Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7c298d6c-9b56-3dc6-b758-b43b068209fc.roa
File:                     7c298d6c-9b56-3dc6-b758-b43b068209fc.roa (raw, json)
Hash identifier:          XFh2IVIBk7mHiIlcXD6RA3shryTgvh4Toeb9J5wGbTc=
Subject key identifier:   79:BE:E1:B6:37:54:F1:F2:18:0D:9B:6B:80:AE:9D:F4:BB:E9:E7:EC
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848B8F0C137B2B05AF753CC8740
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7c298d6c-9b56-3dc6-b758-b43b068209fc.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:c1:37:b2:b0:5a:f7:53:cc:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=dc2f0381-79cb-4f3a-80ff-42293f9f9ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:82:23:a0:23:d7:ec:26:8a:40:0e:6d:14:ae:
                    46:bb:14:a4:80:f3:de:97:7d:fb:0f:12:fc:5b:ff:
                    58:68:6b:d7:76:9f:e1:06:d1:64:97:95:03:f7:61:
                    37:36:c0:b4:c4:0f:c9:55:21:2c:9a:34:26:27:3d:
                    17:3d:42:22:97:0d:17:76:fc:ff:49:ed:eb:d0:d9:
                    81:f6:50:24:bb:a2:f2:0e:92:aa:25:81:a7:09:a2:
                    c9:60:71:a4:c7:21:d6:49:d3:ea:47:e8:1a:bd:55:
                    c2:07:5d:29:2e:39:94:b8:21:04:99:51:a3:6c:db:
                    69:e2:5b:86:d6:25:6f:37:c9:40:5e:69:10:e6:21:
                    1f:e2:08:90:94:3b:19:26:21:6e:be:3b:44:ed:37:
                    d1:d3:f2:06:4f:d8:5b:86:42:e2:42:07:15:6c:7e:
                    ac:33:18:92:95:b1:23:a1:5d:d6:09:bf:41:92:2f:
                    a8:3f:23:d3:a7:09:61:81:87:95:13:dc:06:07:97:
                    fb:b6:92:bf:72:b3:e2:3e:c4:34:89:20:12:7a:af:
                    ce:2d:7d:66:39:54:b7:9a:4a:b5:52:ed:c4:ab:56:
                    08:42:4c:a0:4e:d1:24:7a:e0:44:cd:97:93:11:06:
                    7b:5e:e1:95:b1:d1:8b:7b:37:1f:f0:87:b8:b2:bf:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BE:E1:B6:37:54:F1:F2:18:0D:9B:6B:80:AE:9D:F4:BB:E9:E7:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7c298d6c-9b56-3dc6-b758-b43b068209fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:1d:7a:cc:e7:80:b0:b6:a1:0c:97:96:a8:58:6b:a9:c0:
         fb:f0:04:d6:50:82:e3:fe:33:26:53:33:e2:30:89:9c:a4:ed:
         5f:c1:9c:b7:b8:c0:f0:b5:14:ac:da:62:27:76:25:9d:f3:ef:
         38:9d:6c:df:74:4d:0b:e1:fc:6b:bb:1b:16:3d:a1:25:3c:49:
         e2:83:8c:65:32:25:4a:c7:5d:7a:b7:69:de:fb:1b:6e:d9:41:
         64:e7:15:ac:75:14:40:5d:0f:c2:31:95:e9:10:33:8e:74:67:
         97:be:89:31:53:11:03:f4:ca:1d:7a:5d:4e:19:0f:95:94:38:
         04:63:f1:a7:9e:1b:e7:e5:6a:a8:5d:31:50:96:b1:cf:df:e9:
         58:0c:0d:78:de:d3:e8:a3:8d:08:74:c1:59:c5:b8:80:aa:79:
         29:0d:84:21:34:7a:af:b9:17:08:c8:36:ad:30:44:25:4b:e4:
         1d:d5:c4:00:d2:69:1a:f9:04:89:2b:3a:ee:a6:f3:5f:6a:85:
         37:c1:87:c7:43:e1:3c:9d:6f:08:e8:29:50:50:86:8a:80:fb:
         b6:d7:7c:2b:a5:b0:9e:76:87:cc:6f:57:07:0f:11:50:16:64:
         07:7c:ce:c8:e5:ee:08:3c:6f:a3:28:0a:54:83:a6:60:03:73:
         1f:5e:88:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48ME3srBa91PMh0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk
ZGMyZjAzODEtNzljYi00ZjNhLTgwZmYtNDIyOTNmOWY5ZmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oIjoCPX7CaKQA5tFK5GuxSkgPPel337DxL8
W/9YaGvXdp/hBtFkl5UD92E3NsC0xA/JVSEsmjQmJz0XPUIilw0Xdvz/Se3r0NmB
9lAku6LyDpKqJYGnCaLJYHGkxyHWSdPqR+gavVXCB10pLjmUuCEEmVGjbNtp4luG
1iVvN8lAXmkQ5iEf4giQlDsZJiFuvjtE7TfR0/IGT9hbhkLiQgcVbH6sMxiSlbEj
oV3WCb9Bki+oPyPTpwlhgYeVE9wGB5f7tpK/crPiPsQ0iSASeq/OLX1mOVS3mkq1
Uu3Eq1YIQkygTtEkeuBEzZeTEQZ7XuGVsdGLezcf8Ie4sr9tBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHm+4bY3VPHyGA2ba4CunfS76efsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvN2MyOThkNmMtOWI1Ni0z
ZGM2LWI3NTgtYjQzYjA2ODIwOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqfzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+8HXrM54CwtqEMl5aoWGupwPvwBNZQguP+MyZTM+IwiZyk7V/BnLe4
wPC1FKzaYid2JZ3z7zidbN90TQvh/Gu7GxY9oSU8SeKDjGUyJUrHXXq3ad77G27Z
QWTnFax1FEBdD8IxlekQM450Z5e+iTFTEQP0yh16XU4ZD5WUOARj8aeeG+flaqhd
MVCWsc/f6VgMDXje0+ijjQh0wVnFuICqeSkNhCE0eq+5FwjINq0wRCVL5B3VxADS
aRr5BIkrOu6m819qhTfBh8dD4TydbwjoKVBQhoqA+7bXfCulsJ52h8xvVwcPEVAW
ZAd8zsjl7gg8b6MoClSDpmADcx9eiDo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:39 2025 by rpki-client