Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1439153d-c93d-3515-adae-1d4468d668f3.roa
File:                     1439153d-c93d-3515-adae-1d4468d668f3.roa (raw, json)
Hash identifier:          ncuNOQC7RMqS58/+qyxPo/jujJ724mgteuKMfCTE594=
Subject key identifier:   03:AE:A3:A8:EF:E9:6E:44:2B:DE:B3:0D:8D:2D:F1:96:B6:46:37:B7
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F432858489FD09CA27941D93553DD9B80
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1439153d-c93d-3515-adae-1d4468d668f3.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     2734
IP address blocks:        208.64.254.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:9c:a2:79:41:d9:35:53:dd:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=aab62b3f-fc2b-4d4b-a978-4e7180793cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:28:5e:0c:45:99:10:ce:59:93:91:77:c8:b5:
                    63:e0:ce:76:18:af:0a:fa:92:c7:71:c5:56:83:51:
                    13:cb:03:88:3a:f9:e6:8a:23:0a:bc:6f:9d:f8:8c:
                    17:cb:14:8e:bb:22:3d:c3:2a:bc:f7:02:57:5a:cb:
                    22:17:6c:31:98:df:9a:11:09:8f:a8:44:45:97:78:
                    e7:3d:ee:b0:9d:91:99:dc:f4:ec:b7:09:99:a8:66:
                    ef:1a:d2:8b:6f:25:10:20:32:6f:c7:33:a0:36:36:
                    97:77:c3:9f:5e:18:20:84:44:20:ef:41:60:e2:e2:
                    2b:74:58:fb:32:1e:65:05:99:81:1d:7e:53:ee:c3:
                    90:2f:49:86:b4:9e:02:56:0b:83:97:7d:88:c3:37:
                    88:50:0e:86:c4:c3:7d:0f:f8:f8:c6:99:4e:a6:8a:
                    19:85:08:2b:8c:9d:e5:5e:86:5c:52:1c:86:d8:27:
                    99:9e:0a:47:5c:a7:f5:2d:6b:d0:4d:14:90:cf:b2:
                    f1:1a:19:4c:43:9a:5b:09:37:62:9e:54:c9:8a:16:
                    d9:b7:d0:12:4e:b9:ff:0e:93:19:bd:c8:63:33:6d:
                    de:a7:83:fe:62:39:d8:6b:f5:3d:02:50:16:29:65:
                    83:8c:f1:83:f8:e2:1c:2f:44:f4:b0:cf:2c:1e:d4:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AE:A3:A8:EF:E9:6E:44:2B:DE:B3:0D:8D:2D:F1:96:B6:46:37:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1439153d-c93d-3515-adae-1d4468d668f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:03:a0:21:4f:f1:01:3d:0b:a1:a5:8b:3b:13:50:e3:e4:bd:
         82:9c:a2:48:89:81:39:7b:88:56:4a:ef:4d:ac:59:4a:71:07:
         03:bf:5a:bf:6a:23:c7:14:ce:e3:76:98:e3:34:0c:22:f5:3d:
         56:a3:57:3b:cd:3b:5b:66:5f:fb:8a:af:57:ba:07:2b:7a:b2:
         81:c6:cb:87:67:7f:12:da:8a:3c:ad:47:d0:80:75:e9:19:81:
         c8:30:3d:1b:9e:02:2f:de:03:13:d5:48:26:32:a0:09:77:c7:
         f4:a1:e9:5f:cd:a0:70:5d:c9:e4:b2:a2:7a:11:e9:eb:13:b3:
         87:5b:98:8b:bd:31:52:2b:0b:e3:cd:09:0b:46:22:6f:17:27:
         74:03:c2:24:94:de:d6:45:2c:64:09:8b:38:a2:35:b2:c2:7d:
         ae:59:be:88:3b:e1:8e:76:75:4e:64:5a:05:39:37:2b:04:89:
         f4:b9:24:68:90:bc:f6:2a:a2:60:b1:ef:aa:8e:d9:d3:06:da:
         ac:6d:2c:84:a6:fa:d4:bf:b6:d3:8f:10:d2:94:f7:0e:3c:4c:
         8e:6c:e8:2e:cd:f9:c9:c6:b5:e8:cd:0c:78:c6:3f:c3:0e:f6:
         31:3b:43:99:1b:f9:01:bb:dd:32:e4:ae:99:b6:85:96:88:70:
         7c:60:ff:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0JyieUHZNVPdm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy
ODEyMB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk
YWFiNjJiM2YtZmMyYi00ZDRiLWE5NzgtNGU3MTgwNzkzY2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiheDEWZEM5Zk5F3yLVj4M52GK8K+pLHccVW
g1ETywOIOvnmiiMKvG+d+IwXyxSOuyI9wyq89wJXWssiF2wxmN+aEQmPqERFl3jn
Pe6wnZGZ3PTstwmZqGbvGtKLbyUQIDJvxzOgNjaXd8OfXhgghEQg70Fg4uIrdFj7
Mh5lBZmBHX5T7sOQL0mGtJ4CVguDl32IwzeIUA6GxMN9D/j4xplOpooZhQgrjJ3l
XoZcUhyG2CeZngpHXKf1LWvQTRSQz7LxGhlMQ5pbCTdinlTJihbZt9ASTrn/DpMZ
vchjM23ep4P+YjnYa/U9AlAWKWWDjPGD+OIcL0T0sM8sHtTVyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOuo6jv6W5EK96zDY0t8Za2Rje3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm
ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvMTQzOTE1M2QtYzkzZC0z
NTE1LWFkYWUtMWQ0NDY4ZDY2OGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx
NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0
MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm
MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ED+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGADoCFP8QE9C6GlizsTUOPkvYKcokiJgTl7iFZK702sWUpxBwO/Wr9q
I8cUzuN2mOM0DCL1PVajVzvNO1tmX/uKr1e6Byt6soHGy4dnfxLaijytR9CAdekZ
gcgwPRueAi/eAxPVSCYyoAl3x/Sh6V/NoHBdyeSyonoR6esTs4dbmIu9MVIrC+PN
CQtGIm8XJ3QDwiSU3tZFLGQJiziiNbLCfa5Zvog74Y52dU5kWgU5NysEifS5JGiQ
vPYqomCx76qO2dMG2qxtLISm+tS/ttOPENKU9w48TI5s6C7N+cnGtejNDHjGP8MO
9jE7Q5kb+QG73TLkrpm2hZaIcHxg/x4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:15:58 2025 by rpki-client