Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14e5d667-fd27-354f-892c-dfef0139784f.roa
File:                     14e5d667-fd27-354f-892c-dfef0139784f.roa (raw, json)
Hash identifier:          sYMBwZ4qrzCY+tasLiN5o2all9OSsVfbxCl+Uo2if6g=
Subject key identifier:   A2:26:D5:44:68:02:8C:29:6F:16:27:80:28:AA:12:84:60:F8:D5:F8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584930DE7B6F17BD73D5973CC840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14e5d667-fd27-354f-892c-dfef0139784f.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     22773
IP address blocks:        70.167.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:7b:6f:17:bd:73:d5:97:3c:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=7974a29e-c80f-42af-8d01-fb1c6db544b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:a9:3b:35:9f:ec:f7:67:a2:28:00:b0:02:
                    af:07:1d:7b:27:2c:22:50:de:e7:ed:c2:b9:18:b1:
                    e0:0f:d5:c3:5b:7a:65:95:55:54:cf:b0:ec:68:a8:
                    d4:73:24:eb:ee:4f:3e:74:63:61:57:11:41:8b:c5:
                    22:40:54:d8:1d:5c:4e:a5:17:ad:56:b0:74:ac:a4:
                    ef:3e:02:5c:fb:ef:90:4f:f4:4b:d4:97:da:b1:c6:
                    e5:49:27:e1:48:0a:4e:71:bf:a9:e5:13:ce:f4:12:
                    42:1b:da:1b:ac:7d:16:a4:8d:7a:45:1b:93:62:70:
                    2d:83:e4:44:0b:86:1a:fa:be:11:ff:27:bb:ed:eb:
                    9f:06:3e:82:14:7a:f2:5d:cc:28:e0:f9:2e:8a:5d:
                    dc:82:4e:0d:75:88:a9:fd:07:45:ec:97:89:f6:1c:
                    6a:f8:98:58:70:57:d5:b2:00:a4:ef:46:12:49:2d:
                    71:d2:c6:32:97:37:0e:78:db:52:a7:83:5a:4a:69:
                    94:21:25:ff:7f:32:9d:f5:14:e2:2c:4d:e1:63:23:
                    67:ea:48:1a:7d:27:de:b4:9c:f6:61:e1:0a:1c:25:
                    83:a9:e0:f8:5b:8b:04:4e:f8:98:0b:99:24:a0:aa:
                    4f:dc:20:b9:5d:b4:0c:02:c3:bd:7b:a2:d2:f2:96:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:26:D5:44:68:02:8C:29:6F:16:27:80:28:AA:12:84:60:F8:D5:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14e5d667-fd27-354f-892c-dfef0139784f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.167.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a3:34:46:60:cc:60:42:6f:b3:ff:f3:c7:7d:9e:8f:da:bc:
         69:68:8d:82:80:f3:d3:33:4b:28:c1:01:c4:96:67:a9:b5:79:
         66:3e:38:00:7e:f6:7c:42:11:f9:00:3b:ef:3b:4e:31:f4:b7:
         a4:ec:ec:c6:33:fa:83:b0:9f:77:e2:1a:e0:85:5f:31:83:0c:
         e1:2f:be:bf:6d:c0:53:83:f4:af:e4:76:11:fe:a1:b4:c9:30:
         6d:18:98:6b:c4:8b:01:04:cb:ca:3f:81:51:f9:c6:4d:93:eb:
         7c:f2:ff:95:6d:cd:61:e7:87:ed:e5:9e:7f:6f:9d:cd:13:4c:
         13:ac:85:d7:3b:a9:0a:47:79:46:3f:64:da:8e:bf:71:4c:ec:
         6f:50:16:7c:29:00:32:c5:ab:d7:96:48:0e:80:38:0a:43:46:
         ff:fb:c5:30:ae:6c:22:34:f1:89:14:3b:0b:06:55:08:a2:b2:
         f1:80:7f:9e:98:ce:0a:46:9b:ac:af:4c:80:95:0a:62:8c:36:
         4b:d5:8c:fb:83:f9:c3:03:4c:ed:84:7c:bb:9d:7d:cd:c6:a0:
         8e:b0:11:f4:f7:ee:7a:f8:bc:dd:f8:dd:5b:2e:ac:aa:14:79:
         52:a0:16:56:04:3f:9e:2a:0c:49:4f:d5:e7:cc:cd:1b:85:5e:
         07:86:b7:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3ntvF71z1Zc8yEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
Nzk3NGEyOWUtYzgwZi00MmFmLThkMDEtZmIxYzZkYjU0NGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNSpOzWf7PdnoigAsAKvBx17JywiUN7n7cK5
GLHgD9XDW3pllVVUz7DsaKjUcyTr7k8+dGNhVxFBi8UiQFTYHVxOpRetVrB0rKTv
PgJc+++QT/RL1JfascblSSfhSApOcb+p5RPO9BJCG9obrH0WpI16RRuTYnAtg+RE
C4Ya+r4R/ye77eufBj6CFHryXcwo4Pkuil3cgk4NdYip/QdF7JeJ9hxq+JhYcFfV
sgCk70YSSS1x0sYylzcOeNtSp4NaSmmUISX/fzKd9RTiLE3hYyNn6kgafSfetJz2
YeEKHCWDqeD4W4sETviYC5kkoKpP3CC5XbQMAsO9e6LS8pb9bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKIm1URoAowpbxYngCiqEoRg+NX4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTRlNWQ2NjctZmQyNy0z
NTRmLTg5MmMtZGZlZjAxMzk3ODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqcMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyjNEZgzGBCb7P/88d9no/avGlojYKA89MzSyjBAcSWZ6m1eWY+OAB+
9nxCEfkAO+87TjH0t6Ts7MYz+oOwn3fiGuCFXzGDDOEvvr9twFOD9K/kdhH+obTJ
MG0YmGvEiwEEy8o/gVH5xk2T63zy/5VtzWHnh+3lnn9vnc0TTBOshdc7qQpHeUY/
ZNqOv3FM7G9QFnwpADLFq9eWSA6AOApDRv/7xTCubCI08YkUOwsGVQiisvGAf56Y
zgpGm6yvTICVCmKMNkvVjPuD+cMDTO2EfLudfc3GoI6wEfT37nr4vN343VsurKoU
eVKgFlYEP54qDElP1efMzRuFXgeGtx0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:58:31 2025 by rpki-client