Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/19f0a052-a370-384b-bef3-d43b6929507b.roa
File:                     19f0a052-a370-384b-bef3-d43b6929507b.roa (raw, json)
Hash identifier:          /52SDwwCaBf9rxkYvBQ5BrxMfwNNtA86tMHoCtX6ZC4=
Subject key identifier:   7E:BF:91:10:30:AA:76:3D:6C:21:39:ED:81:65:37:E9:3E:EF:F1:38
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285846D5DA919CCE4F69B740B7CF00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/19f0a052-a370-384b-bef3-d43b6929507b.roa
Signing time:             Sun 11 Aug 2024 01:00:28 +0000
ROA not before:           Sun 11 Aug 2024 01:00:28 +0000
ROA not after:            Sat 09 Nov 2024 02:00:28 +0000
asID:                     5624
IP address blocks:        20.133.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d5:da:91:9c:ce:4f:69:b7:40:b7:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug 11 01:00:28 2024 GMT
            Not After : Nov  9 02:00:28 2024 GMT
        Subject: CN=6dffc844-3095-490a-bea5-c9d4623f3a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:2e:6e:47:c5:71:15:2c:e2:e3:64:a7:46:
                    69:a7:98:46:78:33:53:4a:e5:01:fe:6e:75:92:d5:
                    8e:f8:57:cc:df:be:5b:7e:8d:28:dd:07:1d:d4:f9:
                    9f:c0:e7:ac:82:f2:e1:f3:fe:10:c0:65:40:27:67:
                    d8:e6:2d:93:67:69:78:20:41:0c:96:4d:cd:b2:9d:
                    e3:a0:b3:32:a7:92:08:b3:b9:fd:2a:c8:f4:75:2c:
                    aa:42:7a:b6:fc:36:2d:35:9e:9a:a0:7e:62:84:a3:
                    a9:e2:70:74:5c:c1:75:3c:6a:c9:50:29:bc:48:54:
                    d7:ba:87:9f:11:92:8b:25:8b:c6:c2:7e:45:ef:19:
                    17:c4:da:a5:c7:b9:a8:7b:69:d2:8c:b4:21:fb:d4:
                    b1:37:4e:5b:3b:64:6f:de:63:65:9b:e7:86:56:c8:
                    48:9c:b6:27:0e:d6:9f:0d:2a:55:77:cd:1b:d8:c0:
                    6c:23:3b:ed:33:7e:9c:bf:86:f1:b5:ad:56:20:ea:
                    11:1f:21:d2:fd:c2:26:d4:dd:4c:f2:90:8f:ee:06:
                    a6:c8:46:13:e3:65:e0:72:ef:d5:23:76:90:13:70:
                    5e:49:95:51:11:47:e7:70:94:ee:c3:0d:a5:23:72:
                    19:0c:c5:64:ff:e3:91:e8:73:a8:42:78:24:38:6b:
                    80:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BF:91:10:30:AA:76:3D:6C:21:39:ED:81:65:37:E9:3E:EF:F1:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/19f0a052-a370-384b-bef3-d43b6929507b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.133.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:62:c8:99:e0:99:9c:e8:e5:09:e1:15:53:7e:f9:0a:01:
         a0:c3:5a:7b:21:e9:94:1a:9b:3c:de:0e:43:b1:93:a4:a6:66:
         53:9d:20:39:64:f0:55:f5:d1:27:89:56:cd:aa:33:6a:5a:3a:
         89:c5:9c:b9:34:6d:84:d4:de:e1:4b:ff:39:f9:d6:47:4b:98:
         b5:46:11:26:c3:42:9e:f5:78:f7:c6:9f:62:d3:b4:8e:19:3b:
         47:a9:59:95:c7:36:76:db:32:97:7e:c9:61:4b:6e:ed:de:eb:
         92:98:b2:db:64:9d:b9:b4:e3:f7:69:c6:89:95:f7:6a:e8:51:
         26:bb:75:5a:71:e7:08:0f:ea:ab:5b:07:55:a0:78:ca:ce:46:
         93:eb:c6:a7:0f:05:d3:14:69:02:70:17:18:18:5c:bc:cd:83:
         79:ea:c5:5c:51:a3:7d:9f:b2:94:65:af:9e:5f:06:a8:b5:47:
         65:de:d6:34:cd:c2:c2:5a:1f:61:6a:7e:96:47:91:02:85:fe:
         0f:2f:dc:20:62:c2:0e:07:c1:67:63:0a:d0:cc:f4:d3:a6:f6:
         e0:5a:c0:08:10:29:45:18:80:0c:fb:bf:63:6f:d9:5e:ce:2d:
         1e:56:22:71:ff:b6:6b:5a:4a:6c:02:c9:59:3d:7a:21:ae:2a:
         86:56:3a:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbV2pGczk9pt0C3zwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI0MDgxMTAxMDAyOFoXDTI0MTEwOTAyMDAyOFowLzEtMCsGA1UEAxMk
NmRmZmM4NDQtMzA5NS00OTBhLWJlYTUtYzlkNDYyM2YzYTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9cubkfFcRUs4uNkp0Zpp5hGeDNTSuUB/m51
ktWO+FfM375bfo0o3Qcd1PmfwOesgvLh8/4QwGVAJ2fY5i2TZ2l4IEEMlk3Nsp3j
oLMyp5IIs7n9Ksj0dSyqQnq2/DYtNZ6aoH5ihKOp4nB0XMF1PGrJUCm8SFTXuoef
EZKLJYvGwn5F7xkXxNqlx7moe2nSjLQh+9SxN05bO2Rv3mNlm+eGVshInLYnDtaf
DSpVd80b2MBsIzvtM36cv4bxta1WIOoRHyHS/cIm1N1M8pCP7gamyEYT42Xgcu/V
I3aQE3BeSZVREUfncJTuww2lI3IZDMVk/+OR6HOoQngkOGuAdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH6/kRAwqnY9bCE57YFlN+k+7/E4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTlmMGEwNTItYTM3MC0z
ODRiLWJlZjMtZDQzYjY5Mjk1MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5DYsiZ4Jmc6OUJ4RVTfvkKAaDDWnsh6ZQamzzeDkOxk6SmZlOdIDlk
8FX10SeJVs2qM2paOonFnLk0bYTU3uFL/zn51kdLmLVGESbDQp71ePfGn2LTtI4Z
O0epWZXHNnbbMpd+yWFLbu3e65KYsttknbm04/dpxomV92roUSa7dVpx5wgP6qtb
B1WgeMrORpPrxqcPBdMUaQJwFxgYXLzNg3nqxVxRo32fspRlr55fBqi1R2Xe1jTN
wsJaH2FqfpZHkQKF/g8v3CBiwg4HwWdjCtDM9NOm9uBawAgQKUUYgAz7v2Nv2V7O
LR5WInH/tmtaSmwCyVk9eiGuKoZWOnA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:26 2025 by rpki-client