Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5fd70cf9-e349-3189-88be-a06b233d8ffc.roa
File:                     5fd70cf9-e349-3189-88be-a06b233d8ffc.roa (raw, json)
Hash identifier:          yGNgLFu5bSshHs8BLK0siSM+QYH0WvDNyHHOCkKBzO4=
Subject key identifier:   79:9E:87:C7:BE:EA:0A:0D:F6:FC:0C:CD:57:FB:05:83:A6:5C:32:9F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2AB09AB2A172EBE3FECC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5fd70cf9-e349-3189-88be-a06b233d8ffc.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        207.164.76.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:b0:9a:b2:a1:72:eb:e3:fe:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=f3498d89-96a3-43c0-aa8e-7ddcb51d92fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:65:ba:45:50:97:c0:3e:03:6e:1f:56:54:
                    de:bb:c0:d8:f4:7a:f1:a9:72:a0:60:1f:5d:ad:62:
                    e5:4c:92:22:7f:38:4c:1b:22:1a:0f:9e:98:5f:e2:
                    ea:46:15:38:28:35:36:66:dc:0c:c1:62:73:9c:7e:
                    92:f0:0d:2e:e3:24:01:bf:43:15:c6:d6:7f:78:ff:
                    b2:59:bd:42:64:85:4d:5e:28:28:03:0f:79:3b:c5:
                    a6:8d:68:dc:1a:cf:5d:35:09:fc:ff:b4:79:30:cd:
                    08:10:dc:fb:d9:17:f0:44:4e:2a:0c:c1:74:94:52:
                    5d:e3:cc:1f:7f:81:e3:1a:cc:d0:a5:84:0b:9f:97:
                    8e:f9:b9:d7:75:9c:14:98:fb:e6:b6:43:b0:80:45:
                    44:c8:32:f8:e6:04:b5:20:c9:26:a1:7f:3c:a1:a4:
                    87:61:a8:0d:81:89:11:21:1a:32:ee:b6:aa:aa:a7:
                    8d:e2:bb:94:33:a7:78:42:e6:ad:13:27:b6:08:88:
                    eb:3c:30:45:5b:db:c7:89:ec:d0:e9:b1:10:16:1a:
                    b3:9c:d4:eb:56:e2:eb:5e:15:1d:69:c4:b9:59:7e:
                    e7:de:ee:35:83:44:b6:59:c8:c8:25:57:61:0a:8f:
                    ac:43:df:b0:9d:ef:78:14:8f:2b:9e:5d:d2:3e:e3:
                    1f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9E:87:C7:BE:EA:0A:0D:F6:FC:0C:CD:57:FB:05:83:A6:5C:32:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5fd70cf9-e349-3189-88be-a06b233d8ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:0c:9a:71:d6:3a:21:d8:28:a8:38:0d:f7:e2:3e:e6:cd:d2:
         08:5b:6b:0b:a3:8c:e4:9f:23:91:f4:06:08:77:0d:8e:26:48:
         26:71:a4:57:39:c4:c3:a0:36:72:5e:94:62:d1:07:d2:da:a5:
         a5:97:e5:2f:17:1e:86:56:2d:bb:bb:ad:99:86:76:0c:97:a9:
         a4:88:6d:5c:c1:93:09:da:ff:75:66:81:c4:4a:20:62:0b:f0:
         d3:a0:b7:c7:2b:33:62:14:7e:9a:9a:df:1b:72:0a:f4:62:7e:
         be:60:93:82:46:da:98:43:d1:a5:d6:bf:3f:b7:b4:03:32:f4:
         78:21:c3:27:a3:e2:44:31:8b:8c:32:95:13:82:4f:3e:83:bc:
         d1:ae:db:7f:a5:b4:ba:53:53:1a:85:5b:64:fb:af:9d:a3:27:
         d0:0d:57:ff:fd:0f:4b:72:fb:e0:71:cd:40:a0:6a:2a:30:3a:
         8d:83:4c:fa:e0:21:5c:40:b5:81:03:2b:44:5f:57:9a:e7:12:
         52:a2:c8:b3:92:e8:fa:64:57:fd:3e:a9:22:66:ff:d4:ff:05:
         d5:9b:bb:8f:23:e5:7d:70:48:83:d9:10:07:74:89:a3:97:f8:
         e3:ea:8e:37:35:fc:6f:f2:b9:b9:ba:83:7e:d0:46:94:36:82:
         54:a9:6a:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtKrCasqFy6+P+zAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZjM0OThkODktOTZhMy00M2MwLWFhOGUtN2RkY2I1MWQ5MmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8llukVQl8A+A24fVlTeu8DY9HrxqXKgYB9d
rWLlTJIifzhMGyIaD56YX+LqRhU4KDU2ZtwMwWJznH6S8A0u4yQBv0MVxtZ/eP+y
Wb1CZIVNXigoAw95O8WmjWjcGs9dNQn8/7R5MM0IENz72RfwRE4qDMF0lFJd48wf
f4HjGszQpYQLn5eO+bnXdZwUmPvmtkOwgEVEyDL45gS1IMkmoX88oaSHYagNgYkR
IRoy7raqqqeN4ruUM6d4QuatEye2CIjrPDBFW9vHiezQ6bEQFhqznNTrVuLrXhUd
acS5WX7n3u41g0S2WcjIJVdhCo+sQ9+wne94FI8rnl3SPuMfVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmeh8e+6goN9vwMzVf7BYOmXDKfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNWZkNzBjZjktZTM0OS0z
MTg5LTg4YmUtYTA2YjIzM2Q4ZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6RMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8MmnHWOiHYKKg4DffiPubN0ghbawujjOSfI5H0Bgh3DY4mSCZxpFc5
xMOgNnJelGLRB9LapaWX5S8XHoZWLbu7rZmGdgyXqaSIbVzBkwna/3VmgcRKIGIL
8NOgt8crM2IUfpqa3xtyCvRifr5gk4JG2phD0aXWvz+3tAMy9Hghwyej4kQxi4wy
lROCTz6DvNGu23+ltLpTUxqFW2T7r52jJ9ANV//9D0ty++BxzUCgaiowOo2DTPrg
IVxAtYEDK0RfV5rnElKiyLOS6PpkV/0+qSJm/9T/BdWbu48j5X1wSIPZEAd0iaOX
+OPqjjc1/G/yubm6g37QRpQ2glSpahk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:20 2025 by rpki-client