Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82548757-7c1b-335f-83d4-c1937bb82b60.roa
File:                     82548757-7c1b-335f-83d4-c1937bb82b60.roa (raw, json)
Hash identifier:          jhCP2m0vw8bDOe63byW0aZ8Epj0sT4Q5lHIZUM4cw+A=
Subject key identifier:   8F:6D:4C:E2:08:7A:20:A8:70:79:2A:47:C6:74:86:77:2A:F2:17:74
Certificate issuer:       /CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
Certificate serial:       010D0C9F432858480645019444A1A39003F36D40
Authority key identifier: 72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82548757-7c1b-335f-83d4-c1937bb82b60.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     40114
IP address blocks:        74.117.148.0/22 maxlen: 24
                          74.117.149.0/24 maxlen: 24
                          74.117.150.0/24 maxlen: 24
                          74.117.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:01:94:44:a1:a3:90:03:f3:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=af9dd3e7-a545-4e1f-b153-cc539a9d7fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2a:82:f0:a4:01:da:85:87:75:35:3d:2f:b6:
                    87:1b:ac:7a:24:f9:c5:bc:60:cc:66:35:e6:ba:f7:
                    1a:ee:00:b6:5e:c2:88:a0:52:65:24:bd:01:db:76:
                    37:05:f9:04:e0:54:8f:f7:00:80:cf:b4:b7:ab:95:
                    aa:df:d5:d1:ce:ea:5e:28:2c:be:4f:9b:dd:24:e7:
                    e6:64:35:5c:96:c7:b8:7d:66:88:7c:98:23:2b:96:
                    ca:20:0c:e2:31:8e:e2:a9:44:31:45:f8:89:76:72:
                    29:8f:51:40:4e:67:58:5f:81:c2:50:e5:58:94:dd:
                    7b:88:21:01:da:a5:d5:05:0d:89:c0:b4:94:dd:f5:
                    31:5a:d0:49:c4:e4:00:39:88:09:ee:be:fd:f5:fa:
                    89:78:df:b8:c7:97:63:fe:40:c1:ae:04:2b:b1:2a:
                    97:bd:cc:22:5a:fd:60:d1:69:20:30:99:d5:ca:d7:
                    7c:53:e9:44:81:67:22:16:9a:32:e9:7d:e2:0a:33:
                    11:7e:38:20:9d:8c:a4:38:8f:4e:0e:d4:07:88:38:
                    31:62:81:eb:c3:c3:0a:37:39:0d:6e:af:1d:33:c0:
                    98:04:fe:8b:bf:6f:7c:bf:b8:c3:df:e5:58:53:39:
                    5a:79:1f:51:1f:35:9e:be:fc:3b:f9:8b:34:7a:d0:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:4C:E2:08:7A:20:A8:70:79:2A:47:C6:74:86:77:2A:F2:17:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82548757-7c1b-335f-83d4-c1937bb82b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e6:03:40:cb:3c:fb:cc:2f:1b:d0:41:a6:5c:5a:5a:95:94:
         cc:66:8a:d9:64:10:ad:fc:04:8d:20:63:31:e9:38:b3:67:a3:
         b7:e9:a5:05:35:d4:2e:d4:b3:c0:b5:9f:e5:9e:27:0a:c9:95:
         a8:b1:a9:c1:e5:b8:7b:31:7b:d3:a6:a6:83:69:20:6a:84:e1:
         18:63:a2:e0:db:87:87:9c:e3:30:72:eb:1b:dd:cc:72:54:2c:
         f4:b3:37:1a:a1:e6:1f:9c:85:5f:66:28:f7:3b:c0:56:57:7c:
         59:8e:ae:f3:a1:83:3c:bd:b4:ca:af:2d:2e:d6:8f:fa:35:8c:
         1c:d2:51:a9:6c:e8:70:06:f0:48:b0:ec:60:b8:c8:95:30:a3:
         9e:1c:73:aa:b1:cf:67:83:23:93:40:25:24:50:9c:b1:77:f2:
         85:56:5b:42:92:86:ce:13:d3:5d:72:b5:fc:9f:84:ac:ed:6c:
         b2:7a:17:77:82:e6:f8:42:4f:4a:73:1c:d8:d9:cb:8e:a2:16:
         f7:d5:cb:ed:e8:68:5b:b4:2a:9b:6b:da:6f:5b:ec:22:d9:8e:
         30:6e:cf:74:b0:d3:79:6c:08:1d:02:56:79:bc:38:8f:c2:f7:
         32:8b:0d:f8:f8:d7:ed:eb:6f:a5:f8:4f:89:1f:82:2f:d3:98:
         92:28:1a:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRQGURKGjkAPzbUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODJkMzcxNzUtYzNkZi00MWFjLWFlMmItN2MyYzI1NzJj
N2FiMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
YWY5ZGQzZTctYTU0NS00ZTFmLWIxNTMtY2M1MzlhOWQ3ZmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiqC8KQB2oWHdTU9L7aHG6x6JPnFvGDMZjXm
uvca7gC2XsKIoFJlJL0B23Y3BfkE4FSP9wCAz7S3q5Wq39XRzupeKCy+T5vdJOfm
ZDVclse4fWaIfJgjK5bKIAziMY7iqUQxRfiJdnIpj1FATmdYX4HCUOVYlN17iCEB
2qXVBQ2JwLSU3fUxWtBJxOQAOYgJ7r799fqJeN+4x5dj/kDBrgQrsSqXvcwiWv1g
0WkgMJnVytd8U+lEgWciFpoy6X3iCjMRfjggnYykOI9ODtQHiDgxYoHrw8MKNzkN
bq8dM8CYBP6Lv298v7jD3+VYUzlaeR9RHzWevvw7+Ys0etB6BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9tTOIIeiCocHkqR8Z0hncq8hd0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MmQz
NzE3NS1jM2RmLTQxYWMtYWUyYi03YzJjMjU3MmM3YWIvODI1NDg3NTctN2MxYi0z
MzVmLTgzZDQtYzE5MzdiYjgyYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODJkMzcxNzUtYzNkZi00MWFjLWFl
MmItN2MyYzI1NzJjN2FiLzgyZDM3MTc1LWMzZGYtNDFhYy1hZTJiLTdjMmMyNTcy
YzdhYi5jcmwwHwYDVR0jBBgwFoAUchyNQLtxsOio4SoyA2EaA1g4MIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MmQzNzE3NS1jM2RmLTQxYWMtYWUyYi03YzJj
MjU3MmM3YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnWUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTmA0DLPPvMLxvQQaZcWlqVlMxmitlkEK38BI0gYzHpOLNno7fppQU1
1C7Us8C1n+WeJwrJlaixqcHluHsxe9OmpoNpIGqE4RhjouDbh4ec4zBy6xvdzHJU
LPSzNxqh5h+chV9mKPc7wFZXfFmOrvOhgzy9tMqvLS7Wj/o1jBzSUals6HAG8Eiw
7GC4yJUwo54cc6qxz2eDI5NAJSRQnLF38oVWW0KShs4T011ytfyfhKztbLJ6F3eC
5vhCT0pzHNjZy46iFvfVy+3oaFu0Kptr2m9b7CLZjjBuz3Sw03lsCB0CVnm8OI/C
9zKLDfj41+3rb6X4T4kfgi/TmJIoGpA=
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:45:23 2025 by rpki-client