Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/4/3139322e36372e33352e302f32342d3332203d3e203437323732.roa
File:                     3139322e36372e33352e302f32342d3332203d3e203437323732.roa (raw, json)
Hash identifier:          xWrWCkDr72IRUQlWgw7QFhACBwIXTv2q1Irl2Pj12CM=
Subject key identifier:   5F:93:1F:43:C3:75:76:A2:F5:F1:68:AA:46:31:E6:03:1A:7F:6D:74
Certificate issuer:       /CN=9D6E0739B2B66F47B0EE2A1A761646ADE811C805
Certificate serial:       2C194EB8604F2D54BE64A5E9336DF8762AE27671
Authority key identifier: 9D:6E:07:39:B2:B6:6F:47:B0:EE:2A:1A:76:16:46:AD:E8:11:C8:05
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/9D6E0739B2B66F47B0EE2A1A761646ADE811C805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/4/3139322e36372e33352e302f32342d3332203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:33:03 +0000
ROA not before:           Wed 02 Jul 2025 19:28:03 +0000
ROA not after:            Wed 01 Jul 2026 19:33:03 +0000
asID:                     47272
IP address blocks:        192.67.35.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:19:4e:b8:60:4f:2d:54:be:64:a5:e9:33:6d:f8:76:2a:e2:76:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D6E0739B2B66F47B0EE2A1A761646ADE811C805
        Validity
            Not Before: Jul  2 19:28:03 2025 GMT
            Not After : Jul  1 19:33:03 2026 GMT
        Subject: CN=5F931F43C37576A2F5F168AA4631E6031A7F6D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:41:38:95:79:4b:4d:ba:7d:14:38:8b:b6:
                    56:78:d3:de:8f:c6:e1:e5:2f:03:7d:66:bf:4c:2c:
                    99:14:0f:05:dd:f1:3b:29:d9:b7:ff:39:d5:23:2d:
                    18:bd:c6:88:8c:f8:08:6d:c2:47:47:0e:4c:62:40:
                    b3:80:65:01:e8:a4:c9:20:13:55:e6:a4:40:69:48:
                    d1:18:14:5b:2d:88:06:be:e4:5a:a3:11:7c:a9:3e:
                    c0:32:ab:b8:61:b7:e4:1b:fe:19:b3:6c:4e:05:47:
                    06:39:4b:4e:19:9e:f2:7f:33:87:d4:b3:9c:e8:45:
                    e5:7a:52:1c:94:92:fb:e4:23:08:34:11:b5:58:a0:
                    7c:d9:49:e2:10:35:dd:67:cf:ab:ea:09:6d:91:c7:
                    e6:2a:45:43:35:67:4e:34:96:b3:c2:3a:8d:a1:f3:
                    97:35:52:fa:b3:f7:d9:d0:09:f9:8d:1c:96:31:12:
                    85:45:1b:33:e1:80:9f:a7:dc:42:71:2b:02:b5:20:
                    d4:a9:d3:a0:18:90:ab:95:a5:3c:58:ad:5e:ed:cd:
                    75:c6:83:d9:68:7c:30:bd:a9:ee:16:92:9e:f7:65:
                    51:5c:64:c3:c2:2f:e7:0e:08:e4:f0:be:c4:5b:e6:
                    c0:f5:b0:ea:99:8d:8a:81:92:ab:93:61:72:5d:75:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:1F:43:C3:75:76:A2:F5:F1:68:AA:46:31:E6:03:1A:7F:6D:74
            X509v3 Authority Key Identifier:
                keyid:9D:6E:07:39:B2:B6:6F:47:B0:EE:2A:1A:76:16:46:AD:E8:11:C8:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/4/9D6E0739B2B66F47B0EE2A1A761646ADE811C805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/9D6E0739B2B66F47B0EE2A1A761646ADE811C805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/4/3139322e36372e33352e302f32342d3332203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:cb:36:ab:40:c7:37:cb:bb:c0:f5:cb:2a:00:c4:0d:af:87:
         69:7d:44:24:94:42:b9:87:a4:b9:9c:16:0b:1a:a3:3d:96:54:
         a3:e7:9d:67:64:42:59:08:b8:8b:98:27:43:18:8c:63:06:4e:
         aa:03:1b:48:5c:df:7c:54:57:21:4c:a1:78:48:af:00:fe:b8:
         59:43:7f:5d:3e:2e:f8:47:de:29:1b:e8:35:22:bf:40:e9:25:
         88:50:f0:bd:81:a1:3f:b0:40:3e:9a:69:34:46:2e:84:51:55:
         b5:59:e9:1a:b1:09:28:72:6f:3b:64:1b:a7:93:35:8b:b9:2d:
         e9:10:b0:7b:83:f8:b7:26:dd:fa:05:4c:a4:2d:20:66:77:99:
         84:2a:bb:2b:cd:9c:88:b8:77:c7:e2:5d:b1:fa:34:d1:20:7b:
         39:c8:0d:d1:bf:fc:88:c7:bb:07:8f:08:29:be:92:4c:5a:e5:
         2a:e1:69:8b:9b:d9:30:47:84:15:e2:0c:09:8e:a0:17:6d:e4:
         bc:d3:72:4c:6e:ee:56:e7:3b:98:5e:71:ae:73:99:7e:1c:63:
         5c:c0:77:e8:b8:dd:bb:7e:31:a8:9c:f0:c2:6d:6d:43:ad:b2:
         ea:9e:90:cb:dd:13:9a:70:08:a5:de:89:0d:ac:db:ec:68:d3:
         16:63:f3:57
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIULBlOuGBPLVS+ZKXpM234diridnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ2RTA3MzlCMkI2NkY0N0IwRUUyQTFBNzYxNjQ2QURF
ODExQzgwNTAeFw0yNTA3MDIxOTI4MDNaFw0yNjA3MDExOTMzMDNaMDMxMTAvBgNV
BAMTKDVGOTMxRjQzQzM3NTc2QTJGNUYxNjhBQTQ2MzFFNjAzMUE3RjZENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQ0E4lXlLTbp9FDiLtlZ4096P
xuHlLwN9Zr9MLJkUDwXd8Tsp2bf/OdUjLRi9xoiM+AhtwkdHDkxiQLOAZQHopMkg
E1XmpEBpSNEYFFstiAa+5FqjEXypPsAyq7hht+Qb/hmzbE4FRwY5S04ZnvJ/M4fU
s5zoReV6UhyUkvvkIwg0EbVYoHzZSeIQNd1nz6vqCW2Rx+YqRUM1Z040lrPCOo2h
85c1Uvqz99nQCfmNHJYxEoVFGzPhgJ+n3EJxKwK1INSp06AYkKuVpTxYrV7tzXXG
g9lofDC9qe4Wkp73ZVFcZMPCL+cOCOTwvsRb5sD1sOqZjYqBkquTYXJddSEnAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUX5MfQ8N1dqL18WiqRjHmAxp/bXQwHwYDVR0j
BBgwFoAUnW4HObK2b0ew7ioadhZGregRyAUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvNC85RDZFMDczOUIy
QjY2RjQ3QjBFRTJBMUE3NjE2NDZBREU4MTFDODA1LmNybDCBiQYIKwYBBQUHAQEE
fTB7MHkGCCsGAQUFBzAChm1yc3luYzovL2tyaWxsLmFjY3VyaXN0ZWNobm9sb2dp
ZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzlENkUwNzM5QjJCNjZG
NDdCMEVFMkExQTc2MTY0NkFERTgxMUM4MDUuY2VyMIGgBggrBgEFBQcBCwSBkzCB
kDCBjQYIKwYBBQUHMAuGgYByc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9z
aXRvcnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvNC8zMTM5MzIy
ZTM2MzcyZTMzMzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNDM3MzIzNzMyLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwEMjMA0GCSqGSIb3DQEBCwUAA4IBAQAcyzarQMc3y7vA9csqAMQN
r4dpfUQklEK5h6S5nBYLGqM9llSj551nZEJZCLiLmCdDGIxjBk6qAxtIXN98VFch
TKF4SK8A/rhZQ39dPi74R94pG+g1Ir9A6SWIUPC9gaE/sEA+mmk0Ri6EUVW1Weka
sQkocm87ZBunkzWLuS3pELB7g/i3Jt36BUykLSBmd5mEKrsrzZyIuHfH4l2x+jTR
IHs5yA3Rv/yIx7sHjwgpvpJMWuUq4WmLm9kwR4QV4gwJjqAXbeS803JMbu5W5zuY
XnGuc5l+HGNcwHfouN27fjGonPDCbW1DrbLqnpDL3ROacAil3okNrNvsaNMWY/NX
-----END CERTIFICATE-----
Generated at Thu Jul 3 08:30:13 2025 by rpki-client