Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/235bed64-072c-3f5c-a5e3-a702b02434e6.roa
File:                     235bed64-072c-3f5c-a5e3-a702b02434e6.roa (raw, json)
Hash identifier:          RsLMoMcDREJlMu76jDPhZPpJbEehns1+gG4ZFWgbIgo=
Subject key identifier:   78:66:60:8C:76:01:71:54:A9:6B:0B:9D:5E:07:9C:C4:32:A2:16:92
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D28C4B1B8043C9789358B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/235bed64-072c-3f5c-a5e3-a702b02434e6.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.25.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:c4:b1:b8:04:3c:97:89:35:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=94c123a8-1bf9-49ab-ae57-e9b25acfffb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:3e:05:f6:67:23:eb:53:62:34:35:96:5b:
                    aa:7b:93:f3:0e:6f:0d:ad:23:0b:da:e8:00:c7:98:
                    b5:79:6d:22:d1:84:1f:30:3c:09:34:d5:b0:75:b4:
                    aa:37:b6:d5:2e:6f:b7:4d:32:af:61:62:f6:f3:d5:
                    fe:22:1a:88:2e:0c:24:52:d8:59:31:01:3a:5a:10:
                    cf:46:e0:5a:56:39:ce:ce:0d:0d:cc:cb:2c:85:97:
                    71:67:28:71:2b:4d:2f:35:97:06:68:58:c7:43:89:
                    fd:ad:f7:89:bb:e6:02:2f:13:88:4a:ef:98:02:bc:
                    e5:86:13:95:82:f7:b3:a8:4c:90:93:af:ea:ec:a9:
                    3f:27:49:9d:8e:d3:55:38:0e:51:37:4b:68:88:3e:
                    46:04:30:80:98:2e:61:58:51:76:ec:17:f2:07:2c:
                    88:b4:e8:6a:f4:ec:33:cc:aa:6e:5d:01:d8:47:cb:
                    52:51:6d:5b:23:92:46:45:82:95:16:df:87:60:7a:
                    7c:e9:28:2a:5f:b9:01:10:ae:20:53:31:0a:29:21:
                    5a:89:0b:78:e0:c5:e8:f3:3b:8b:68:ec:58:2d:54:
                    7e:0a:31:e9:01:8a:e0:cf:2b:a2:dc:a4:9b:dd:71:
                    6c:40:65:22:d5:38:fc:33:ae:76:c7:89:0a:f7:f6:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:66:60:8C:76:01:71:54:A9:6B:0B:9D:5E:07:9C:C4:32:A2:16:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/235bed64-072c-3f5c-a5e3-a702b02434e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.25.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5c:9c:36:ff:13:17:1d:32:03:44:81:30:a9:57:26:e6:e8:
         07:83:7a:28:47:f8:e4:cc:8a:c8:9e:22:20:41:05:e0:fb:aa:
         53:84:8e:30:3d:a3:07:b1:36:3d:e7:a7:1a:c7:b4:c2:e2:95:
         0a:0f:47:db:53:24:02:5e:6d:d9:7b:16:fe:3f:52:ef:11:10:
         07:4e:ce:98:09:09:3f:7f:d5:21:bc:26:b1:93:4c:03:4e:de:
         81:b6:25:7a:65:a4:84:4b:9e:c1:98:0f:f0:b3:f6:1b:9d:37:
         21:9d:6a:0b:20:95:4c:e4:23:c1:26:28:c1:86:46:24:26:5c:
         c2:32:c0:e4:cc:5d:52:03:2f:c3:e6:56:83:19:46:a7:ee:2c:
         06:73:51:e3:39:82:3d:81:75:75:9e:97:45:e8:be:09:84:3e:
         93:43:d9:87:4e:2f:a0:c8:04:d2:25:e2:a8:ef:36:b5:cd:a0:
         a8:c9:c5:07:70:61:4f:53:43:99:f2:be:c8:6e:c1:69:1a:a4:
         df:6d:e2:b5:18:a3:a6:d2:dd:ff:3d:4c:df:2c:61:a6:59:b0:
         8c:8a:4f:bc:82:f4:52:5c:41:9b:0b:72:66:14:56:b6:bc:ff:
         15:10:35:75:24:1f:cf:49:a7:74:77:c3:33:27:72:70:90:09:
         97:50:ae:60
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEYtKMSxuAQ8l4k1i4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTRjMTIzYTgtMWJmOS00OWFiLWFlNTctZTliMjVhY2ZmZmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWk+BfZnI+tTYjQ1lluqe5PzDm8NrSML2ugA
x5i1eW0i0YQfMDwJNNWwdbSqN7bVLm+3TTKvYWL289X+IhqILgwkUthZMQE6WhDP
RuBaVjnOzg0NzMsshZdxZyhxK00vNZcGaFjHQ4n9rfeJu+YCLxOISu+YArzlhhOV
gvezqEyQk6/q7Kk/J0mdjtNVOA5RN0toiD5GBDCAmC5hWFF27BfyByyItOhq9Owz
zKpuXQHYR8tSUW1bI5JGRYKVFt+HYHp86SgqX7kBEK4gUzEKKSFaiQt44MXo8zuL
aOxYLVR+CjHpAYrgzyui3KSb3XFsQGUi1Tj8M652x4kK9/ZYawIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHhmYIx2AXFUqWsLnV4HnMQyohaSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjM1YmVkNjQtMDcyYy0z
ZjVjLWE1ZTMtYTcwMmIwMjQzNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARhkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVVycNv8TFx0yA0SBMKlXJuboB4N6KEf45MyKyJ4iIEEF4PuqU4SOMD2j
B7E2PeenGse0wuKVCg9H21MkAl5t2XsW/j9S7xEQB07OmAkJP3/VIbwmsZNMA07e
gbYlemWkhEuewZgP8LP2G503IZ1qCyCVTOQjwSYowYZGJCZcwjLA5MxdUgMvw+ZW
gxlGp+4sBnNR4zmCPYF1dZ6XRei+CYQ+k0PZh04voMgE0iXiqO82tc2gqMnFB3Bh
T1NDmfK+yG7BaRqk323itRijptLd/z1M3yxhplmwjIpPvIL0UlxBmwtyZhRWtrz/
FRA1dSQfz0mndHfDMydycJAJl1CuYA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:25 2025 by rpki-client