Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee1a0a9-0ebc-36d4-874f-723547c4138c.roa
File:                     dee1a0a9-0ebc-36d4-874f-723547c4138c.roa (raw, json)
Hash identifier:          RSj1hORALtDPcccPLcD2VoAvxUrv2ZBCEIgBoPTa9mU=
Subject key identifier:   D1:46:16:AB:30:4C:39:1C:BE:53:D4:D5:DF:BF:89:8F:EB:76:55:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BB40178BAF7E3CE794F30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee1a0a9-0ebc-36d4-874f-723547c4138c.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7016
IP address blocks:        67.171.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:b4:01:78:ba:f7:e3:ce:79:4f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=313a8fc6-9b52-464f-b583-db117dec81b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:db:49:87:64:8f:f9:05:04:8c:0f:0d:65:
                    e7:1d:c0:f0:42:b5:e4:a0:6b:21:fa:5d:4c:95:c0:
                    04:57:da:83:f1:64:2c:10:78:d4:12:f1:c3:65:b9:
                    d6:43:de:99:67:62:f4:40:71:e4:e6:35:28:91:ef:
                    ac:49:b2:f2:52:c9:aa:43:62:ba:3b:1a:c0:e5:65:
                    ae:9b:23:88:eb:3e:1f:31:df:5a:9b:2c:48:fe:2c:
                    66:d4:74:c0:6b:db:3d:54:9d:4c:f8:b1:84:6b:2e:
                    cb:95:31:f0:dd:c5:dd:39:43:e7:a2:40:86:e6:59:
                    09:a4:ff:67:4d:82:cc:3a:aa:2b:ba:29:83:18:20:
                    fb:cd:5c:fb:20:74:a3:d6:8d:12:af:44:20:01:cb:
                    9d:e6:1c:59:17:8b:6f:5a:a4:85:c6:b3:af:67:4e:
                    0d:0b:08:bd:46:9c:9f:ee:74:93:bc:52:02:c6:eb:
                    78:79:54:84:3d:7b:2b:f5:1d:ac:2c:05:6a:e5:10:
                    06:32:ac:17:34:8b:47:fd:e7:98:7b:1e:c4:73:3f:
                    1d:a9:78:be:57:b5:95:4a:f2:09:07:65:43:8a:4f:
                    e4:e2:07:74:15:05:4a:cf:25:dd:6f:07:bb:0c:da:
                    ee:ca:5f:c9:3b:75:d0:af:56:79:f2:b1:a0:e1:65:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:46:16:AB:30:4C:39:1C:BE:53:D4:D5:DF:BF:89:8F:EB:76:55:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee1a0a9-0ebc-36d4-874f-723547c4138c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.171.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f9:ec:08:73:a5:01:21:d0:86:16:88:40:27:3e:ec:b5:ed:
         c7:36:e4:93:33:06:f7:6e:eb:d0:97:b1:7e:fc:e1:b0:0f:5d:
         4b:a6:a8:3a:2c:d7:3d:f7:ac:b0:5a:77:4b:88:2f:91:be:6c:
         dd:db:17:44:17:3b:8c:02:e2:5a:2a:fb:8a:25:70:2a:23:4b:
         53:ad:66:8a:83:8b:d5:3f:9f:18:f9:6d:89:2d:93:2a:16:94:
         0f:75:b4:f7:a0:3a:b4:da:12:ae:4d:65:41:e2:ec:b6:68:f1:
         8b:a7:01:d6:7d:63:f5:19:63:5b:ac:f4:df:9c:d7:af:81:0c:
         ef:5e:c2:50:61:36:d8:b5:94:38:91:d9:39:d1:e1:5c:8c:94:
         55:06:f2:3b:20:ea:93:18:f1:2b:d8:36:7e:7d:68:47:c2:1b:
         6e:eb:fe:68:fe:b5:62:e4:75:64:86:ed:5a:9f:af:1b:10:15:
         97:1a:82:d7:eb:6d:c1:3f:66:a9:e9:24:d7:a0:4c:eb:c9:84:
         5d:b2:d8:61:83:2d:29:8f:c8:1b:4f:8f:9a:f2:c5:13:a4:05:
         1d:cd:cd:1f:e9:f5:cf:03:91:12:7c:24:3f:e7:2c:2d:09:84:
         de:1c:0d:e8:20:5f:15:ad:fb:b6:cd:b2:59:24:06:0f:91:4a:
         9a:a5:bd:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea7QBeLr34855TzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MzEzYThmYzYtOWI1Mi00NjRmLWI1ODMtZGIxMTdkZWM4MWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+3bSYdkj/kFBIwPDWXnHcDwQrXkoGsh+l1M
lcAEV9qD8WQsEHjUEvHDZbnWQ96ZZ2L0QHHk5jUoke+sSbLyUsmqQ2K6OxrA5WWu
myOI6z4fMd9amyxI/ixm1HTAa9s9VJ1M+LGEay7LlTHw3cXdOUPnokCG5lkJpP9n
TYLMOqoruimDGCD7zVz7IHSj1o0Sr0QgAcud5hxZF4tvWqSFxrOvZ04NCwi9Rpyf
7nSTvFICxut4eVSEPXsr9R2sLAVq5RAGMqwXNItH/eeYex7Ecz8dqXi+V7WVSvIJ
B2VDik/k4gd0FQVKzyXdbwe7DNruyl/JO3XQr1Z58rGg4WVBXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNFGFqswTDkcvlPU1d+/iY/rdlXoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGVlMWEwYTktMGViYy0z
NmQ0LTg3NGYtNzIzNTQ3YzQxMzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ6tgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE757AhzpQEh0IYWiEAnPuy17cc25JMzBvdu69CXsX784bAPXUumqDos
1z33rLBad0uIL5G+bN3bF0QXO4wC4loq+4olcCojS1OtZoqDi9U/nxj5bYktkyoW
lA91tPegOrTaEq5NZUHi7LZo8YunAdZ9Y/UZY1us9N+c16+BDO9ewlBhNti1lDiR
2TnR4VyMlFUG8jsg6pMY8SvYNn59aEfCG27r/mj+tWLkdWSG7VqfrxsQFZcagtfr
bcE/ZqnpJNegTOvJhF2y2GGDLSmPyBtPj5ryxROkBR3NzR/p9c8DkRJ8JD/nLC0J
hN4cDeggXxWt+7bNslkkBg+RSpqlvUs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:55:28 2025 by rpki-client