Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7d693ec4-74c4-3138-a8c6-cbe6676819aa.roa
File:                     7d693ec4-74c4-3138-a8c6-cbe6676819aa.roa (raw, json)
Hash identifier:          63+oRxazbHNHC1inAsMxbzRGlalxC/AJ7WHjm8TPX9w=
Subject key identifier:   0C:4C:05:16:95:9A:9A:D7:9F:75:66:EB:71:D9:1D:1F:2A:D8:9F:A6
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F432858483B5014F3B4AC6CA412B259C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7d693ec4-74c4-3138-a8c6-cbe6676819aa.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     20460
IP address blocks:        72.14.156.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:14:f3:b4:ac:6c:a4:12:b2:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=e77438a3-8e43-4b4e-b05a-be132e52a06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:79:84:1e:ae:9e:90:4c:6a:75:c8:3a:c7:05:
                    58:4b:f5:90:17:13:a7:06:cd:29:62:dd:40:d9:fc:
                    e8:1b:d7:24:3a:e9:ac:7f:de:bc:8e:a1:fd:fb:72:
                    f6:2d:1c:2d:12:31:4f:6c:99:74:b5:4e:77:4f:12:
                    6d:c1:a8:6d:75:34:5c:a4:83:52:93:d2:13:5f:2e:
                    3f:1a:81:ce:65:27:5b:63:b6:93:8b:53:80:dd:4f:
                    b9:b2:25:43:ed:99:86:f1:d1:cf:71:19:88:35:81:
                    2a:ae:bb:22:94:59:09:19:af:04:1c:05:f1:4b:b8:
                    a8:4d:90:5d:41:79:45:28:e5:8d:36:a5:46:2f:2e:
                    05:3b:28:c2:5a:22:23:8f:86:a8:02:01:97:f3:86:
                    28:2f:51:77:fc:de:49:df:36:64:2b:6e:b2:e8:94:
                    c0:cf:33:c8:fb:33:8a:0a:a7:6b:51:8e:14:08:18:
                    85:71:a4:89:56:69:5e:30:d4:9e:81:86:61:bf:85:
                    de:07:3b:37:88:a2:81:0c:2f:05:33:99:a5:fe:73:
                    aa:7e:29:3c:e9:fc:1e:08:d1:d4:a3:a9:de:90:df:
                    ff:df:bc:03:d1:4d:d9:38:4b:25:94:21:b7:ce:cd:
                    50:4c:c3:5c:d7:0f:87:10:37:25:0f:85:c4:88:ca:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4C:05:16:95:9A:9A:D7:9F:75:66:EB:71:D9:1D:1F:2A:D8:9F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7d693ec4-74c4-3138-a8c6-cbe6676819aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:07:9a:5d:38:51:5c:b2:5c:47:58:b1:c7:eb:af:7a:84:a6:
         7c:b3:81:92:e5:d7:a6:ae:e2:e6:e2:bb:3b:1c:a8:35:10:0f:
         16:94:44:59:41:ba:c9:be:a2:73:56:98:45:af:15:10:40:ac:
         38:cd:8a:40:75:e8:78:6e:68:31:55:df:bc:a5:63:5a:d6:8b:
         f1:f7:32:ab:8c:81:1e:49:5c:66:6e:08:ee:02:63:2d:f6:89:
         f2:73:a4:10:b5:02:d7:c8:1c:12:c3:11:6a:96:c9:47:07:e9:
         4e:8f:b4:ab:75:39:e6:bf:cc:c5:e4:b3:c8:9e:5c:58:69:70:
         d3:c0:44:bb:61:b9:5b:22:bc:94:7a:4d:a5:a6:e5:05:08:05:
         01:27:4c:39:93:cf:19:a7:0f:41:7e:fd:f2:c9:b0:af:47:ab:
         d1:a0:26:54:72:ee:9f:26:7e:6a:d8:7d:57:36:63:35:32:5d:
         64:30:a5:99:a4:aa:6b:4d:3e:84:ba:06:86:2f:24:3b:8a:91:
         08:f7:ba:95:da:39:e7:8a:e5:b5:c3:68:9a:21:70:d9:85:4f:
         9f:39:06:97:3c:74:6e:23:d1:6c:25:a0:b3:2d:91:c8:37:f6:
         97:bb:d6:7b:04:2b:19:d5:94:3e:45:97:cc:4c:7e:f3:08:c4:
         83:ca:54:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UBTztKxspBKyWcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
ZTc3NDM4YTMtOGU0My00YjRlLWIwNWEtYmUxMzJlNTJhMDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XmEHq6ekExqdcg6xwVYS/WQFxOnBs0pYt1A
2fzoG9ckOumsf968jqH9+3L2LRwtEjFPbJl0tU53TxJtwahtdTRcpINSk9ITXy4/
GoHOZSdbY7aTi1OA3U+5siVD7ZmG8dHPcRmINYEqrrsilFkJGa8EHAXxS7ioTZBd
QXlFKOWNNqVGLy4FOyjCWiIjj4aoAgGX84YoL1F3/N5J3zZkK26y6JTAzzPI+zOK
CqdrUY4UCBiFcaSJVmleMNSegYZhv4XeBzs3iKKBDC8FM5ml/nOqfik86fweCNHU
o6nekN//37wD0U3ZOEsllCG3zs1QTMNc1w+HEDclD4XEiMrOkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAxMBRaVmprXn3Vm63HZHR8q2J+mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvN2Q2OTNlYzQtNzRjNC0z
MTM4LWE4YzYtY2JlNjY3NjgxOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8Hml04UVyyXEdYscfrr3qEpnyzgZLl16au4ubiuzscqDUQDxaURFlB
usm+onNWmEWvFRBArDjNikB16HhuaDFV37ylY1rWi/H3MquMgR5JXGZuCO4CYy32
ifJzpBC1AtfIHBLDEWqWyUcH6U6PtKt1Oea/zMXks8ieXFhpcNPARLthuVsivJR6
TaWm5QUIBQEnTDmTzxmnD0F+/fLJsK9Hq9GgJlRy7p8mfmrYfVc2YzUyXWQwpZmk
qmtNPoS6BoYvJDuKkQj3upXaOeeK5bXDaJohcNmFT585Bpc8dG4j0WwloLMtkcg3
9pe71nsEKxnVlD5Fl8xMfvMIxIPKVHE=
-----END CERTIFICATE-----
Generated at Sun Feb 9 14:35:57 2025 by rpki-client