Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/172e87ad-48ae-3b18-a7b6-240b78dfd173.roa
File:                     172e87ad-48ae-3b18-a7b6-240b78dfd173.roa (raw, json)
Hash identifier:          CdEEQmDJfzmuX7+q9xdInqO3aO/VXgPHglCxNisE3vE=
Subject key identifier:   EC:06:7D:93:DA:10:18:7A:B2:37:99:06:3C:90:03:CF:E4:3F:B4:CE
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858483B4FF759B4C490B096F70F00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/172e87ad-48ae-3b18-a7b6-240b78dfd173.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     174
IP address blocks:        50.7.112.0/24 maxlen: 24
                          50.7.114.0/24 maxlen: 24
                          50.7.152.0/22 maxlen: 22
                          50.7.198.0/23 maxlen: 23
                          50.7.202.0/23 maxlen: 23
                          50.7.212.0/23 maxlen: 24
                          50.7.224.0/23 maxlen: 23
                          50.7.226.0/23 maxlen: 23
                          66.90.119.0/24 maxlen: 24
                          198.16.98.0/24 maxlen: 24
                          198.16.102.0/23 maxlen: 23
                          198.16.104.0/23 maxlen: 23
                          198.16.122.0/24 maxlen: 24
                          2001:49f0:d007::/48 maxlen: 48
                          2001:49f0:d0a3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:f7:59:b4:c4:90:b0:96:f7:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=10e1a24d-4e32-430e-9cbe-9028a93e4c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:40:3a:f8:0a:d2:26:38:07:cb:6d:cd:26:2c:
                    0e:9a:8c:d9:9d:91:bc:3f:9d:88:83:06:48:ef:5c:
                    bb:1a:e8:83:ea:32:bf:18:1d:e8:7f:91:e8:a8:a9:
                    14:52:21:74:0b:20:56:a8:0d:d3:ec:34:4e:b4:1c:
                    23:50:21:89:64:08:87:3a:8c:67:18:59:06:42:9f:
                    c0:a7:c5:0d:80:cd:31:41:aa:dd:e3:7a:fb:ac:b1:
                    47:39:cc:88:d7:05:b9:df:fe:e0:83:82:3c:25:7b:
                    f3:8e:54:51:66:75:b8:39:79:f4:72:60:fd:27:2d:
                    76:63:42:bb:60:0b:3a:46:03:26:21:3a:25:64:11:
                    69:4a:0c:e8:bd:e9:24:9d:80:62:5d:0f:e8:69:71:
                    31:01:7d:bb:99:5d:ac:f7:b5:3a:96:51:6f:0f:a3:
                    ed:2c:7c:20:57:07:dd:ed:71:a4:7c:00:89:2a:f0:
                    e6:2d:e1:93:8d:ff:05:40:7d:55:1d:1b:22:61:bd:
                    46:24:ba:f6:27:fe:16:41:ba:91:08:77:37:b2:ee:
                    cb:37:3a:2a:34:ff:32:81:0c:63:d1:ef:d6:c4:3a:
                    9b:1a:2a:69:4d:13:a7:f1:eb:cc:d9:79:90:f9:db:
                    a4:b3:da:87:eb:33:30:74:32:5a:77:e6:4b:65:4a:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:06:7D:93:DA:10:18:7A:B2:37:99:06:3C:90:03:CF:E4:3F:B4:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/172e87ad-48ae-3b18-a7b6-240b78dfd173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.112.0/24
                  50.7.114.0/24
                  50.7.152.0/22
                  50.7.198.0/23
                  50.7.202.0/23
                  50.7.212.0/23
                  50.7.224.0/22
                  66.90.119.0/24
                  198.16.98.0/24
                  198.16.102.0-198.16.105.255
                  198.16.122.0/24
                IPv6:
                  2001:49f0:d007::/48
                  2001:49f0:d0a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:67:23:c9:a1:97:ca:07:a3:1b:0f:43:48:d6:60:97:49:6a:
         80:41:48:f6:56:a0:5d:7c:c3:e8:3d:0f:5d:e2:20:52:62:04:
         61:de:65:71:20:ce:01:91:1c:d3:6f:42:b6:3d:66:79:03:f0:
         1d:46:54:a6:b9:55:c9:9a:0c:67:8d:aa:e5:39:54:2d:8d:3e:
         8f:f6:ae:fe:14:c9:f5:2e:1a:ea:c6:ae:45:df:df:de:b0:57:
         56:4f:91:02:6b:ef:cb:75:fe:a6:82:9b:5c:52:b2:a8:ba:12:
         48:ae:c9:93:3b:31:77:ef:a1:87:22:4a:99:2f:42:c3:09:17:
         45:d4:6c:17:a5:bc:db:40:1f:cc:f5:6a:45:81:1c:90:ec:63:
         2a:d6:5d:d7:de:01:9a:9f:ba:82:3e:31:36:24:54:ee:14:4d:
         bd:72:72:8d:c9:df:ba:d4:4d:e4:71:3c:df:d0:57:58:b9:1b:
         8e:39:a7:89:52:ce:89:f3:2a:a2:a9:78:3c:31:0a:ec:9d:64:
         f7:83:3f:4b:96:c5:31:3f:02:db:aa:ae:6a:11:41:8d:80:11:
         cb:f7:19:28:43:98:87:37:72:3e:5f:8e:db:49:42:cf:14:db:
         cd:6e:dd:70:7b:52:1e:22:aa:d7:a1:a3:6b:64:66:c5:7b:b2:
         46:ae:9d:a2
-----BEGIN CERTIFICATE-----
MIIGoTCCBYmgAwIBAgIUAQ0Mn0MoWEg7T/dZtMSQsJb3DwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
MTBlMWEyNGQtNGUzMi00MzBlLTljYmUtOTAyOGE5M2U0YzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EA6+ArSJjgHy23NJiwOmozZnZG8P52IgwZI
71y7GuiD6jK/GB3of5HoqKkUUiF0CyBWqA3T7DROtBwjUCGJZAiHOoxnGFkGQp/A
p8UNgM0xQard43r7rLFHOcyI1wW53/7gg4I8JXvzjlRRZnW4OXn0cmD9Jy12Y0K7
YAs6RgMmITolZBFpSgzovekknYBiXQ/oaXExAX27mV2s97U6llFvD6PtLHwgVwfd
7XGkfACJKvDmLeGTjf8FQH1VHRsiYb1GJLr2J/4WQbqRCHc3su7LNzoqNP8ygQxj
0e/WxDqbGippTROn8evM2XmQ+duks9qH6zMwdDJad+ZLZUo/VwIDAQABo4IDszCC
A68wHQYDVR0OBBYEFOwGfZPaEBh6sjeZBjyQA8/kP7TOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMTcyZTg3YWQtNDhhZS0z
YjE4LWE3YjYtMjQwYjc4ZGZkMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMH0GCCsGAQUFBwEHAQH/BG4wbDBQBAIAATBKAwQAMgdwAwQA
MgdyAwQCMgeYAwQBMgfGAwQBMgfKAwQBMgfUAwQCMgfgAwQAQlp3AwQAxhBiMAwD
BAHGEGYDBAHGEGgDBADGEHowGAQCAAIwEgMHACABSfDQBwMHACABSfDQozBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQAQZyPJoZfKB6MbD0NI1mCXSWqAQUj2VqBdfMPoPQ9d4iBSYgRh3mVxIM4B
kRzTb0K2PWZ5A/AdRlSmuVXJmgxnjarlOVQtjT6P9q7+FMn1Lhrqxq5F39/esFdW
T5ECa+/Ldf6mgptcUrKouhJIrsmTOzF376GHIkqZL0LDCRdF1GwXpbzbQB/M9WpF
gRyQ7GMq1l3X3gGan7qCPjE2JFTuFE29cnKNyd+61E3kcTzf0FdYuRuOOaeJUs6J
8yqiqXg8MQrsnWT3gz9LlsUxPwLbqq5qEUGNgBHL9xkoQ5iHN3I+X47bSULPFNvN
bt1we1IeIqrXoaNrZGbFe7JGrp2i
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:51:51 2025 by rpki-client