Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa
File:                     a4f11c39-9bea-3f49-a34f-41186754ac5f.roa (raw, json)
Hash identifier:          grTwhLhLJuv/itbEDhJuTQpkglKMUN+SDXWes6qm6Iw=
Subject key identifier:   7E:7A:08:B9:26:46:91:B7:16:F6:C7:D6:B0:CD:71:21:C6:E9:3E:01
Certificate issuer:       /CN=4e08a47f-8ddd-473c-bb7b-011963e78626
Certificate serial:       010D0C9F432858491D71798850E272057BD95518
Authority key identifier: 5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        207.66.105.0/24 maxlen: 24
                          207.66.106.0/24 maxlen: 24
                          207.66.107.0/24 maxlen: 24
                          207.66.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:79:88:50:e2:72:05:7b:d9:55:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e08a47f-8ddd-473c-bb7b-011963e78626
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=33ceeca7-5829-473a-8e82-a4b548e39ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:d6:8d:11:5c:1a:40:51:81:bc:e8:dd:73:
                    8a:fb:b4:8d:53:82:35:5e:d8:0c:7f:03:c4:78:2e:
                    17:1e:45:f6:d2:e9:e4:b9:39:32:8c:38:72:4c:c5:
                    e1:5e:54:3e:88:39:1b:a2:15:ee:4e:15:20:a9:b2:
                    b3:fb:55:42:33:fb:ed:05:2c:ea:be:ea:e6:2d:28:
                    ad:36:94:9f:59:52:90:5c:aa:2c:c8:fb:3d:d0:05:
                    e2:7f:91:82:6d:72:59:56:3a:52:be:fd:92:8e:18:
                    66:79:3c:2e:17:01:52:06:b8:71:9c:54:56:64:59:
                    75:1d:12:4e:52:8e:03:4d:5b:bf:8b:1d:12:b0:0d:
                    62:95:1d:1d:68:05:a6:c0:d9:46:c0:82:df:fc:1c:
                    95:6f:be:f6:ce:f5:0c:9f:33:04:90:b3:7b:e0:93:
                    6e:b0:0c:f1:b8:ab:89:7f:2d:fa:93:ed:90:4f:7a:
                    d9:93:b4:33:55:24:1c:13:a1:7b:87:09:95:e1:8c:
                    27:4e:84:31:26:98:b5:37:7c:ce:15:31:9b:92:97:
                    30:4b:fe:49:bb:9c:d2:70:38:f5:44:55:d4:58:06:
                    a3:8c:66:db:fa:31:8f:65:e2:9c:ab:9a:60:98:b8:
                    23:0b:fa:20:72:5c:26:b1:62:3f:1a:fd:be:de:27:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7A:08:B9:26:46:91:B7:16:F6:C7:D6:B0:CD:71:21:C6:E9:3E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.crl

            X509v3 Authority Key Identifier:
                keyid:5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.66.105.0-207.66.108.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c8:fc:71:84:11:40:d9:86:c9:54:e1:85:97:86:97:53:3b:
         63:89:97:7a:05:ed:87:5f:6d:25:02:e1:36:64:61:c8:98:8c:
         ad:0c:57:e8:29:36:3d:7b:7d:7a:8f:b0:2e:ca:25:a6:b2:67:
         07:f8:a9:ca:a1:5e:b1:b1:22:c1:2e:a6:2f:78:c5:45:57:a5:
         03:29:65:3c:3c:ed:aa:c5:59:d0:1a:b2:ce:1a:08:d7:b9:f5:
         15:69:1d:30:d5:1b:60:65:d1:4a:99:62:29:30:09:3d:59:c2:
         98:22:ab:88:85:0a:3d:e4:fe:fb:26:99:45:eb:68:15:f6:42:
         b6:e1:a8:ec:10:a3:87:4d:1d:26:8c:91:9b:76:fb:f0:96:ba:
         82:60:81:80:c5:22:10:41:f4:e3:bd:33:c6:d8:21:8a:fe:11:
         6f:b2:58:96:af:b4:64:fe:71:44:b3:b3:fa:78:71:21:61:2d:
         1d:ad:ab:54:52:5b:69:31:3b:67:9c:af:3d:68:18:b1:5b:e4:
         c1:89:55:da:86:93:88:92:4d:49:33:a4:77:c7:46:06:ff:66:
         4c:c8:d8:41:bf:9c:fc:98:09:4b:79:e5:0e:92:3a:e8:c6:44:
         3b:10:6b:fd:b8:62:29:76:6b:2f:5e:d7:60:ad:38:ec:91:c4:
         68:e5:5d:e5
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkdcXmIUOJyBXvZVRgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwOGE0N2YtOGRkZC00NzNjLWJiN2ItMDExOTYzZTc4
NjI2MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
MzNjZWVjYTctNTgyOS00NzNhLThlODItYTRiNTQ4ZTM5ZWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklrWjRFcGkBRgbzo3XOK+7SNU4I1XtgMfwPE
eC4XHkX20unkuTkyjDhyTMXhXlQ+iDkbohXuThUgqbKz+1VCM/vtBSzqvurmLSit
NpSfWVKQXKosyPs90AXif5GCbXJZVjpSvv2SjhhmeTwuFwFSBrhxnFRWZFl1HRJO
Uo4DTVu/ix0SsA1ilR0daAWmwNlGwILf/ByVb772zvUMnzMEkLN74JNusAzxuKuJ
fy36k+2QT3rZk7QzVSQcE6F7hwmV4YwnToQxJpi1N3zOFTGbkpcwS/5Ju5zScDj1
RFXUWAajjGbb+jGPZeKcq5pgmLgjC/ogclwmsWI/Gv2+3ifgiQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFH56CLkmRpG3FvbH1rDNcSHG6T4BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTA4
YTQ3Zi04ZGRkLTQ3M2MtYmI3Yi0wMTE5NjNlNzg2MjYvYTRmMTFjMzktOWJlYS0z
ZjQ5LWEzNGYtNDExODY3NTRhYzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGUwOGE0N2YtOGRkZC00NzNjLWJi
N2ItMDExOTYzZTc4NjI2LzRlMDhhNDdmLThkZGQtNDczYy1iYjdiLTAxMTk2M2U3
ODYyNi5jcmwwHwYDVR0jBBgwFoAUWyuSHwqRGJNUefL47mqszOvm9mMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTA4YTQ3Zi04ZGRkLTQ3M2MtYmI3Yi0wMTE5
NjNlNzg2MjYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADPQmkD
BADPQmwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEARsj8cYQRQNmGyVThhZeGl1M7Y4mXegXth19tJQLhNmRh
yJiMrQxX6Ck2PXt9eo+wLsolprJnB/ipyqFesbEiwS6mL3jFRVelAyllPDztqsVZ
0BqyzhoI17n1FWkdMNUbYGXRSpliKTAJPVnCmCKriIUKPeT++yaZRetoFfZCtuGo
7BCjh00dJoyRm3b78Ja6gmCBgMUiEEH0470zxtghiv4Rb7JYlq+0ZP5xRLOz+nhx
IWEtHa2rVFJbaTE7Z5yvPWgYsVvkwYlV2oaTiJJNSTOkd8dGBv9mTMjYQb+c/JgJ
S3nlDpI66MZEOxBr/bhiKXZrL17XYK047JHEaOVd5Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:14 2025 by rpki-client