Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8e88cc0-5a37-3edf-beef-3ef1c61495b7.roa
File:                     d8e88cc0-5a37-3edf-beef-3ef1c61495b7.roa (raw, json)
Hash identifier:          NtDtsyIMdRTj8rsc9Pzw+i24qYOYJiixe4v/AuuSwWk=
Subject key identifier:   1D:E3:D1:FB:AC:AE:C3:8E:77:C5:5F:13:3E:58:B1:25:33:00:7F:80
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285848388550A59762916545C1C540
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8e88cc0-5a37-3edf-beef-3ef1c61495b7.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        134.224.172.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:50:a5:97:62:91:65:45:c1:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=9ab08fa1-d5d7-456b-a075-143ebf5863d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:76:ea:31:56:fd:ab:dd:f4:bd:e7:65:5e:
                    0c:2b:d7:13:64:f1:8c:1b:79:63:ca:4c:b6:f3:9e:
                    46:4a:94:e0:e8:32:4b:9a:bf:fe:4f:34:8a:93:d2:
                    9f:cc:96:93:81:be:1d:58:e6:35:23:97:6d:21:4f:
                    15:d3:2e:7c:1b:98:2b:4e:ee:6a:60:88:1d:c5:b1:
                    ce:27:bc:c9:11:db:c8:3e:2d:c3:89:a1:0d:44:50:
                    a7:53:26:ac:ee:8a:35:a1:83:dd:db:cd:70:e6:e0:
                    64:47:72:c6:8e:80:ce:f7:39:c2:5f:b5:05:0f:e7:
                    19:f6:6b:98:02:da:83:82:88:70:70:53:38:11:9f:
                    39:77:b4:9b:3e:53:29:fb:47:24:6d:27:16:a4:f8:
                    df:1f:c1:4f:db:e1:4e:9b:4f:ce:77:fb:34:bf:51:
                    ae:a2:47:04:c1:17:42:8a:54:af:8a:ba:3b:3d:dd:
                    80:3e:8e:d5:f6:19:69:56:56:fd:23:1c:ea:4e:c7:
                    c5:9b:74:c9:49:a1:a9:9b:41:5f:27:a9:72:64:90:
                    f5:84:33:76:98:3a:44:3c:5e:8e:5a:69:4d:0e:30:
                    bc:34:ad:8d:86:b1:20:ae:cd:c5:39:1f:7e:ec:6a:
                    ad:7d:e6:e3:69:ac:c1:e1:1e:e2:07:75:d9:06:f7:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E3:D1:FB:AC:AE:C3:8E:77:C5:5F:13:3E:58:B1:25:33:00:7F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8e88cc0-5a37-3edf-beef-3ef1c61495b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:2a:f9:ca:da:82:31:33:d0:c0:d3:09:81:8e:54:fe:f3:b1:
         a3:84:83:41:fc:9e:f4:53:8f:34:f5:42:f9:02:c9:1c:c4:d0:
         5f:05:a5:6e:5a:06:be:4a:40:01:46:94:b0:bc:2f:22:77:a9:
         74:57:f4:23:05:9d:6d:ec:4c:d5:79:d6:03:1d:55:10:de:b7:
         99:29:84:e2:2f:8f:45:07:32:6c:35:05:78:84:9e:28:a0:d6:
         df:5f:f0:d8:b7:e7:99:5f:8b:d1:0f:c7:02:5b:53:b6:94:3c:
         02:8e:fb:84:6e:02:90:b3:1d:56:0f:cc:91:fc:5c:ec:46:58:
         c1:54:43:a1:50:1b:a9:ee:48:18:d3:1e:de:62:c7:0a:ef:69:
         18:a0:fd:b0:ac:74:60:d6:ac:2a:3a:44:0c:6c:e5:80:41:24:
         ad:1f:e8:d0:8a:c1:03:e0:5b:2e:04:d1:d3:76:d0:d2:21:4b:
         87:4d:d6:ae:c9:0e:29:18:1f:4f:15:e8:1b:12:39:77:b3:c2:
         de:cd:5e:3d:a7:10:b3:3c:e9:1b:8f:04:b2:5e:e2:d7:d4:56:
         41:1a:7b:98:39:9d:b7:e3:6b:ec:d9:9f:a8:35:e6:7c:04:28:
         8a:f9:dd:15:63:56:f7:90:72:5b:8e:5f:f6:b8:46:f9:12:3f:
         20:3a:6c:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hVCll2KRZUXBxUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
OWFiMDhmYTEtZDVkNy00NTZiLWEwNzUtMTQzZWJmNTg2M2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5t26jFW/avd9L3nZV4MK9cTZPGMG3ljyky2
855GSpTg6DJLmr/+TzSKk9KfzJaTgb4dWOY1I5dtIU8V0y58G5grTu5qYIgdxbHO
J7zJEdvIPi3DiaENRFCnUyas7oo1oYPd281w5uBkR3LGjoDO9znCX7UFD+cZ9muY
AtqDgohwcFM4EZ85d7SbPlMp+0ckbScWpPjfH8FP2+FOm0/Od/s0v1GuokcEwRdC
ilSviro7Pd2APo7V9hlpVlb9IxzqTsfFm3TJSaGpm0FfJ6lyZJD1hDN2mDpEPF6O
WmlNDjC8NK2NhrEgrs3FOR9+7GqtfebjaazB4R7iB3XZBvfPEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3j0fusrsOOd8VfEz5YsSUzAH+AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDhlODhjYzAtNWEzNy0z
ZWRmLWJlZWYtM2VmMWM2MTQ5NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhuCsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsq+cragjEz0MDTCYGOVP7zsaOEg0H8nvRTjzT1QvkCyRzE0F8FpW5a
Br5KQAFGlLC8LyJ3qXRX9CMFnW3sTNV51gMdVRDet5kphOIvj0UHMmw1BXiEniig
1t9f8Ni355lfi9EPxwJbU7aUPAKO+4RuApCzHVYPzJH8XOxGWMFUQ6FQG6nuSBjT
Ht5ixwrvaRig/bCsdGDWrCo6RAxs5YBBJK0f6NCKwQPgWy4E0dN20NIhS4dN1q7J
DikYH08V6BsSOXezwt7NXj2nELM86RuPBLJe4tfUVkEae5g5nbfja+zZn6g15nwE
KIr53RVjVveQcluOX/a4RvkSPyA6bC4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:16 2025 by rpki-client