Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa
File:                     5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa (raw, json)
Hash identifier:          bc1nEMntWrwpvr9XiN29kbZIEQOgq7js071VU9c8APA=
Subject key identifier:   E6:3F:9A:88:52:92:41:12:A2:B7:58:23:4A:7A:F5:B4:A4:69:D2:AB
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285848C43C649353B5839474CE3A00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa
Signing time:             Tue 04 Feb 2025 03:07:00 +0000
ROA not before:           Tue 04 Feb 2025 03:07:00 +0000
ROA not after:            Mon 05 May 2025 02:07:00 +0000
asID:                     14813
IP address blocks:        69.73.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:3c:64:93:53:b5:83:94:74:ce:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Feb  4 03:07:00 2025 GMT
            Not After : May  5 02:07:00 2025 GMT
        Subject: CN=94f563a8-bfd0-4c93-aaa9-6a636dacaa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a5:67:d9:d9:df:4f:2e:25:b0:e1:63:94:4e:
                    b6:12:da:7d:36:d8:d3:54:c8:1d:46:9c:27:ff:41:
                    b5:99:54:1b:ac:46:02:fc:99:39:fc:74:96:30:a5:
                    12:52:5a:fd:f4:60:ec:68:95:e6:2e:91:9f:f9:26:
                    95:92:e1:15:21:76:eb:36:2b:b9:f5:32:e5:8f:14:
                    47:c2:d7:8c:e5:e4:b3:ee:17:4f:68:f6:da:f7:73:
                    9c:da:49:14:3f:85:aa:0d:9f:ee:f4:99:64:3a:d4:
                    24:45:7e:0f:dd:9c:d6:f2:fc:4a:1c:53:2c:51:25:
                    b4:31:36:9f:89:94:03:24:ce:55:cb:ac:dd:26:bb:
                    33:83:cf:d6:88:f7:0c:89:d9:ea:e5:e5:df:b5:55:
                    5f:5b:1b:b3:25:32:da:3a:59:0c:71:ba:a3:af:74:
                    84:f3:07:2e:74:50:95:27:09:e4:d1:5d:72:b2:e7:
                    63:f2:4b:dd:fb:c7:14:60:7c:af:71:e2:46:b1:e6:
                    6d:ea:90:18:9e:b0:25:09:c8:99:97:cc:c1:c4:aa:
                    b6:a1:60:d0:85:41:e7:bb:52:73:f4:c3:a8:c3:b7:
                    31:cb:37:93:d1:8f:c4:73:4f:49:9b:20:89:d7:6a:
                    62:a3:2e:c7:0a:95:c4:1a:74:05:d7:d5:b2:a9:76:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3F:9A:88:52:92:41:12:A2:B7:58:23:4A:7A:F5:B4:A4:69:D2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:15:6d:35:2f:06:d6:dc:b6:04:de:7a:17:7d:3a:c9:47:cb:
         ba:05:40:ad:3f:90:07:28:92:32:b2:7b:14:0d:e5:6d:97:d4:
         4d:ba:ea:48:03:86:11:b2:f0:82:ff:81:ba:f1:2c:14:33:cf:
         01:5f:e1:52:7f:69:79:f4:d0:f5:db:e9:a4:a9:de:af:49:e6:
         0d:b9:10:f5:e4:5c:77:c9:0c:04:21:94:28:c5:b2:5b:44:97:
         11:02:ca:03:58:1e:a6:a4:5a:96:c7:c5:1e:7a:40:09:08:8d:
         ff:25:5f:c7:56:3d:6a:1b:f6:f6:04:c3:14:e4:b3:2a:25:63:
         8b:39:a0:ce:b2:f4:69:3a:bc:c1:19:80:aa:75:89:4e:15:8b:
         44:0e:72:6b:5a:f0:95:32:4c:ea:71:60:03:eb:d0:70:9f:e7:
         2a:59:49:7e:57:9c:13:4d:ac:d8:b3:96:eb:47:b2:28:5b:79:
         90:42:b0:9a:0f:c6:63:1b:5c:ce:fe:fd:b4:82:95:c8:e4:47:
         2b:26:90:69:e8:f7:b9:01:d6:0b:20:c2:76:d1:88:07:25:6d:
         7d:59:ca:c3:aa:dc:fb:08:ae:9c:0c:bc:5e:62:63:de:39:0c:
         63:ab:39:42:42:9c:53:6f:8d:d8:7c:e3:b6:94:d1:91:5f:cb:
         3c:51:0c:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEPGSTU7WDlHTOOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDIwNDAzMDcwMFoXDTI1MDUwNTAyMDcwMFowLzEtMCsGA1UEAxMk
OTRmNTYzYTgtYmZkMC00YzkzLWFhYTktNmE2MzZkYWNhYTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qVn2dnfTy4lsOFjlE62Etp9NtjTVMgdRpwn
/0G1mVQbrEYC/Jk5/HSWMKUSUlr99GDsaJXmLpGf+SaVkuEVIXbrNiu59TLljxRH
wteM5eSz7hdPaPba93Oc2kkUP4WqDZ/u9JlkOtQkRX4P3ZzW8vxKHFMsUSW0MTaf
iZQDJM5Vy6zdJrszg8/WiPcMidnq5eXftVVfWxuzJTLaOlkMcbqjr3SE8wcudFCV
Jwnk0V1ysudj8kvd+8cUYHyvceJGseZt6pAYnrAlCciZl8zBxKq2oWDQhUHnu1Jz
9MOow7cxyzeT0Y/Ec09JmyCJ12pioy7HCpXEGnQF19WyqXZ97QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOY/mohSkkESordYI0p69bSkadKrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNWFmZjg3MTgtMTU0NS0z
YWJlLThjOGMtMWVmOGVhNDZlMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUnsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUVbTUvBtbctgTeehd9OslHy7oFQK0/kAcokjKyexQN5W2X1E266kgD
hhGy8IL/gbrxLBQzzwFf4VJ/aXn00PXb6aSp3q9J5g25EPXkXHfJDAQhlCjFsltE
lxECygNYHqakWpbHxR56QAkIjf8lX8dWPWob9vYEwxTksyolY4s5oM6y9Gk6vMEZ
gKp1iU4Vi0QOcmta8JUyTOpxYAPr0HCf5ypZSX5XnBNNrNizlutHsihbeZBCsJoP
xmMbXM7+/bSClcjkRysmkGno97kB1gsgwnbRiAclbX1ZysOq3PsIrpwMvF5iY945
DGOrOUJCnFNvjdh847aU0ZFfyzxRDFw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:22 2025 by rpki-client