Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/019b90a4-6aa2-3d36-a99e-05351158f336.roa
File:                     019b90a4-6aa2-3d36-a99e-05351158f336.roa (raw, json)
Hash identifier:          tTd9gE1cNqXnL6qQnxdYOt2snuwvBSdrUKw7KcRzpig=
Subject key identifier:   B2:BD:44:4D:4E:D8:0E:CB:D4:7B:56:1E:28:AA:2D:CF:A9:40:2C:3B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B6951A360591442E726300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/019b90a4-6aa2-3d36-a99e-05351158f336.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     397168
IP address blocks:        206.47.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b6:95:1a:36:05:91:44:2e:72:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=73e598d2-abb8-4eb8-b292-92296095a210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:71:f2:3e:69:68:1d:60:1f:95:ee:30:e0:
                    be:94:52:30:aa:a8:83:7d:c2:f4:3f:5a:d3:54:d5:
                    82:d6:64:10:b1:e7:a6:56:6e:6e:ee:5a:73:96:93:
                    61:10:63:ac:19:89:9e:8b:a5:ad:1a:51:e4:25:df:
                    eb:61:f9:da:e4:36:75:cf:3e:81:1c:95:17:8b:fe:
                    00:bc:20:ad:cd:91:ad:90:29:20:3e:ef:af:79:d6:
                    29:26:4a:d1:c5:d6:4d:c9:bf:9f:7b:da:68:c1:1b:
                    b5:4e:46:44:89:19:cf:63:84:1a:ac:ff:a0:a7:f7:
                    30:8b:3e:9a:76:22:97:89:9d:51:55:c0:05:77:aa:
                    1f:c2:f4:a0:79:b2:a3:3c:bb:f0:68:a2:96:4d:77:
                    f9:45:0d:ca:68:82:13:88:b6:59:c5:fd:f5:d0:a8:
                    e2:4c:d9:a9:36:e8:43:8d:14:f7:ab:5d:de:47:d8:
                    57:de:a1:3a:36:48:9a:2d:c2:15:0a:11:44:4e:71:
                    6e:ab:fb:78:c2:c3:29:ab:e4:73:84:6b:b2:aa:63:
                    23:1c:f3:d4:28:54:73:4b:ca:cf:29:1f:ce:0a:e1:
                    2d:7a:80:0e:16:60:f0:a8:51:17:23:4c:16:be:2e:
                    bd:a2:b6:62:28:f6:72:92:17:a3:d0:dc:f4:83:ba:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BD:44:4D:4E:D8:0E:CB:D4:7B:56:1E:28:AA:2D:CF:A9:40:2C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/019b90a4-6aa2-3d36-a99e-05351158f336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:b7:03:26:66:d7:d0:67:7e:7b:ff:57:e4:60:3b:ff:ef:
         cd:dd:dd:66:91:c9:25:01:0d:ff:1f:08:1a:1b:4c:55:3b:b2:
         e5:4c:c2:e2:36:78:b2:42:06:5b:e6:e6:3b:9b:36:9d:3e:5e:
         1a:b8:0c:a0:a8:30:06:32:d4:79:96:32:bf:21:65:3a:11:ce:
         16:1e:db:e8:26:cb:3b:79:dc:af:49:62:0a:91:dd:67:82:8e:
         c1:eb:b1:fc:a2:b9:f7:f6:7a:b2:43:36:3c:2a:6c:5e:27:fe:
         5d:79:03:ee:54:35:d3:f2:65:6a:16:1f:e5:a0:7a:22:c8:c6:
         e0:5d:ed:a5:e2:a6:61:d8:2a:26:8a:30:6d:92:e0:d5:65:85:
         75:60:30:f7:0e:15:32:ef:df:87:8d:b9:84:ea:e0:e1:7a:54:
         d9:df:45:97:e5:09:39:fb:05:08:f7:31:cc:4e:33:91:7a:bd:
         ef:cd:d0:36:fc:06:ca:ca:04:29:21:17:f4:78:02:ed:c3:33:
         74:a7:14:bf:55:cc:78:04:d6:4c:8b:72:55:7b:d4:e9:77:c0:
         0e:d8:90:78:49:26:9a:62:55:c9:00:db:cd:03:4d:77:8f:af:
         5d:7a:ad:36:20:47:e3:69:9f:bf:16:3c:f8:f8:39:da:00:84:
         ba:97:c2:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtpUaNgWRRC5yYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NzNlNTk4ZDItYWJiOC00ZWI4LWIyOTItOTIyOTYwOTVhMjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Zx8j5paB1gH5XuMOC+lFIwqqiDfcL0P1rT
VNWC1mQQseemVm5u7lpzlpNhEGOsGYmei6WtGlHkJd/rYfna5DZ1zz6BHJUXi/4A
vCCtzZGtkCkgPu+vedYpJkrRxdZNyb+fe9powRu1TkZEiRnPY4QarP+gp/cwiz6a
diKXiZ1RVcAFd6ofwvSgebKjPLvwaKKWTXf5RQ3KaIITiLZZxf310KjiTNmpNuhD
jRT3q13eR9hX3qE6NkiaLcIVChFETnFuq/t4wsMpq+RzhGuyqmMjHPPUKFRzS8rP
KR/OCuEteoAOFmDwqFEXI0wWvi69orZiKPZykhej0Nz0g7p2OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLK9RE1O2A7L1HtWHiiqLc+pQCw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMDE5YjkwYTQtNmFhMi0z
ZDM2LWE5OWUtMDUzNTExNThmMzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi9wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSOtwMmZtfQZ357/1fkYDv/783d3WaRySUBDf8fCBobTFU7suVMwuI2
eLJCBlvm5jubNp0+Xhq4DKCoMAYy1HmWMr8hZToRzhYe2+gmyzt53K9JYgqR3WeC
jsHrsfyiuff2erJDNjwqbF4n/l15A+5UNdPyZWoWH+WgeiLIxuBd7aXipmHYKiaK
MG2S4NVlhXVgMPcOFTLv34eNuYTq4OF6VNnfRZflCTn7BQj3McxOM5F6ve/N0Db8
BsrKBCkhF/R4Au3DM3SnFL9VzHgE1kyLclV71Ol3wA7YkHhJJppiVckA280DTXeP
r116rTYgR+Npn78WPPj4OdoAhLqXwms=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:02 2025 by rpki-client