Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/439394be-f83d-3556-84dc-0573f83ade76.roa
File:                     439394be-f83d-3556-84dc-0573f83ade76.roa (raw, json)
Hash identifier:          Ua4N/wNKWdNndMc4ejbgFVbsQNYjFJvjIx7s0Ho9aps=
Subject key identifier:   80:8F:DB:75:A8:6B:EB:0A:78:05:13:53:37:0C:8B:F8:B9:8A:84:50
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581926EF9869EAAB4280680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/439394be-f83d-3556-84dc-0573f83ade76.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     40306
IP address blocks:        184.62.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:92:6e:f9:86:9e:aa:b4:28:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=644e2529-7728-4809-b0f5-71a7ae43b2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:0e:70:47:5e:e5:f0:8b:ba:ab:96:61:e9:
                    5a:8f:aa:53:77:8d:c5:3e:60:43:d5:3a:66:24:9c:
                    7c:b2:48:1f:ce:bd:9d:39:cd:6f:b0:73:03:55:80:
                    bd:bb:f8:2d:06:fd:08:ec:b6:df:cf:76:4e:09:7f:
                    94:ca:a3:8d:90:cf:aa:77:27:7f:31:d2:16:65:f8:
                    67:92:f7:27:1e:79:e3:2b:56:bf:05:ec:93:b2:d6:
                    8b:26:a9:4d:0b:e3:1b:d4:27:27:d1:28:1a:a7:df:
                    e6:30:8a:57:ad:c6:45:1e:a2:9b:ac:24:54:98:53:
                    f6:98:75:e9:28:9c:8e:3b:0b:b2:d4:0c:f4:db:58:
                    f2:63:80:88:5a:87:03:3d:7b:21:59:b2:80:f3:e2:
                    08:64:58:56:8c:bd:89:ca:db:62:7b:9e:6d:8f:48:
                    86:55:d3:53:82:73:c8:88:8d:f7:c3:c3:5a:04:f8:
                    17:f4:f3:40:2a:e4:e7:1a:e3:1d:05:d5:cb:4b:c3:
                    b6:85:a2:3f:7c:ba:93:f5:de:9d:94:9a:68:93:44:
                    eb:77:b0:6c:36:e8:cf:9d:0e:f0:37:27:c0:03:e4:
                    b4:7e:4f:4a:f2:91:f8:2c:ca:38:f4:fc:a8:32:7d:
                    9a:4b:84:a9:f4:9c:b7:c8:92:a9:1b:f0:5d:85:cc:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8F:DB:75:A8:6B:EB:0A:78:05:13:53:37:0C:8B:F8:B9:8A:84:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/439394be-f83d-3556-84dc-0573f83ade76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:09:80:a9:a9:de:4b:b9:0a:99:af:55:fe:0f:cd:1d:75:aa:
         24:92:76:5b:5b:64:7e:96:19:60:c7:fa:2d:c5:78:8a:e6:54:
         af:90:b6:c9:db:53:e5:85:df:a7:1f:ac:db:0a:eb:b4:53:ce:
         4f:ec:84:d7:c7:ec:78:9d:de:bb:c4:bb:bc:13:29:13:6d:14:
         7e:2b:bc:bf:c3:cd:9d:30:42:38:d2:d2:50:0d:26:a6:b9:b7:
         3f:05:b5:b8:11:35:a8:0c:d9:b0:69:6a:74:6b:48:9f:13:67:
         ce:f7:b8:43:65:05:84:cb:95:fa:4a:4f:52:61:b5:45:26:a0:
         64:24:7a:54:a7:b9:94:05:87:59:b2:76:fd:80:f1:e4:2b:21:
         1c:96:bb:f2:52:81:a4:d4:0d:33:e4:80:be:56:55:37:7a:bf:
         91:e6:c8:54:65:75:29:e3:95:1a:bb:54:df:5d:50:46:18:6a:
         be:26:05:8e:bb:91:3c:51:e3:c6:5e:45:90:e0:0c:bb:50:00:
         44:b9:91:ef:59:a7:fd:72:72:db:51:17:bc:5d:be:32:48:f5:
         e1:22:48:d8:1b:d0:88:fc:6e:0f:0a:72:76:b3:9f:51:3c:0f:
         b5:bf:c5:84:b6:1e:60:03:63:ec:0a:ef:00:68:bd:d0:dc:e0:
         35:b2:12:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZJu+YaeqrQoBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjQ0ZTI1MjktNzcyOC00ODA5LWIwZjUtNzFhN2FlNDNiMmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnUOcEde5fCLuquWYelaj6pTd43FPmBD1Tpm
JJx8skgfzr2dOc1vsHMDVYC9u/gtBv0I7Lbfz3ZOCX+UyqONkM+qdyd/MdIWZfhn
kvcnHnnjK1a/BeyTstaLJqlNC+Mb1Ccn0Sgap9/mMIpXrcZFHqKbrCRUmFP2mHXp
KJyOOwuy1Az021jyY4CIWocDPXshWbKA8+IIZFhWjL2Jyttie55tj0iGVdNTgnPI
iI33w8NaBPgX9PNAKuTnGuMdBdXLS8O2haI/fLqT9d6dlJpok0Trd7BsNujPnQ7w
NyfAA+S0fk9K8pH4LMo49PyoMn2aS4Sp9Jy3yJKpG/BdhcxLxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICP23Woa+sKeAUTUzcMi/i5ioRQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDM5Mzk0YmUtZjgzZC0z
NTU2LTg0ZGMtMDU3M2Y4M2FkZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD4oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoJgKmp3ku5CpmvVf4PzR11qiSSdltbZH6WGWDH+i3FeIrmVK+Qtsnb
U+WF36cfrNsK67RTzk/shNfH7Hid3rvEu7wTKRNtFH4rvL/DzZ0wQjjS0lANJqa5
tz8FtbgRNagM2bBpanRrSJ8TZ873uENlBYTLlfpKT1JhtUUmoGQkelSnuZQFh1my
dv2A8eQrIRyWu/JSgaTUDTPkgL5WVTd6v5HmyFRldSnjlRq7VN9dUEYYar4mBY67
kTxR48ZeRZDgDLtQAES5ke9Zp/1ycttRF7xdvjJI9eEiSNgb0Ij8bg8Kcnazn1E8
D7W/xYS2HmADY+wK7wBovdDc4DWyEj4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:28 2025 by rpki-client