Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/de1106a5-7c8a-30c0-a638-03a316d3736c.roa
File:                     de1106a5-7c8a-30c0-a638-03a316d3736c.roa (raw, json)
Hash identifier:          Ud+9woq7DmkutHNXYVCrDZJrmgbFc6MuXeS15EFn5QY=
Subject key identifier:   56:11:A0:B6:48:84:00:B8:EF:8F:E8:A4:79:8D:A9:96:3B:4A:2B:06
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F432858494CC944BFBD4CE2E4AC898B00
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/de1106a5-7c8a-30c0-a638-03a316d3736c.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     205220
IP address blocks:        66.245.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:44:bf:bd:4c:e2:e4:ac:89:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=e23f05ec-baff-4063-8fec-4b77b7a9be6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:24:93:1e:e3:1c:d1:46:ac:1e:d5:81:99:
                    d2:b8:77:79:05:82:29:6f:80:32:e8:82:d1:6e:61:
                    11:a3:bf:bc:ac:39:ea:30:bc:0a:b3:8c:86:bf:e1:
                    e4:7d:8c:6c:37:4e:db:73:38:84:72:bb:77:a0:02:
                    cd:eb:91:3c:a4:ab:0d:c0:3d:08:d0:91:c6:4d:8b:
                    dc:8b:21:b3:83:e3:fa:fb:7b:d7:7d:ab:a3:5a:30:
                    af:71:53:96:9d:64:44:de:99:75:e6:05:d4:d4:2e:
                    dc:24:bb:9b:26:f6:68:d1:e0:a5:51:5d:ef:3a:fa:
                    96:25:27:98:77:d5:f0:08:c6:e3:68:87:92:97:7b:
                    ab:8e:02:7d:8d:20:ca:ec:74:bf:22:a2:e9:1f:78:
                    34:28:d3:02:f0:95:e5:7f:eb:97:d1:ab:cc:e9:aa:
                    9d:6e:c5:33:ab:a4:5d:47:49:a9:59:e6:f1:f5:b2:
                    7f:a8:64:07:bc:ee:2d:3c:ee:13:6b:96:da:2f:de:
                    94:c0:83:58:aa:1f:89:c6:94:44:ef:c3:45:ed:a3:
                    cc:17:0e:ef:f6:87:a0:a2:7d:52:0b:c0:5d:7f:e2:
                    a7:3c:db:f1:ab:37:a4:21:4b:81:46:97:b9:ec:de:
                    45:ca:49:4d:86:53:39:0f:d9:25:7d:d9:da:77:c3:
                    2c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:11:A0:B6:48:84:00:B8:EF:8F:E8:A4:79:8D:A9:96:3B:4A:2B:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/de1106a5-7c8a-30c0-a638-03a316d3736c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:f8:93:82:cc:32:fc:d1:54:6c:38:2e:90:20:1c:02:5f:
         86:2d:46:55:f1:23:9c:8f:93:bd:d3:33:96:0b:3c:7d:0c:06:
         16:cb:d2:6a:df:c6:84:ad:f7:f9:d9:b0:12:a5:75:25:9f:35:
         15:6f:06:d9:e3:e6:10:19:4a:af:41:05:41:9c:12:0b:23:e7:
         b8:b3:c7:d8:6e:10:bb:69:2c:81:1e:1d:db:fd:77:d6:d0:c0:
         42:e9:9d:80:b3:03:16:8b:a2:bc:81:f5:27:cf:2b:2c:99:d7:
         54:d0:76:d4:ef:2c:a7:f0:27:e2:8a:55:4b:dd:38:0b:cc:56:
         37:f2:2b:0c:1a:40:de:7b:b9:87:82:6f:34:29:f6:35:43:9a:
         4b:09:69:fc:2b:4c:7c:db:2b:44:86:28:b1:f8:42:ac:54:ed:
         d4:26:f0:7b:02:4d:2a:99:66:83:76:16:1b:22:e4:a0:35:41:
         01:89:2c:54:3d:a3:d9:8d:9b:6e:20:a9:89:b1:35:50:e7:36:
         37:8e:2f:ea:41:54:33:fc:24:1c:a6:d8:ef:d1:ee:59:2d:d6:
         c4:69:ca:e2:d2:9c:75:12:f9:ee:ef:b3:4e:ee:5c:c2:dd:0d:
         19:35:ee:c6:e9:70:26:d8:e3:4c:ac:7f:0a:54:c0:8f:42:04:
         d8:0b:69:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUS/vUzi5KyJiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTY3MGE3OTQtNmNjYi00OTFkLWFlYjEtY2E4NDg1OWMz
OTUwMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZTIzZjA1ZWMtYmFmZi00MDYzLThmZWMtNGI3N2I3YTliZTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Ukkx7jHNFGrB7VgZnSuHd5BYIpb4Ay6ILR
bmERo7+8rDnqMLwKs4yGv+HkfYxsN07bcziEcrt3oALN65E8pKsNwD0I0JHGTYvc
iyGzg+P6+3vXfaujWjCvcVOWnWRE3pl15gXU1C7cJLubJvZo0eClUV3vOvqWJSeY
d9XwCMbjaIeSl3urjgJ9jSDK7HS/IqLpH3g0KNMC8JXlf+uX0avM6aqdbsUzq6Rd
R0mpWebx9bJ/qGQHvO4tPO4Ta5baL96UwINYqh+JxpRE78NF7aPMFw7v9oegon1S
C8Bdf+KnPNvxqzekIUuBRpe57N5FyklNhlM5D9klfdnad8MsFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYRoLZIhAC474/opHmNqZY7SisGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcw
YTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0ODU5YzM5NTAvZGUxMTA2YTUtN2M4YS0z
MGMwLWE2MzgtMDNhMzE2ZDM3MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTY3MGE3OTQtNmNjYi00OTFkLWFl
YjEtY2E4NDg1OWMzOTUwL2U2NzBhNzk0LTZjY2ItNDkxZC1hZWIxLWNhODQ4NTlj
Mzk1MC5jcmwwHwYDVR0jBBgwFoAU6Lr0Qpc6EjYTGTvfCyac1GGi5yIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcwYTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0
ODU5YzM5NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvWkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHw+JOCzDL80VRsOC6QIBwCX4YtRlXxI5yPk73TM5YLPH0MBhbL0mrf
xoSt9/nZsBKldSWfNRVvBtnj5hAZSq9BBUGcEgsj57izx9huELtpLIEeHdv9d9bQ
wELpnYCzAxaLoryB9SfPKyyZ11TQdtTvLKfwJ+KKVUvdOAvMVjfyKwwaQN57uYeC
bzQp9jVDmksJafwrTHzbK0SGKLH4QqxU7dQm8HsCTSqZZoN2Fhsi5KA1QQGJLFQ9
o9mNm24gqYmxNVDnNjeOL+pBVDP8JBym2O/R7lkt1sRpyuLSnHUS+e7vs07uXMLd
DRk17sbpcCbY40ysfwpUwI9CBNgLafw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:38:18 2025 by rpki-client