Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c681f7e-5477-3aaf-a9ff-f76362e699b0.roa
File:                     9c681f7e-5477-3aaf-a9ff-f76362e699b0.roa (raw, json)
Hash identifier:          oAq09aWoj6vQ2ItCWoYiVdLu/KqLV2Ec+PXzaJ5i/HY=
Subject key identifier:   07:04:E0:F8:A2:22:A1:E7:1B:A3:DD:CD:41:52:50:CC:AA:E3:DB:CE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D3F641E461683F363C605F8C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c681f7e-5477-3aaf-a9ff-f76362e699b0.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 07 Mar 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        205.185.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3f:64:1e:46:16:83:f3:63:c6:05:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Mar  7 05:00:00 2028 GMT
        Subject: CN=d5154fb1-1809-4487-9731-6eff0d717bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:bd:76:1a:86:88:36:05:e4:2f:76:f2:bf:
                    ed:50:99:22:cf:6c:a6:2e:2e:a1:a1:5e:de:53:57:
                    d1:0a:e6:e8:19:27:a0:37:7b:e0:e7:e7:58:b6:d2:
                    c6:31:ff:b6:91:35:0c:6c:10:5b:4f:95:1e:e0:0f:
                    a0:ae:61:9c:66:30:33:72:8a:e8:ea:10:34:5e:3a:
                    fb:22:23:88:30:53:03:2b:0b:a1:14:ec:c5:84:a1:
                    57:9f:51:cc:55:05:01:7e:11:42:93:74:e5:23:89:
                    d6:99:6f:33:f3:65:c9:7c:8a:37:2e:3c:c0:d0:76:
                    29:17:9f:76:0b:2c:60:23:14:de:a2:67:4d:a7:69:
                    d5:2d:24:fa:a1:dc:42:32:ae:33:43:07:23:fc:03:
                    0f:09:81:91:f5:fa:a3:b2:65:d6:29:ed:85:2d:37:
                    bc:51:08:e0:bd:02:3a:af:9b:e2:d8:6b:51:3a:ea:
                    b3:d3:47:1b:1d:21:56:ac:49:c3:60:7d:0f:68:7a:
                    ec:ab:44:46:b1:b0:a8:67:56:48:ab:a2:f3:de:df:
                    2f:22:e6:75:ed:a8:b5:95:4b:99:b7:73:6d:51:ab:
                    ba:a3:92:e4:81:18:fb:f7:62:60:a1:cf:03:80:ca:
                    9e:bb:4c:05:c0:4b:c6:a2:e7:d6:0f:4d:fc:62:a1:
                    63:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:04:E0:F8:A2:22:A1:E7:1B:A3:DD:CD:41:52:50:CC:AA:E3:DB:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c681f7e-5477-3aaf-a9ff-f76362e699b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:51:40:35:e0:fc:5c:02:fc:27:69:da:14:fa:ae:31:65:ba:
         7f:fd:77:41:58:59:23:bb:c7:50:44:51:ed:1e:62:52:fc:ce:
         a4:36:19:ee:e6:ca:c9:ab:18:76:bf:91:cb:15:19:92:3d:20:
         95:ca:f4:b8:fa:1c:b5:be:34:48:e8:60:3a:97:e4:75:62:d7:
         1d:17:e4:80:72:3d:d0:ae:e4:bb:0c:27:53:f3:25:ce:2b:e6:
         7b:80:ab:5d:6e:f8:be:0e:10:49:05:7e:d2:db:61:a1:e0:73:
         a5:df:8d:a0:d6:f1:30:97:3b:dc:ab:af:21:b6:b1:69:96:15:
         a8:2c:ea:a3:70:41:55:35:b9:ab:fa:87:6e:0a:ac:40:61:1f:
         8f:ee:33:9a:04:e4:7f:86:7d:49:46:8a:97:bc:42:cd:ad:1f:
         f3:16:2e:61:30:2c:f9:ac:ab:6c:e5:14:34:8b:ba:79:d0:32:
         ab:70:ff:0b:ee:6b:53:08:11:21:30:3a:cf:0f:9c:85:02:3e:
         83:50:48:1a:82:8a:15:62:e8:49:7c:cb:dd:85:4f:2a:5b:64:
         72:c2:08:39:22:57:75:15:ef:00:43:74:ad:9d:4e:a4:01:8e:
         4e:97:79:ba:73:b2:fc:ed:3b:b6:1d:2c:58:69:7a:7b:3c:5b:
         0e:22:b7:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0/ZB5GFoPzY8YF+MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMxNTA0MDAwMFoXDTI4MDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZDUxNTRmYjEtMTgwOS00NDg3LTk3MzEtNmVmZjBkNzE3YmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm+9dhqGiDYF5C928r/tUJkiz2ymLi6hoV7e
U1fRCuboGSegN3vg5+dYttLGMf+2kTUMbBBbT5Ue4A+grmGcZjAzcoro6hA0Xjr7
IiOIMFMDKwuhFOzFhKFXn1HMVQUBfhFCk3TlI4nWmW8z82XJfIo3LjzA0HYpF592
CyxgIxTeomdNp2nVLST6odxCMq4zQwcj/AMPCYGR9fqjsmXWKe2FLTe8UQjgvQI6
r5vi2GtROuqz00cbHSFWrEnDYH0PaHrsq0RGsbCoZ1ZIq6Lz3t8vIuZ17ai1lUuZ
t3NtUau6o5LkgRj792Jgoc8DgMqeu0wFwEvGoufWD038YqFjgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcE4PiiIqHnG6PdzUFSUMyq49vOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWM2ODFmN2UtNTQ3Ny0z
YWFmLWE5ZmYtZjc2MzYyZTY5OWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzbkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRRQDXg/FwC/Cdp2hT6rjFlun/9d0FYWSO7x1BEUe0eYlL8zqQ2Ge7m
ysmrGHa/kcsVGZI9IJXK9Lj6HLW+NEjoYDqX5HVi1x0X5IByPdCu5LsMJ1PzJc4r
5nuAq11u+L4OEEkFftLbYaHgc6XfjaDW8TCXO9yrryG2sWmWFags6qNwQVU1uav6
h24KrEBhH4/uM5oE5H+GfUlGipe8Qs2tH/MWLmEwLPmsq2zlFDSLunnQMqtw/wvu
a1MIESEwOs8PnIUCPoNQSBqCihVi6El8y92FTypbZHLCCDkiV3UV7wBDdK2dTqQB
jk6XebpzsvztO7YdLFhpens8Ww4it0E=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:12 2025 by rpki-client