Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4f34d8a-8c62-3863-9693-e46eba5dd9a0.roa
File:                     f4f34d8a-8c62-3863-9693-e46eba5dd9a0.roa (raw, json)
Hash identifier:          UHebW4hY/RHTHPPRNTqFm/E2x+9wngXy1RgRgyf27Ns=
Subject key identifier:   CE:87:79:C0:4C:43:04:EF:05:9D:AC:86:C0:5E:5B:B1:A8:D9:3C:BB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581F17F887AD4F1D2C3BA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4f34d8a-8c62-3863-9693-e46eba5dd9a0.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.62.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:f1:7f:88:7a:d4:f1:d2:c3:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=7cfdf8cf-a0bf-4e8e-98e6-133542f924b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:0c:ba:10:ec:24:f2:59:e6:49:61:b3:b3:
                    77:4e:ae:81:78:2a:f0:e3:42:b5:e2:83:46:fa:3f:
                    41:70:5a:eb:83:02:a2:6a:3b:46:c4:02:3f:78:e0:
                    1d:4e:47:6d:3a:c3:e6:09:f3:d7:a8:e5:76:d0:c0:
                    a1:c3:a4:87:8e:22:db:5c:cc:ee:0c:9b:1d:f2:26:
                    2c:0c:20:a4:d9:08:6e:7d:33:b3:56:34:3f:7f:a9:
                    c3:fc:8d:ef:38:b5:9f:b7:c3:22:14:6d:6f:8f:62:
                    24:8f:19:bd:aa:af:27:cf:35:ad:c9:53:fc:14:54:
                    10:1c:10:1e:7d:06:18:16:d4:b5:f3:81:46:32:5f:
                    4e:58:b2:a0:e1:31:ad:83:b9:7f:01:a8:d7:e0:cb:
                    ae:a1:12:27:3f:b2:19:70:ce:8c:cf:3d:8c:3e:db:
                    9f:a6:60:66:42:3d:86:d9:0f:40:ff:4d:69:03:b1:
                    32:da:ea:b5:1c:fd:6d:80:0e:af:0d:2b:bb:d1:e3:
                    a6:b2:e8:0c:41:2d:96:34:ba:47:3f:3a:b1:0a:c9:
                    ec:13:0d:4d:5c:7e:c7:80:e1:b6:68:45:da:c7:bc:
                    e8:b0:39:05:de:d8:89:86:f3:88:81:0b:0e:95:91:
                    aa:ae:2d:fc:91:bf:0d:d1:33:30:12:4b:c9:9c:ab:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:87:79:C0:4C:43:04:EF:05:9D:AC:86:C0:5E:5B:B1:A8:D9:3C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4f34d8a-8c62-3863-9693-e46eba5dd9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:2c:1e:f2:14:2c:91:1a:fe:f8:46:f4:5e:35:dc:44:83:14:
         53:c4:6a:e6:db:ae:aa:c8:09:24:27:bd:35:6e:71:55:52:96:
         c6:f3:23:a4:18:07:7f:d0:34:0d:26:d3:b3:9c:0b:94:09:1d:
         3c:3a:aa:8b:0c:86:73:84:db:99:7b:a9:73:f8:ac:f5:df:5e:
         8f:bb:cb:db:b9:4b:35:19:03:1f:6a:a1:87:b2:e7:31:74:59:
         64:cc:41:89:23:3c:ab:eb:13:92:5d:43:e7:6b:2a:ce:84:f4:
         32:9c:ce:86:97:79:ad:4a:a4:66:9e:2f:74:cf:b1:9a:09:1c:
         73:1f:a1:4f:ec:c8:68:95:1a:95:e7:44:92:2a:be:42:49:64:
         3d:c5:77:0a:b0:39:e8:c2:1d:52:a6:e3:36:21:6c:79:01:6c:
         39:c1:59:e8:b2:f4:f6:06:14:b5:91:e7:55:cd:60:ba:b5:38:
         88:9f:b9:56:ba:49:ac:94:c1:31:42:97:dd:87:ef:6c:48:c7:
         63:0b:e8:cf:90:5f:2e:db:34:0d:b1:ce:1b:0d:50:e0:fc:95:
         fc:a3:54:9e:d8:09:b9:dc:46:bf:25:aa:30:df:eb:69:76:99:
         d6:76:74:f7:0a:58:23:97:b8:03:c4:b9:2b:fd:44:72:fc:9f:
         03:98:2a:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgfF/iHrU8dLDugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
N2NmZGY4Y2YtYTBiZi00ZThlLTk4ZTYtMTMzNTQyZjkyNGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9gMuhDsJPJZ5klhs7N3Tq6BeCrw40K14oNG
+j9BcFrrgwKiajtGxAI/eOAdTkdtOsPmCfPXqOV20MChw6SHjiLbXMzuDJsd8iYs
DCCk2QhufTOzVjQ/f6nD/I3vOLWft8MiFG1vj2Ikjxm9qq8nzzWtyVP8FFQQHBAe
fQYYFtS184FGMl9OWLKg4TGtg7l/AajX4MuuoRInP7IZcM6Mzz2MPtufpmBmQj2G
2Q9A/01pA7Ey2uq1HP1tgA6vDSu70eOmsugMQS2WNLpHPzqxCsnsEw1NXH7HgOG2
aEXax7zosDkF3tiJhvOIgQsOlZGqri38kb8N0TMwEkvJnKtw5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM6HecBMQwTvBZ2shsBeW7Go2Ty7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjRmMzRkOGEtOGM2Mi0z
ODYzLTk2OTMtZTQ2ZWJhNWRkOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD6qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK8sHvIULJEa/vhG9F413ESDFFPEaubbrqrICSQnvTVucVVSlsbzI6QY
B3/QNA0m07OcC5QJHTw6qosMhnOE25l7qXP4rPXfXo+7y9u5SzUZAx9qoYey5zF0
WWTMQYkjPKvrE5JdQ+drKs6E9DKczoaXea1KpGaeL3TPsZoJHHMfoU/syGiVGpXn
RJIqvkJJZD3FdwqwOejCHVKm4zYhbHkBbDnBWeiy9PYGFLWR51XNYLq1OIifuVa6
SayUwTFCl92H72xIx2ML6M+QXy7bNA2xzhsNUOD8lfyjVJ7YCbncRr8lqjDf62l2
mdZ2dPcKWCOXuAPEuSv9RHL8nwOYKgs=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:52 2025 by rpki-client