:45:8f:b4:6e:91:3f:75:9c:
                    03:94:37:d2:51:b3:c7:ea:d8:2a:ba:1a:9f:22:e0:
                    1b:84:c8:9d:0e:f1:f0:53:9d:37:b0:24:67:41:18:
                    5b:12:c9:c2:e1:e9:32:53:28:fc:32:91:d7:99:85:
                    46:75:96:8b:a1:c0:ad:9c:22:66:59:89:a3:c6:df:
                    41:67:a6:db:2a:09:e7:8a:ad:30:da:dc:28:0c:87:
                    75:59:76:c9:11:7b:96:bf:f8:2f:f2:7a:97:6d:cb:
                    6a:fb:bd:94:96:f3:89:86:b8:e6:a4:74:ef:a0:f2:
                    32:a0:af:d1:86:77:93:e4:b4:3f:06:55:af:f7:70:
                    17:ce:e5:68:d7:c7:28:6a:c8:5c:f6:e9:ae:b6:dc:
                    78:3e:af:c6:27:c8:02:50:21:4f:0f:6c:42:5f:2d:
                    18:d9:fe:b7:ac:ee:a5:6c:1e:f2:00:42:7d:da:cd:
                    df:e5:ca:2b:e6:82:36:db:d9:44:c8:ea:98:e6:28:
                    a9:0d:5a:8e:d7:03:32:f1:e2:b7:c1:5c:24:f8:eb:
                    83:32:74:50:d7:0b:23:56:e9:49:12:2c:53:4f:d8:
                    d0:9c:88:17:5f:3d:f1:8b:c3:60:62:fe:bd:14:48:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:51:38:0B:E1:A2:5A:E7:B5:57:C4:99:CC:4E:30:19:BE:5B:E1:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl

            X509v3 Authority Key Identifier:
                keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.192.0/19
                  173.209.64.0/20
                  192.154.132.0/22
                  198.203.0.0/22
                  208.89.24.0/22
                  208.123.96.0/20
                IPv6:
                  2604:5680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:22:32:f1:8e:83:16:64:08:88:55:be:3f:28:60:41:b2:
         34:b6:8c:a9:77:e8:ce:8e:4b:8e:c3:80:83:fb:d2:64:b1:ca:
         b3:9c:40:e4:6b:13:d6:6b:f2:1c:2e:4d:94:b1:17:49:26:38:
         e8:b8:4a:c7:47:98:f2:3a:d5:9b:09:02:04:f5:54:ec:ae:6b:
         c0:35:54:0c:ad:31:c2:a1:6b:76:2a:13:95:7b:60:33:a2:1a:
         82:97:61:da:dd:d5:3a:dd:a3:d9:7d:51:1a:34:49:e3:65:41:
         88:41:b2:2e:42:27:82:6c:72:01:ac:8c:9c:12:9c:75:4a:cf:
         4b:5e:ef:14:b8:06:aa:9f:1e:08:45:07:a1:99:5f:b8:f3:c9:
         e6:9e:87:3e:80:3d:d7:07:b3:1c:3d:1c:7e:52:6b:a3:59:80:
         c9:ef:7a:40:6d:15:27:06:6c:da:9b:97:a1:51:2f:25:b6:64:
         f4:4b:67:5d:f0:b2:89:a0:d6:79:68:d2:42:ed:3f:b7:95:fb:
         4c:24:8a:13:89:62:41:8a:d6:6a:15:5b:ef:31:70:23:f8:67:
         98:c0:69:2f:fd:1e:bf:76:3f:ac:a2:32:5e:89:20:ad:c3:89:
         da:11:ca:54:8a:8f:1e:64:57:a0:21:40:70:60:fd:6c:d2:dc:
         26:47:2c:86
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEgVn/CPmaeB4CPHkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Y2ZjIxZDQtMzBiYi00MzIzLWJkMDctMjM4M2JhZTYw
YWFjMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
MDAzMDM3N2ItMGY3MC00MTZjLTkyOWYtMDNjMGE0NTViZGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR6gQmAkfoW+7ZgHhEFVIgEEPMH0RY+0bpE/
dZwDlDfSUbPH6tgquhqfIuAbhMidDvHwU503sCRnQRhbEsnC4ekyUyj8MpHXmYVG
dZaLocCtnCJmWYmjxt9BZ6bbKgnniq0w2twoDId1WXbJEXuWv/gv8nqXbctq+72U
lvOJhrjmpHTvoPIyoK/RhneT5LQ/BlWv93AXzuVo18coashc9umuttx4Pq/GJ8gC
UCFPD2xCXy0Y2f63rO6lbB7yAEJ92s3f5cor5oI229lEyOqY5iipDVqO1wMy8eK3
wVwk+OuDMnRQ1wsjVulJEixTT9jQnIgXXz3xi8NgYv69FEhsiQIDAQABo4IDgjCC
A34wHQYDVR0OBBYEFB5ROAvholrntVfEmcxOMBm+W+EKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZm
MjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgzYmFlNjBhYWMvZDFiMDM4NjQtMzAyZC0z
ODk1LWE5Y2YtOWM0MmUyNTBjZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y2ZjIxZDQtMzBiYi00MzIzLWJk
MDctMjM4M2JhZTYwYWFjLzdmNmYyMWQ0LTMwYmItNDMyMy1iZDA3LTIzODNiYWU2
MGFhYy5jcmwwHwYDVR0jBBgwFoAUy3aebUA0uX+p9Bcr03meEIq8wRowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZmMjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgz
YmFlNjBhYWMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFQFjAAwQE
rdFAAwQCwJqEAwQCxssAAwQC0FkYAwQE0HtgMA0EAgACMAcDBQAmBFaAMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBAGtUIjLxjoMWZAiIVb4/KGBBsjS2jKl36M6OS47DgIP70mSxyrOcQORrE9Zr
8hwuTZSxF0kmOOi4SsdHmPI61ZsJAgT1VOyua8A1VAytMcKha3YqE5V7YDOiGoKX
Ydrd1Trdo9l9URo0SeNlQYhBsi5CJ4JscgGsjJwSnHVKz0te7xS4BqqfHghFB6GZ
X7jzyeaehz6APdcHsxw9HH5Sa6NZgMnvekBtFScGbNqbl6FRLyW2ZPRLZ13wsomg
1nlo0kLtP7eV+0wkihOJYkGK1moVW+8xcCP4Z5jAaS/9Hr92P6yiMl6JIK3DidoR
ylSKjx5kV6AhQHBg/WzS3CZHLIY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:44 2025 by rpki-client