Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b92c4e6e-9e26-371c-b3d0-c793a92f2c64.roa
File:                     b92c4e6e-9e26-371c-b3d0-c793a92f2c64.roa (raw, json)
Hash identifier:          gHz2Y1xb5A5B1XrE2TMgA/ZW+I1/82nPzfIYRjYrYNY=
Subject key identifier:   C2:7C:57:C2:7D:01:7E:53:BF:90:FB:47:8B:10:3C:47:5C:8B:CC:75
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFEBD5ACB6D867F3808280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b92c4e6e-9e26-371c-b3d0-c793a92f2c64.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     36103
IP address blocks:        74.82.10.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:eb:d5:ac:b6:d8:67:f3:80:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=d98a8d72-2fb6-4b5e-8cdd-1e2e0bd8afc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e6:77:78:5b:40:a0:60:69:89:e1:8c:2c:94:
                    47:8d:cb:8b:4f:ec:7c:f9:04:03:57:41:89:34:af:
                    bf:d8:f3:50:be:70:10:c4:36:da:4b:f1:1e:0b:af:
                    99:b3:2b:df:36:54:0c:20:32:cc:f2:e6:78:b0:00:
                    8b:30:e4:06:c2:19:17:f3:bd:89:13:b5:77:dd:b2:
                    da:17:a7:4f:b0:2f:80:c5:8e:4f:f3:a6:a8:09:29:
                    f4:8b:86:e5:3f:0b:fe:f3:3d:51:43:26:59:af:0b:
                    77:5d:c6:eb:8f:56:e1:1c:aa:69:2b:f7:9e:02:d8:
                    ba:5b:1d:56:d6:de:15:35:0e:91:6b:36:47:63:96:
                    f2:61:4b:48:14:58:bb:eb:40:b0:c0:10:e9:f1:60:
                    c3:38:05:77:62:04:cf:32:30:f1:86:24:e9:6e:b7:
                    8c:fa:8e:b8:16:94:92:3f:e0:c7:d2:69:c0:ff:1c:
                    80:6f:e7:47:54:04:9d:b4:c7:1a:3a:8c:94:b4:01:
                    f2:68:69:10:95:c2:e7:29:54:e8:4a:00:15:f6:e6:
                    fc:ad:29:ae:0f:44:6d:79:38:79:e9:74:59:3f:20:
                    f3:cd:d4:e3:01:74:84:bd:13:81:12:0e:b6:e1:e5:
                    af:1e:53:68:4b:3f:e1:da:a4:0c:89:48:25:c5:fb:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:57:C2:7D:01:7E:53:BF:90:FB:47:8B:10:3C:47:5C:8B:CC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b92c4e6e-9e26-371c-b3d0-c793a92f2c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f7:34:ca:dc:e6:b7:33:93:19:49:22:95:94:0f:d1:7a:d2:
         18:2b:ba:05:38:18:a0:ca:db:6c:ac:d0:c1:1b:df:39:9d:18:
         9b:d1:5b:5f:a5:c4:ee:5f:48:28:76:8d:99:b2:7e:c6:ec:eb:
         93:12:0e:cd:bd:5e:f4:0b:84:fe:86:89:7e:52:68:1c:f1:be:
         06:9d:97:a8:ef:74:74:a5:de:10:e4:29:e0:ed:0b:a7:d6:d5:
         ae:cf:fb:50:51:af:65:36:76:3b:01:0c:43:ed:38:6d:53:9b:
         e7:5d:d3:72:c3:4a:b4:46:3a:8f:92:93:6a:c6:3b:37:8b:38:
         fc:6e:07:5d:dc:27:f3:c5:72:7c:35:b1:d4:b7:6b:96:d6:9d:
         f3:2d:01:6e:b2:c6:8a:65:3e:5b:ec:65:9d:b4:03:f5:7f:fc:
         de:b0:cc:a7:b9:79:ea:e3:ec:76:4b:5f:c8:87:66:f4:81:4e:
         e2:14:a2:1b:20:df:80:03:a0:b5:e9:c2:78:5a:4e:c4:af:5e:
         f0:dd:98:06:6a:56:fa:1b:2e:f2:4b:fa:0a:6f:a3:5e:7e:3f:
         2e:2a:d5:c4:c0:05:d6:43:f2:a5:c8:d1:a1:5e:1b:8e:85:e9:
         83:3f:64:f5:da:29:2b:49:75:2c:05:9b:91:6f:7b:4d:06:f8:
         a0:d2:f1:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz+vVrLbYZ/OAgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZDk4YThkNzItMmZiNi00YjVlLThjZGQtMWUyZTBiZDhhZmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOZ3eFtAoGBpieGMLJRHjcuLT+x8+QQDV0GJ
NK+/2PNQvnAQxDbaS/EeC6+ZsyvfNlQMIDLM8uZ4sACLMOQGwhkX872JE7V33bLa
F6dPsC+AxY5P86aoCSn0i4blPwv+8z1RQyZZrwt3Xcbrj1bhHKppK/eeAti6Wx1W
1t4VNQ6RazZHY5byYUtIFFi760CwwBDp8WDDOAV3YgTPMjDxhiTpbreM+o64FpSS
P+DH0mnA/xyAb+dHVASdtMcaOoyUtAHyaGkQlcLnKVToSgAV9ub8rSmuD0RteTh5
6XRZPyDzzdTjAXSEvROBEg624eWvHlNoSz/h2qQMiUglxfuG4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJ8V8J9AX5Tv5D7R4sQPEdci8x1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjkyYzRlNmUtOWUyNi0z
NzFjLWIzZDAtYzc5M2E5MmYyYzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlIKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJr3NMrc5rczkxlJIpWUD9F60hgrugU4GKDK22ys0MEb3zmdGJvRW1+l
xO5fSCh2jZmyfsbs65MSDs29XvQLhP6GiX5SaBzxvgadl6jvdHSl3hDkKeDtC6fW
1a7P+1BRr2U2djsBDEPtOG1Tm+dd03LDSrRGOo+Sk2rGOzeLOPxuB13cJ/PFcnw1
sdS3a5bWnfMtAW6yxoplPlvsZZ20A/V//N6wzKe5eerj7HZLX8iHZvSBTuIUohsg
34ADoLXpwnhaTsSvXvDdmAZqVvobLvJL+gpvo15+Py4q1cTABdZD8qXI0aFeG46F
6YM/ZPXaKStJdSwFm5Fve00G+KDS8Vo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:31:18 2025 by rpki-client