Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/d65b5879-bd91-30f3-adc6-c3604bba9a74.roa
File:                     d65b5879-bd91-30f3-adc6-c3604bba9a74.roa (raw, json)
Hash identifier:          OD24N6ROs214+z4PK0HAUEyg5WiFr6uK9e8dvVbNZyY=
Subject key identifier:   B4:B8:34:01:E4:34:19:72:78:2C:EE:AF:3D:87:A8:E0:95:DD:F9:FB
Certificate issuer:       /CN=4e69a311-ed99-4d08-bc96-aec2d6a1bfc0
Certificate serial:       010D0C9F4328584902EC17194BC312957F8A2280
Authority key identifier: 41:D6:BA:85:75:7B:5A:34:F1:35:BE:2C:F3:B9:C4:AB:8C:AB:71:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/d65b5879-bd91-30f3-adc6-c3604bba9a74.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     32238
IP address blocks:        162.120.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:17:19:4b:c3:12:95:7f:8a:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e69a311-ed99-4d08-bc96-aec2d6a1bfc0
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=da85f839-0557-4bf8-bd54-4a5e22bbd501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:34:9e:c1:a9:7b:48:53:41:8a:49:7d:cc:80:
                    17:26:d6:24:b2:6b:0a:ef:a1:23:77:f2:94:38:7a:
                    9b:06:30:5a:76:f4:91:0b:2d:43:2d:c3:ed:b3:9e:
                    e6:40:e7:84:f1:25:14:76:02:eb:5c:e9:03:a1:fd:
                    fd:59:cc:77:f2:ef:f8:c2:20:18:98:7a:d8:94:a4:
                    88:4c:b1:21:08:64:75:3e:bb:ac:25:ef:b4:41:a3:
                    35:d0:54:80:90:88:e2:37:c5:0f:0d:a7:68:e1:bc:
                    d7:74:a8:c3:19:60:4a:34:94:dc:ce:0b:0f:43:f2:
                    c9:b9:8c:4d:2f:7e:ad:7c:d4:e5:9f:f6:bc:ab:5b:
                    3b:87:7e:3f:f0:d0:35:77:47:e9:7e:0d:61:ce:91:
                    25:bc:11:84:30:e0:8e:28:cb:b1:4c:81:97:32:1b:
                    cb:86:de:79:ab:37:6e:01:0b:00:a7:75:98:a5:3c:
                    2f:68:91:5b:68:fd:2e:79:37:ca:d0:5c:89:03:0f:
                    f4:ec:f5:9f:4e:0e:de:3f:c1:90:4a:65:39:7a:07:
                    2f:32:61:07:a5:e0:e2:16:9e:78:1d:71:74:a4:4c:
                    ef:89:82:bc:6b:23:dd:9c:9d:00:c0:ff:1f:4d:4c:
                    72:2a:6e:c3:72:c2:cb:8e:a2:70:73:21:10:84:78:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B8:34:01:E4:34:19:72:78:2C:EE:AF:3D:87:A8:E0:95:DD:F9:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/d65b5879-bd91-30f3-adc6-c3604bba9a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.crl

            X509v3 Authority Key Identifier:
                keyid:41:D6:BA:85:75:7B:5A:34:F1:35:BE:2C:F3:B9:C4:AB:8C:AB:71:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ac:b4:41:77:18:a4:7c:77:49:e2:bc:d6:29:52:f9:b3:22:
         59:4f:f3:1c:96:58:83:07:2f:f4:8b:44:7b:1d:98:09:0a:84:
         33:46:5d:c3:e7:e5:3e:2c:74:21:63:dc:f3:f9:65:0e:95:1f:
         58:63:3c:d2:85:ce:2c:78:9e:3b:d0:c4:08:16:41:27:be:21:
         df:cd:e1:53:6a:51:9b:a8:79:dd:d5:5e:fb:cc:5d:b1:05:25:
         ca:4e:8c:f1:d1:f0:fb:e9:8a:fb:09:4b:11:c0:42:4d:12:a9:
         20:6e:7a:39:fb:d6:71:d9:dd:98:6f:58:12:e5:d0:de:d9:db:
         aa:47:cf:fd:92:7a:bd:a8:1e:c1:23:8f:4c:30:1a:e8:b4:32:
         4e:26:02:4e:68:56:5b:4b:f3:bd:e6:51:59:ed:6e:42:a0:71:
         9b:90:a6:b3:a4:26:2f:dd:3a:5c:c1:00:81:ba:0e:d7:60:ab:
         29:2d:3d:12:b5:70:75:18:66:0e:c6:32:a5:8d:d2:5b:03:3f:
         d0:d0:dd:7d:00:3a:6f:9a:00:47:43:b5:36:4a:e3:dd:52:8c:
         da:c3:1e:b1:72:cc:30:32:bc:6d:7b:98:e5:15:3e:29:9c:fb:
         00:fc:c3:82:a9:1e:df:10:c6:5d:28:0b:f3:fe:5a:65:e7:8a:
         3e:fe:39:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BcZS8MSlX+KIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU2OWEzMTEtZWQ5OS00ZDA4LWJjOTYtYWVjMmQ2YTFi
ZmMwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
ZGE4NWY4MzktMDU1Ny00YmY4LWJkNTQtNGE1ZTIyYmJkNTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDSewal7SFNBikl9zIAXJtYksmsK76Ejd/KU
OHqbBjBadvSRCy1DLcPts57mQOeE8SUUdgLrXOkDof39Wcx38u/4wiAYmHrYlKSI
TLEhCGR1PrusJe+0QaM10FSAkIjiN8UPDado4bzXdKjDGWBKNJTczgsPQ/LJuYxN
L36tfNTln/a8q1s7h34/8NA1d0fpfg1hzpElvBGEMOCOKMuxTIGXMhvLht55qzdu
AQsAp3WYpTwvaJFbaP0ueTfK0FyJAw/07PWfTg7eP8GQSmU5egcvMmEHpeDiFp54
HXF0pEzviYK8ayPdnJ0AwP8fTUxyKm7DcsLLjqJwcyEQhHhmFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLS4NAHkNBlyeCzurz2HqOCV3fn7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZTY5
YTMxMS1lZDk5LTRkMDgtYmM5Ni1hZWMyZDZhMWJmYzAvZDY1YjU4NzktYmQ5MS0z
MGYzLWFkYzYtYzM2MDRiYmE5YTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGU2OWEzMTEtZWQ5OS00ZDA4LWJj
OTYtYWVjMmQ2YTFiZmMwLzRlNjlhMzExLWVkOTktNGQwOC1iYzk2LWFlYzJkNmEx
YmZjMC5jcmwwHwYDVR0jBBgwFoAUQda6hXV7WjTxNb4s87nEq4yrceUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZTY5YTMxMS1lZDk5LTRkMDgtYmM5Ni1hZWMy
ZDZhMWJmYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAongUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqstEF3GKR8d0nivNYpUvmzIllP8xyWWIMHL/SLRHsdmAkKhDNGXcPn
5T4sdCFj3PP5ZQ6VH1hjPNKFzix4njvQxAgWQSe+Id/N4VNqUZuoed3VXvvMXbEF
JcpOjPHR8PvpivsJSxHAQk0SqSBuejn71nHZ3ZhvWBLl0N7Z26pHz/2Ser2oHsEj
j0wwGui0Mk4mAk5oVltL873mUVntbkKgcZuQprOkJi/dOlzBAIG6DtdgqyktPRK1
cHUYZg7GMqWN0lsDP9DQ3X0AOm+aAEdDtTZK491SjNrDHrFyzDAyvG17mOUVPimc
+wD8w4KpHt8Qxl0oC/P+WmXnij7+ORE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:41 2025 by rpki-client