Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/7512f51c-8ed0-3f64-9b87-240da1ad829d.roa
File:                     7512f51c-8ed0-3f64-9b87-240da1ad829d.roa (raw, json)
Hash identifier:          gAPHtxtRynZGHy/MO15fvb8Bb4G16Mtz9xj7peX10r0=
Subject key identifier:   8E:C6:1F:F3:42:AC:20:BC:B5:71:70:FE:C9:98:39:53:54:C8:02:7B
Certificate issuer:       /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial:       010D0C9F432858483E1ABBA6BB273277E335F480
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/7512f51c-8ed0-3f64-9b87-240da1ad829d.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     18013
IP address blocks:        205.210.164.0/22 maxlen: 22
                          205.210.164.0/24 maxlen: 24
                          205.210.165.0/24 maxlen: 24
                          205.210.166.0/24 maxlen: 24
                          205.210.167.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:bb:a6:bb:27:32:77:e3:35:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=ff0fccc7-6a98-45fd-acb7-1b9c3c752493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:35:59:51:30:c5:71:1e:13:2f:04:55:14:b4:
                    c8:21:12:37:cf:b5:92:fb:ab:f8:fc:a6:9f:e7:c0:
                    5b:d1:e6:50:71:bc:7b:f1:81:17:ce:92:8b:76:5a:
                    e6:00:7e:f6:f0:f2:97:fe:f9:61:dc:5b:45:53:c7:
                    65:9e:5c:3e:fa:ea:c5:b6:00:4a:c8:4e:c1:6c:d7:
                    d5:4f:69:f4:59:2c:d2:7d:be:ae:57:42:bb:60:d2:
                    43:a9:70:64:17:4f:9b:ef:1d:8d:1d:94:f2:fa:5a:
                    a1:fd:59:0c:fe:d1:0a:bb:b7:31:20:3c:b2:4b:b6:
                    52:f7:8b:2b:18:b0:f3:c5:49:0c:f1:15:4b:4f:08:
                    dc:e0:2a:c9:b0:90:81:19:14:45:f0:e3:79:3b:f3:
                    b4:28:43:51:76:be:32:98:58:c8:8f:70:5f:45:4d:
                    91:fa:91:7a:04:19:83:a3:50:b4:c5:6c:39:90:76:
                    39:e2:ae:e3:64:c5:35:9d:43:4b:e5:fa:db:ad:a6:
                    89:3e:b3:e7:07:36:e3:6a:83:02:2a:09:cf:0c:01:
                    d5:c8:24:c6:9a:08:b5:6f:7e:67:17:f2:20:8a:e3:
                    fe:c6:f6:1c:55:92:0e:a7:22:ae:a1:59:45:0b:0a:
                    ad:31:8c:73:1a:c1:33:a5:4b:5f:ac:de:1d:56:43:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C6:1F:F3:42:AC:20:BC:B5:71:70:FE:C9:98:39:53:54:C8:02:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/7512f51c-8ed0-3f64-9b87-240da1ad829d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl

            X509v3 Authority Key Identifier:
                keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.210.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a5:3b:56:1b:19:b8:a8:74:53:5f:c8:c4:1c:71:58:f3:e2:
         5f:f7:55:40:52:b3:e0:9b:87:d5:70:1f:8f:37:c2:ca:58:db:
         1d:21:0c:15:0f:bb:83:c7:c3:e7:95:31:5a:f7:3b:92:63:f3:
         01:24:72:b5:f6:05:14:dc:26:df:03:b9:01:bd:bf:d1:98:0b:
         5f:bb:78:29:cb:5b:c4:d3:90:d7:60:47:13:b3:9d:23:fd:33:
         d4:74:9c:32:8e:a7:f0:70:6a:da:10:f9:1f:4b:27:27:52:7f:
         f4:d1:99:b8:90:ba:fa:bc:b7:ed:01:9f:b4:03:c1:28:e1:3f:
         1a:e5:b9:f5:27:84:cf:27:26:f5:c8:c8:e9:ba:b1:49:a9:c6:
         41:51:82:37:af:33:c2:7d:8f:33:8e:4b:d0:f3:3f:eb:2c:c7:
         30:ec:9f:7d:1b:79:5a:3c:a8:88:7e:10:be:e7:32:2e:b8:bd:
         cd:ec:8a:34:04:13:08:d3:9b:d4:c3:46:3c:f5:44:00:ec:d2:
         09:de:d7:af:68:6a:6b:e9:86:69:9c:3c:be:60:70:37:d1:2e:
         d5:2a:b5:2f:e9:1b:fa:42:1d:13:e5:12:d3:5a:fb:83:89:03:
         9d:09:c0:87:97:f7:47:c5:94:bf:72:65:30:36:8c:d4:b9:c3:
         93:b2:a8:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Grumuycyd+M19IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM4MzFmNmItNzFhNi00NmJiLTlmNjQtMmRhODBjY2My
NDRjMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
ZmYwZmNjYzctNmE5OC00NWZkLWFjYjctMWI5YzNjNzUyNDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zVZUTDFcR4TLwRVFLTIIRI3z7WS+6v4/Kaf
58Bb0eZQcbx78YEXzpKLdlrmAH728PKX/vlh3FtFU8dlnlw++urFtgBKyE7BbNfV
T2n0WSzSfb6uV0K7YNJDqXBkF0+b7x2NHZTy+lqh/VkM/tEKu7cxIDyyS7ZS94sr
GLDzxUkM8RVLTwjc4CrJsJCBGRRF8ON5O/O0KENRdr4ymFjIj3BfRU2R+pF6BBmD
o1C0xWw5kHY54q7jZMU1nUNL5frbraaJPrPnBzbjaoMCKgnPDAHVyCTGmgi1b35n
F/IgiuP+xvYcVZIOpyKuoVlFCwqtMYxzGsEzpUtfrN4dVkOKRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7GH/NCrCC8tXFw/smYOVNUyAJ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iYzgz
MWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNjYzI0NGMvNzUxMmY1MWMtOGVkMC0z
ZjY0LTliODctMjQwZGExYWQ4MjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmM4MzFmNmItNzFhNi00NmJiLTlm
NjQtMmRhODBjY2MyNDRjL2JjODMxZjZiLTcxYTYtNDZiYi05ZjY0LTJkYTgwY2Nj
MjQ0Yy5jcmwwHwYDVR0jBBgwFoAUqVBGpVp+uw/OBiK6pK8RWfI+zSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iYzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4
MGNjYzI0NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzdKkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKClO1YbGbiodFNfyMQccVjz4l/3VUBSs+Cbh9VwH483wspY2x0hDBUP
u4PHw+eVMVr3O5Jj8wEkcrX2BRTcJt8DuQG9v9GYC1+7eCnLW8TTkNdgRxOznSP9
M9R0nDKOp/BwatoQ+R9LJydSf/TRmbiQuvq8t+0Bn7QDwSjhPxrlufUnhM8nJvXI
yOm6sUmpxkFRgjevM8J9jzOOS9DzP+ssxzDsn30beVo8qIh+EL7nMi64vc3sijQE
EwjTm9TDRjz1RADs0gne169oamvphmmcPL5gcDfRLtUqtS/pG/pCHRPlEtNa+4OJ
A50JwIeX90fFlL9yZTA2jNS5w5OyqPc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:44 2025 by rpki-client