Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/34ac0fce-a806-378a-8349-b526b22d59b9.roa
File:                     34ac0fce-a806-378a-8349-b526b22d59b9.roa (raw, json)
Hash identifier:          ksuD7IsjWWoZszq4AnLxKktldceXk0pQQAa5MhOxI9U=
Subject key identifier:   50:39:9D:5E:DA:A7:AD:17:C7:64:E6:48:22:2B:2D:4F:EC:92:08:58
Certificate issuer:       /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial:       010D0C9F43285848882BC52E6D441C028D277700
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/34ac0fce-a806-378a-8349-b526b22d59b9.roa
Signing time:             Mon 13 Jan 2025 14:45:01 +0000
ROA not before:           Mon 13 Jan 2025 14:45:01 +0000
ROA not after:            Sun 13 Apr 2025 13:45:01 +0000
asID:                     6079
IP address blocks:        199.96.164.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:2b:c5:2e:6d:44:1c:02:8d:27:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
        Validity
            Not Before: Jan 13 14:45:01 2025 GMT
            Not After : Apr 13 13:45:01 2025 GMT
        Subject: CN=f164f103-03f1-43d6-9bcd-b8c7d775c1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:26:52:24:53:40:56:f3:74:d3:0e:9b:5b:
                    cf:9a:b4:14:d1:d8:27:53:b1:16:88:cc:4f:ff:bf:
                    62:bd:b9:b6:0d:10:77:38:74:dd:45:5a:ee:ba:15:
                    70:17:5f:19:19:3f:de:c9:dc:f7:23:49:76:a1:38:
                    64:72:b6:7f:88:bf:e3:da:4d:70:07:f7:57:44:48:
                    9c:d3:cc:ce:82:9c:dd:49:0c:6e:74:e6:83:b2:3e:
                    37:2e:6b:29:a2:65:43:2e:db:c6:a6:76:8b:f2:1d:
                    f3:e9:7f:8c:92:bc:10:19:3f:d3:04:cd:8a:5c:76:
                    b3:3a:35:ba:61:d0:de:be:b1:4d:84:1d:4b:d2:1e:
                    87:39:aa:89:f8:d0:9d:9f:ed:c9:b5:12:30:a3:61:
                    41:fa:64:37:ec:a2:89:6e:29:ab:c7:94:95:93:0e:
                    31:fb:9f:a5:7d:cd:82:46:81:d6:18:31:eb:53:94:
                    d5:5a:77:a9:13:76:12:01:92:8c:76:dd:82:84:df:
                    b8:cf:1e:73:2a:d8:8a:2c:1f:5e:11:2d:2b:ad:b0:
                    c2:83:46:6f:d5:8e:48:cc:10:83:68:71:e0:2d:a8:
                    a1:6d:1f:86:ff:d3:38:2f:64:2c:bc:af:06:15:08:
                    ea:f6:30:69:ae:19:ed:e9:31:30:0d:39:db:6f:b7:
                    89:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:39:9D:5E:DA:A7:AD:17:C7:64:E6:48:22:2B:2D:4F:EC:92:08:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/34ac0fce-a806-378a-8349-b526b22d59b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl

            X509v3 Authority Key Identifier:
                keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:84:29:3a:92:67:e4:1c:49:6a:5f:5b:aa:0b:30:de:3e:30:
         88:27:41:4f:a5:9f:ea:e7:e0:d6:6d:1f:0d:1e:38:d0:2d:12:
         21:29:e7:76:61:64:ae:9d:4c:16:e8:15:ef:93:95:c2:09:72:
         18:b4:ea:84:42:dd:3f:bf:bf:98:b6:47:69:b1:c0:33:95:3a:
         58:68:8a:03:af:69:75:a7:59:2e:4e:b4:d4:00:72:62:1d:16:
         16:a9:86:70:7a:68:27:c5:33:c9:8c:46:66:6e:44:14:18:58:
         de:0d:2e:1c:a3:d1:9f:31:44:a2:93:4f:f9:96:b3:2c:3f:78:
         04:75:db:66:0c:b8:43:18:cc:75:ac:6c:26:c6:ad:5b:80:66:
         74:55:90:3d:62:4a:2a:bb:42:40:f8:9c:6e:a3:f7:29:5c:c8:
         e3:8e:3f:42:27:8b:b6:17:92:6d:84:24:b3:6a:f4:d0:08:46:
         47:18:89:df:da:e3:81:11:9e:71:ab:87:38:b4:e2:c2:ee:50:
         67:ea:08:43:12:d1:63:32:66:5a:95:97:6f:57:01:e6:4b:d8:
         6c:3e:d9:4b:dc:42:73:8e:66:04:11:86:bd:78:8f:9c:ab:9b:
         29:1a:67:43:6d:c2:1a:0c:55:a3:8f:f3:d8:1a:2e:48:41:4c:
         62:4b:2c:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiIK8UubUQcAo0ndwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDQxOGI3YmItN2YxYy00MzMzLTliOGUtYmFiZjhiOGZh
MzkxMB4XDTI1MDExMzE0NDUwMVoXDTI1MDQxMzEzNDUwMVowLzEtMCsGA1UEAxMk
ZjE2NGYxMDMtMDNmMS00M2Q2LTliY2QtYjhjN2Q3NzVjMWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBUmUiRTQFbzdNMOm1vPmrQU0dgnU7EWiMxP
/79ivbm2DRB3OHTdRVruuhVwF18ZGT/eydz3I0l2oThkcrZ/iL/j2k1wB/dXREic
08zOgpzdSQxudOaDsj43LmspomVDLtvGpnaL8h3z6X+MkrwQGT/TBM2KXHazOjW6
YdDevrFNhB1L0h6HOaqJ+NCdn+3JtRIwo2FB+mQ37KKJbimrx5SVkw4x+5+lfc2C
RoHWGDHrU5TVWnepE3YSAZKMdt2ChN+4zx5zKtiKLB9eES0rrbDCg0Zv1Y5IzBCD
aHHgLaihbR+G/9M4L2QsvK8GFQjq9jBprhnt6TEwDTnbb7eJAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFA5nV7ap60Xx2TmSCIrLU/skghYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NDE4
YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJmOGI4ZmEzOTEvMzRhYzBmY2UtYTgwNi0z
NzhhLTgzNDktYjUyNmIyMmQ1OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDQxOGI3YmItN2YxYy00MzMzLTli
OGUtYmFiZjhiOGZhMzkxLzQ0MThiN2JiLTdmMWMtNDMzMy05YjhlLWJhYmY4Yjhm
YTM5MS5jcmwwHwYDVR0jBBgwFoAUF+nkvGubJJ1zMAqaiW7ze5zlQ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80NDE4YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJm
OGI4ZmEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2CkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaEKTqSZ+QcSWpfW6oLMN4+MIgnQU+ln+rn4NZtHw0eONAtEiEp53Zh
ZK6dTBboFe+TlcIJchi06oRC3T+/v5i2R2mxwDOVOlhoigOvaXWnWS5OtNQAcmId
FhaphnB6aCfFM8mMRmZuRBQYWN4NLhyj0Z8xRKKTT/mWsyw/eAR122YMuEMYzHWs
bCbGrVuAZnRVkD1iSiq7QkD4nG6j9ylcyOOOP0Ini7YXkm2EJLNq9NAIRkcYid/a
44ERnnGrhzi04sLuUGfqCEMS0WMyZlqVl29XAeZL2Gw+2UvcQnOOZgQRhr14j5yr
mykaZ0NtwhoMVaOP89gaLkhBTGJLLAk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:32 2025 by rpki-client