Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f3c99bd-149e-3cc6-945a-edac122da832.roa
File:                     1f3c99bd-149e-3cc6-945a-edac122da832.roa (raw, json)
Hash identifier:          f/zYprKlncfcNsyJJ8ppc9Y4eEahAuI/md+3F4igoVM=
Subject key identifier:   FC:83:C1:D0:01:89:DB:4F:A3:6D:4C:9E:44:F2:23:6F:BF:13:16:33
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5819098F118455D8CDBFFC6
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f3c99bd-149e-3cc6-945a-edac122da832.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     40306
IP address blocks:        72.173.208.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:90:98:f1:18:45:5d:8c:db:ff:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=9233c809-4c2d-46df-9dcb-0802767335be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:0c:22:ac:74:e8:3a:7a:20:b1:45:7b:86:
                    26:21:b6:cb:f6:b9:df:c0:bb:db:08:69:be:50:d5:
                    4c:44:9c:b4:77:7a:c9:9d:ac:eb:d9:8d:6b:b7:15:
                    e2:33:d5:c4:c0:93:e6:bd:c8:4b:48:6e:af:7e:c3:
                    f3:40:15:62:93:fa:04:58:11:f3:d3:84:49:19:74:
                    fa:c3:15:d6:4d:4a:1f:f8:c0:52:6a:a0:02:dd:63:
                    69:25:28:e1:c0:3a:83:e7:4c:09:1d:14:e8:77:6f:
                    3f:c7:ed:0e:f2:6b:e1:d8:aa:31:19:f5:54:ca:6f:
                    0d:77:54:cd:32:88:32:7f:50:3b:85:95:d2:12:e1:
                    a3:9c:b5:fe:be:89:42:02:b5:1b:24:ce:0b:05:a9:
                    10:0b:e7:6f:63:44:83:7c:86:43:1c:d9:51:87:76:
                    69:a3:fe:39:3e:7e:af:71:91:4f:c9:c8:42:f1:da:
                    16:d9:9e:0a:6a:b2:7e:97:37:40:34:4b:7c:e2:6b:
                    ce:ec:67:5b:b0:b7:54:c8:6c:38:d0:0a:70:a1:fd:
                    59:6e:e6:2c:5b:12:91:6a:ab:b5:ca:c8:76:2e:32:
                    b4:da:75:92:95:c8:ee:10:d2:8d:25:f6:6d:95:ee:
                    75:46:dd:0e:ed:56:e0:fd:35:c5:57:49:c0:3b:08:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:83:C1:D0:01:89:DB:4F:A3:6D:4C:9E:44:F2:23:6F:BF:13:16:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f3c99bd-149e-3cc6-945a-edac122da832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:fc:c1:30:f6:41:44:5d:26:e5:a8:5c:51:5a:a3:df:07:51:
         82:45:e0:93:03:95:6e:ca:1d:d9:6d:3b:8e:07:f9:1a:a9:b6:
         b2:50:91:e5:91:5a:e4:0c:b7:cb:cb:ef:94:1c:7a:71:dd:a1:
         be:37:14:9a:59:d0:ae:b3:4f:c5:39:b4:a8:38:9f:83:ff:c1:
         a8:aa:d0:00:10:9f:e9:3e:7c:e6:a1:71:fc:bd:52:71:50:7e:
         3e:a0:3f:ce:0d:12:c8:a6:55:2e:de:4c:83:91:3b:a5:96:94:
         65:cc:6c:f3:35:ac:0d:5c:84:ab:a5:92:99:30:08:1d:eb:86:
         74:ce:61:25:14:9d:d4:4b:8d:30:4a:11:18:17:28:c7:53:4e:
         03:c4:99:3f:5d:a1:11:a4:be:d8:6b:cf:2c:66:03:72:27:9e:
         ac:40:3f:7e:94:ca:a1:26:b6:dd:4d:a5:78:8f:60:91:66:b7:
         a5:a8:7a:f3:73:e0:78:f8:11:5b:45:fe:a8:53:dc:6f:2b:38:
         af:63:c5:dc:82:49:25:23:fa:db:54:02:89:35:76:fe:c1:be:
         f7:72:33:44:cd:13:69:21:89:cf:fb:52:7d:df:2f:f6:18:d4:
         22:08:b3:ce:4e:29:c9:82:16:be:0d:47:fd:c3:8a:14:f7:24:
         26:2f:2c:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZCY8RhFXYzb/8YwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
OTIzM2M4MDktNGMyZC00NmRmLTlkY2ItMDgwMjc2NzMzNWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYkMIqx06Dp6ILFFe4YmIbbL9rnfwLvbCGm+
UNVMRJy0d3rJnazr2Y1rtxXiM9XEwJPmvchLSG6vfsPzQBVik/oEWBHz04RJGXT6
wxXWTUof+MBSaqAC3WNpJSjhwDqD50wJHRTod28/x+0O8mvh2KoxGfVUym8Nd1TN
Mogyf1A7hZXSEuGjnLX+volCArUbJM4LBakQC+dvY0SDfIZDHNlRh3Zpo/45Pn6v
cZFPychC8doW2Z4KarJ+lzdANEt84mvO7GdbsLdUyGw40Apwof1ZbuYsWxKRaqu1
ysh2LjK02nWSlcjuENKNJfZtle51Rt0O7Vbg/TXFV0nAOwjsjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPyDwdABidtPo21MnkTyI2+/ExYzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWYzYzk5YmQtMTQ5ZS0z
Y2M2LTk0NWEtZWRhYzEyMmRhODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSK3QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIT8wTD2QURdJuWoXFFao98HUYJF4JMDlW7KHdltO44H+RqptrJQkeWR
WuQMt8vL75QcenHdob43FJpZ0K6zT8U5tKg4n4P/waiq0AAQn+k+fOahcfy9UnFQ
fj6gP84NEsimVS7eTIORO6WWlGXMbPM1rA1chKulkpkwCB3rhnTOYSUUndRLjTBK
ERgXKMdTTgPEmT9doRGkvthrzyxmA3InnqxAP36UyqEmtt1NpXiPYJFmt6WoevNz
4Hj4EVtF/qhT3G8rOK9jxdyCSSUj+ttUAok1dv7BvvdyM0TNE2khic/7Un3fL/YY
1CIIs85OKcmCFr4NR/3DihT3JCYvLP8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:23 2025 by rpki-client