Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/645f2ad0-4c63-3f29-abe8-ceb116ec4eaf.roa
File:                     645f2ad0-4c63-3f29-abe8-ceb116ec4eaf.roa (raw, json)
Hash identifier:          NPZaQypUejAERShXmvuDdHXvvfsoRjqzRRGzXN/AbNI=
Subject key identifier:   E1:8F:D9:13:EC:60:55:C6:0D:EA:E3:A8:B0:B5:C3:81:8A:C7:BB:DF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581A1EE0CB56C27230E9560
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/645f2ad0-4c63-3f29-abe8-ceb116ec4eaf.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        72.173.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:a1:ee:0c:b5:6c:27:23:0e:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=09894b8d-f177-4275-a16e-24953e2b4de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:ac:3f:44:0c:c4:b9:3f:18:ab:60:ca:32:
                    2c:c7:f0:10:e7:79:16:d5:6c:64:01:51:ec:8a:3a:
                    e4:9c:5b:75:32:13:51:57:78:db:c3:9a:e3:f6:9e:
                    1e:c8:a6:86:2a:7e:82:c3:85:0e:9e:54:d7:ba:8d:
                    25:2a:68:b3:61:fe:c6:40:3f:39:c4:87:fa:23:d1:
                    d9:21:3e:c1:21:25:c0:ed:ac:f5:7e:f1:99:25:e1:
                    c9:8e:55:f7:36:9f:55:a3:ab:7c:5f:db:43:26:47:
                    74:72:d3:b0:62:3e:16:0e:6f:26:31:d7:23:93:60:
                    5d:d9:66:34:36:95:d8:47:47:ff:7d:94:8a:aa:a4:
                    1f:6d:17:a6:e6:82:4c:15:f9:07:5b:b2:06:da:3e:
                    49:69:5d:1e:40:d6:8a:fb:1b:0f:13:6d:54:81:a1:
                    b8:f1:5c:e0:2c:66:15:15:2e:6d:9f:69:9f:3f:5e:
                    09:46:6a:8a:00:67:d0:f8:65:b7:61:11:56:d4:bb:
                    8d:17:92:00:cb:c5:01:28:e3:5c:73:7f:1e:f6:a4:
                    58:99:5a:37:cb:7e:fe:f2:62:be:ca:89:04:cb:90:
                    5c:b0:78:a4:18:e8:ec:a1:cf:9a:ae:8e:a6:aa:39:
                    0c:2f:43:3c:87:b3:ae:5a:00:b5:1c:fb:b2:f6:fe:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:D9:13:EC:60:55:C6:0D:EA:E3:A8:B0:B5:C3:81:8A:C7:BB:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/645f2ad0-4c63-3f29-abe8-ceb116ec4eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:bf:10:04:c5:26:e5:06:77:46:b3:77:90:a4:03:d1:e0:68:
         b9:13:df:8c:f8:90:c9:bf:d3:34:22:12:da:d4:68:4c:f8:22:
         82:06:db:8b:83:ca:c6:a5:3a:52:3d:11:cd:14:6a:ec:f3:2b:
         68:0b:ec:ee:77:03:6f:38:95:6b:6c:e1:03:d3:f3:53:67:bf:
         da:8a:13:e4:6c:ff:01:e8:f8:5b:b4:e5:04:7d:c2:ed:62:0a:
         f4:14:01:98:40:e8:73:47:39:b0:ed:f9:d9:ee:5d:15:65:d8:
         b6:b6:77:88:95:df:59:21:32:c1:4f:04:8e:4b:d7:82:62:e7:
         1f:c1:59:80:44:ed:05:ca:82:48:4e:15:89:b8:9c:42:4c:b1:
         f6:93:32:57:d0:6f:8c:a2:40:0e:11:4a:88:76:95:ce:c1:13:
         bf:05:bb:37:de:a3:8d:c0:b1:98:75:b8:39:4d:2a:da:9a:b7:
         6f:6e:de:4e:6e:39:e8:d4:af:5a:25:b0:1e:31:32:ea:51:de:
         01:d2:7c:e9:0f:01:1d:53:ad:d4:01:9b:48:c1:53:25:a5:7f:
         5f:e8:12:f4:a8:eb:0a:01:16:06:c3:cf:a5:7f:5c:37:ed:86:
         65:c2:05:26:f6:44:79:e8:17:fd:bd:45:5c:fa:ea:00:34:e8:
         bd:a9:e1:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgaHuDLVsJyMOlWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDk4OTRiOGQtZjE3Ny00Mjc1LWExNmUtMjQ5NTNlMmI0ZGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uOsP0QMxLk/GKtgyjIsx/AQ53kW1WxkAVHs
ijrknFt1MhNRV3jbw5rj9p4eyKaGKn6Cw4UOnlTXuo0lKmizYf7GQD85xIf6I9HZ
IT7BISXA7az1fvGZJeHJjlX3Np9Vo6t8X9tDJkd0ctOwYj4WDm8mMdcjk2Bd2WY0
NpXYR0f/fZSKqqQfbRem5oJMFfkHW7IG2j5JaV0eQNaK+xsPE21UgaG48VzgLGYV
FS5tn2mfP14JRmqKAGfQ+GW3YRFW1LuNF5IAy8UBKONcc38e9qRYmVo3y37+8mK+
yokEy5BcsHikGOjsoc+aro6mqjkML0M8h7OuWgC1HPuy9v4sDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGP2RPsYFXGDerjqLC1w4GKx7vfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjQ1ZjJhZDAtNGM2My0z
ZjI5LWFiZTgtY2ViMTE2ZWM0ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMO/EATFJuUGd0azd5CkA9HgaLkT34z4kMm/0zQiEtrUaEz4IoIG24uD
ysalOlI9Ec0UauzzK2gL7O53A284lWts4QPT81Nnv9qKE+Rs/wHo+Fu05QR9wu1i
CvQUAZhA6HNHObDt+dnuXRVl2La2d4iV31khMsFPBI5L14Ji5x/BWYBE7QXKgkhO
FYm4nEJMsfaTMlfQb4yiQA4RSoh2lc7BE78Fuzfeo43AsZh1uDlNKtqat29u3k5u
OejUr1olsB4xMupR3gHSfOkPAR1TrdQBm0jBUyWlf1/oEvSo6woBFgbDz6V/XDft
hmXCBSb2RHnoF/29RVz66gA06L2p4dQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:57 2025 by rpki-client