Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230352e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3230352e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          USgZdRb1V0tyNcdp5VN/A7QFRPL3G296dlBT16MheJA=
Subject key identifier:   E6:AD:44:FC:15:2A:91:D4:62:E3:0B:F0:6D:19:C2:D2:F1:D8:C3:24
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       46D58E7B36A999F9FFA2B23288C920AC3700AD84
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230352e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 25 Feb 2025 05:08:51 +0000
ROA not before:           Tue 25 Feb 2025 05:03:51 +0000
ROA not after:            Tue 24 Feb 2026 05:08:51 +0000
asID:                     5650
IP address blocks:        47.205.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d5:8e:7b:36:a9:99:f9:ff:a2:b2:32:88:c9:20:ac:37:00:ad:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb 25 05:03:51 2025 GMT
            Not After : Feb 24 05:08:51 2026 GMT
        Subject: CN=E6AD44FC152A91D462E30BF06D19C2D2F1D8C324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:27:1c:68:dc:4d:ce:4d:7e:1a:e0:4a:a5:
                    84:c3:93:c5:23:12:6e:36:a7:ce:9c:f8:a7:7c:e7:
                    88:58:67:38:2e:8a:f0:6c:42:1c:e3:a2:ca:96:c8:
                    84:58:59:df:1f:34:07:17:08:63:73:10:bd:e5:64:
                    ac:ba:40:18:98:bd:90:3a:29:0f:63:8c:54:a0:a7:
                    90:c6:a8:92:04:a1:8d:47:c2:ea:0d:c8:52:44:70:
                    bd:76:29:03:e9:00:ee:58:b7:79:43:f0:cc:ae:67:
                    0e:f4:3d:83:a5:1d:9c:f0:ac:d1:47:5c:30:14:67:
                    eb:c8:87:64:7b:83:b3:63:0c:a3:27:3e:11:5e:f7:
                    10:65:d5:27:7d:2e:f4:07:6a:d2:d5:e7:da:8f:19:
                    a2:cd:ba:72:24:1d:41:70:a2:fc:2a:73:85:68:77:
                    db:13:58:16:f3:e2:9f:52:c4:42:30:8b:a8:b5:22:
                    92:9c:13:04:9e:03:d3:22:4f:55:08:7d:f7:0a:7b:
                    9c:d7:a3:05:d4:82:e5:f3:e7:a6:59:17:0f:ca:73:
                    fd:d7:1d:e5:f9:6b:7e:72:d9:95:61:b2:e2:38:bb:
                    07:47:70:8b:97:4c:95:f7:56:71:73:46:ec:de:24:
                    f3:69:09:e2:69:ac:d5:66:a0:0c:60:c5:7d:7d:ed:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AD:44:FC:15:2A:91:D4:62:E3:0B:F0:6D:19:C2:D2:F1:D8:C3:24
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230352e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.205.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:59:2e:6d:25:bf:f4:7f:b2:27:37:34:f0:7f:c3:49:31:
         d6:0b:44:fd:cf:a6:6e:96:17:5e:70:8c:40:2d:d4:1b:62:3f:
         3e:b2:6b:d3:22:5c:6b:c6:39:aa:e9:ce:28:0d:c1:9b:58:cb:
         f9:51:b3:96:0c:67:8a:97:29:e1:eb:c1:a9:05:8c:5c:48:a5:
         9d:ae:b0:7c:7e:d0:b7:7e:b4:13:82:24:d0:d5:db:97:4e:17:
         fe:a2:77:a4:dc:cd:d6:3d:fe:75:bc:0a:21:ac:5c:e6:5b:c4:
         96:6a:7b:8e:f6:c0:1d:4f:d1:f4:77:03:1e:43:2e:03:fd:2f:
         d0:7c:cd:c5:01:a7:b7:87:6f:6d:2d:f2:e8:5c:f8:dd:39:0b:
         60:7c:b0:cf:e6:2b:3f:5d:b5:a4:91:40:f0:06:a6:fb:9a:4f:
         d5:f3:fc:f8:56:f4:e3:3a:a9:dd:62:53:90:f7:3e:66:34:44:
         83:68:ae:a8:6f:38:c9:7a:70:ce:f4:9a:b2:98:32:3f:38:f8:
         57:6f:97:c7:ef:3a:8b:54:60:40:99:ae:d2:65:09:a1:75:7f:
         f8:c0:a0:72:50:4f:02:f3:16:c1:e0:a9:73:c4:b9:d1:8b:c6:
         fe:b9:7e:bc:56:1c:37:98:b8:a0:44:6c:70:7b:ba:bf:6f:eb:
         a0:56:f1:60
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIURtWOezapmfn/orIyiMkgrDcArYQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjUwMjI1MDUwMzUxWhcNMjYwMjI0MDUwODUx
WjAzMTEwLwYDVQQDEyhFNkFENDRGQzE1MkE5MUQ0NjJFMzBCRjA2RDE5QzJEMkYx
RDhDMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r4nHGjcTc5N
fhrgSqWEw5PFIxJuNqfOnPinfOeIWGc4LorwbEIc46LKlsiEWFnfHzQHFwhjcxC9
5WSsukAYmL2QOikPY4xUoKeQxqiSBKGNR8LqDchSRHC9dikD6QDuWLd5Q/DMrmcO
9D2DpR2c8KzRR1wwFGfryIdke4OzYwyjJz4RXvcQZdUnfS70B2rS1efajxmizbpy
JB1BcKL8KnOFaHfbE1gW8+KfUsRCMIuotSKSnBMEngPTIk9VCH33Cnuc16MF1ILl
8+emWRcPynP91x3l+Wt+ctmVYbLiOLsHR3CLl0yV91Zxc0bs3iTzaQniaazVZqAM
YMV9fe2s6QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOatRPwVKpHUYuML8G0ZwtLx
2MMkMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzQzNzJlMzIzMDM1MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL80wDQYJKoZIhvcNAQELBQADggEBACwA
WS5tJb/0f7InNzTwf8NJMdYLRP3Ppm6WF15wjEAt1BtiPz6ya9MiXGvGOarpzigN
wZtYy/lRs5YMZ4qXKeHrwakFjFxIpZ2usHx+0Ld+tBOCJNDV25dOF/6id6TczdY9
/nW8CiGsXOZbxJZqe472wB1P0fR3Ax5DLgP9L9B8zcUBp7eHb20t8uhc+N05C2B8
sM/mKz9dtaSRQPAGpvuaT9Xz/PhW9OM6qd1iU5D3PmY0RINorqhvOMl6cM70mrKY
Mj84+Fdvl8fvOotUYECZrtJlCaF1f/jAoHJQTwLzFsHgqXPEudGLxv65frxWHDeY
uKBEbHB7ur9v66BW8WA=
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:05 2025 by rpki-client