Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c0cca49-7e2b-33bc-8f86-1d242708fb8d.roa
File:                     9c0cca49-7e2b-33bc-8f86-1d242708fb8d.roa (raw, json)
Hash identifier:          gF3BPBJ9IeQTR4VMS6JnMTNnmTOWFNx89ETicf+6Wb8=
Subject key identifier:   E4:75:3B:1B:58:0C:73:C9:C7:98:20:27:D3:64:13:01:74:B6:F9:56
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B7A0FB93A90A425F5449A4
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c0cca49-7e2b-33bc-8f86-1d242708fb8d.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     21723
IP address blocks:        209.226.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b7:a0:fb:93:a9:0a:42:5f:54:49:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=c04b6c71-5a44-4c09-b7d0-b448118a6e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:dd:eb:d8:36:bd:cc:06:86:2b:c5:04:d7:
                    8a:dc:12:c9:06:f0:23:01:85:ed:6c:47:4f:dd:19:
                    1e:98:2c:fe:77:5e:24:75:c2:65:43:29:7c:78:f0:
                    fc:f7:b4:0a:c4:bc:26:d3:0d:1e:47:83:27:7a:a9:
                    f1:89:db:25:0e:0b:44:f9:29:1e:38:b0:a8:4b:30:
                    a9:0e:a4:4d:c5:28:43:e0:7d:72:b6:3f:dc:3d:70:
                    81:ff:3e:bb:44:04:b8:da:85:68:93:32:d4:92:62:
                    a3:69:9e:77:6d:6c:bd:31:fb:e7:c2:50:72:fb:7e:
                    be:7f:bd:0f:32:02:8e:8b:bf:72:17:16:a5:18:d5:
                    92:5d:c9:6b:d7:81:e6:55:ca:96:c5:95:ad:5b:be:
                    89:c5:d4:3c:54:ac:9c:59:b8:11:f9:63:c4:04:b7:
                    15:93:95:7e:89:5c:98:e7:7f:00:8b:6d:9f:5c:6a:
                    7d:34:36:00:e8:bd:fa:af:57:c7:59:45:87:77:ab:
                    2d:b9:3c:53:d7:1a:80:ed:bf:0f:7c:a5:57:d3:e7:
                    a7:52:fe:28:d2:c7:82:ba:6a:01:94:6c:e0:fd:9d:
                    09:ea:b9:0d:0f:26:22:fd:1f:eb:51:85:14:9b:e0:
                    d7:98:10:24:29:e1:03:a8:a9:89:2a:5e:6a:95:97:
                    bc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:75:3B:1B:58:0C:73:C9:C7:98:20:27:D3:64:13:01:74:B6:F9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c0cca49-7e2b-33bc-8f86-1d242708fb8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:33:16:4f:e4:48:5c:e6:de:da:35:1b:28:29:16:4a:a8:82:
         c0:11:12:27:f8:c0:42:50:a6:12:6c:5e:5e:26:b3:97:09:30:
         12:d1:df:02:9e:9c:9d:b3:c7:55:d4:6b:e6:d8:9d:d7:4a:fc:
         77:89:c1:3f:cf:04:b7:9b:49:3e:95:4e:b4:0f:2a:1c:74:3c:
         4d:15:4b:0d:6f:83:ed:76:4c:dc:bc:2e:ba:d9:c7:d7:dd:60:
         3c:7b:9d:be:d5:f7:59:8f:9f:c1:eb:f3:dc:f7:9f:7e:aa:19:
         c8:e6:f4:27:35:b2:27:10:42:21:3a:c0:63:0b:38:29:38:56:
         6a:9a:ad:29:da:92:b8:bb:d5:74:58:e1:19:8a:77:77:6c:95:
         e6:ee:a5:58:57:5d:00:db:27:01:58:15:94:a1:58:7c:04:b2:
         20:83:a8:1b:dc:1d:8f:d4:0d:50:33:f9:9c:71:4a:9d:2e:e4:
         d8:b4:5e:52:bf:87:19:9b:66:7e:d2:82:fb:f6:a7:59:dd:60:
         8c:18:eb:37:78:e2:6c:36:e3:41:e1:e1:a7:71:f5:93:97:04:
         dc:50:fe:d7:cb:ae:a1:d1:82:13:f7:ab:a6:44:23:27:6a:60:
         f2:cf:d6:ff:8f:8c:ab:e0:5e:07:00:63:6b:93:b4:83:f4:37:
         ff:0f:94:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmt6D7k6kKQl9USaQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YzA0YjZjNzEtNWE0NC00YzA5LWI3ZDAtYjQ0ODExOGE2ZTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXLd69g2vcwGhivFBNeK3BLJBvAjAYXtbEdP
3RkemCz+d14kdcJlQyl8ePD897QKxLwm0w0eR4MneqnxidslDgtE+SkeOLCoSzCp
DqRNxShD4H1ytj/cPXCB/z67RAS42oVokzLUkmKjaZ53bWy9MfvnwlBy+36+f70P
MgKOi79yFxalGNWSXclr14HmVcqWxZWtW76JxdQ8VKycWbgR+WPEBLcVk5V+iVyY
538Ai22fXGp9NDYA6L36r1fHWUWHd6stuTxT1xqA7b8PfKVX0+enUv4o0seCumoB
lGzg/Z0J6rkNDyYi/R/rUYUUm+DXmBAkKeEDqKmJKl5qlZe8wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOR1OxtYDHPJx5ggJ9NkEwF0tvlWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOWMwY2NhNDktN2UyYi0z
M2JjLThmODYtMWQyNDI3MDhmYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eIsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8zFk/kSFzm3to1GygpFkqogsAREif4wEJQphJsXl4ms5cJMBLR3wKe
nJ2zx1XUa+bYnddK/HeJwT/PBLebST6VTrQPKhx0PE0VSw1vg+12TNy8LrrZx9fd
YDx7nb7V91mPn8Hr89z3n36qGcjm9Cc1sicQQiE6wGMLOCk4VmqarSnakri71XRY
4RmKd3dslebupVhXXQDbJwFYFZShWHwEsiCDqBvcHY/UDVAz+ZxxSp0u5Ni0XlK/
hxmbZn7Sgvv2p1ndYIwY6zd44mw240Hh4adx9ZOXBNxQ/tfLrqHRghP3q6ZEIydq
YPLP1v+PjKvgXgcAY2uTtIP0N/8PlEY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:52 2025 by rpki-client