Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/76c89398-dcb9-3d07-a711-e504b1422bec.roa
File:                     76c89398-dcb9-3d07-a711-e504b1422bec.roa (raw, json)
Hash identifier:          +X1gddHcey69Sjrf1yM7zJBvVIoqYPac6Bw+KXcgInc=
Subject key identifier:   DB:B4:1F:FF:06:D5:E2:7C:D6:9E:DB:B4:F3:C9:D4:33:AD:76:0A:76
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584919418A9F0345DBE88CD0E280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/76c89398-dcb9-3d07-a711-e504b1422bec.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     21632
IP address blocks:        66.62.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:8a:9f:03:45:db:e8:8c:d0:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=c8105f9a-c9fc-4417-bfd7-531d8243453d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:2d:17:07:9f:6f:57:0c:2f:33:d7:14:df:
                    87:69:b6:f7:4d:8e:6c:0c:3a:61:cd:5e:25:65:a5:
                    a5:3d:6e:84:39:30:e7:1a:93:e6:5f:a6:54:79:d4:
                    39:78:78:3c:69:af:e2:bd:d4:c8:bb:ba:af:b0:49:
                    80:d1:b1:fb:1b:c6:78:a6:f7:23:06:73:c2:34:b2:
                    a2:75:40:6c:c9:0d:59:46:72:cb:b8:c8:d2:55:55:
                    98:24:9a:0e:16:9c:8b:0c:2a:bc:f2:00:25:6e:21:
                    d7:e6:bd:ba:30:3e:f7:14:24:9b:a5:cf:49:1f:57:
                    04:ed:99:e4:1d:02:5c:d9:f6:a2:bc:71:e0:93:62:
                    66:d5:f8:13:a6:b5:5f:da:e0:2f:93:b5:1a:28:46:
                    ca:2f:10:7a:65:5f:bc:6a:c9:9c:cc:5f:ae:11:f6:
                    a0:63:6b:eb:e1:27:1e:2a:39:62:84:98:cb:28:60:
                    65:fa:15:58:a2:cd:df:e6:5b:f2:e5:ba:cd:43:bc:
                    31:58:5c:f2:1e:a1:a9:8c:94:f7:28:73:51:ab:a7:
                    7b:6e:85:84:8f:ac:eb:37:33:4a:d5:b4:5d:97:6f:
                    f3:a3:f3:42:45:88:1c:e1:bb:ce:c1:39:9b:42:0d:
                    b6:02:24:e1:83:65:dd:93:7a:a0:a3:16:be:30:1f:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B4:1F:FF:06:D5:E2:7C:D6:9E:DB:B4:F3:C9:D4:33:AD:76:0A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/76c89398-dcb9-3d07-a711-e504b1422bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:c2:1f:ad:62:2a:cb:b8:b3:45:f3:2d:0b:b4:26:88:98:
         3f:7e:c4:a8:4b:eb:a4:2a:e3:9c:08:c9:1b:53:16:e0:5c:f7:
         04:c6:06:45:ae:2c:ee:c1:e5:58:e2:a9:0f:43:c3:73:ff:9f:
         e3:6c:5e:e5:1c:9a:57:b0:bc:86:60:2d:5f:62:6f:1b:b1:38:
         e4:08:42:22:00:c0:41:2b:d4:69:ce:7b:3e:26:30:c6:85:98:
         69:72:50:e1:c4:bf:16:76:1e:07:95:cc:17:71:af:27:40:18:
         73:c5:c1:c3:f1:0a:5d:17:98:ee:5c:da:82:f2:15:7d:9b:39:
         ce:62:a3:43:ec:51:28:2f:fb:c1:e2:44:bd:24:2b:a2:28:0b:
         0c:bb:01:ad:7c:4b:82:e9:0e:0c:48:87:a6:7f:48:d3:9b:03:
         26:3d:64:dd:bb:41:df:1d:10:cc:54:e5:e6:c2:cd:64:d8:51:
         07:ce:f6:40:e8:31:49:91:f5:52:6a:e4:e2:87:2a:79:c0:0c:
         ef:35:09:05:cb:13:e0:e1:3d:32:82:57:3f:7e:1c:92:fa:39:
         d0:d0:dc:09:e4:0d:af:87:06:d5:61:2a:9a:60:b1:51:95:23:
         a0:fc:f3:a0:e7:d8:93:bc:a6:16:a6:57:df:e3:f1:37:b4:57:
         ff:7a:ff:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQYqfA0Xb6IzQ4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk
YzgxMDVmOWEtYzlmYy00NDE3LWJmZDctNTMxZDgyNDM0NTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyctFwefb1cMLzPXFN+Habb3TY5sDDphzV4l
ZaWlPW6EOTDnGpPmX6ZUedQ5eHg8aa/ivdTIu7qvsEmA0bH7G8Z4pvcjBnPCNLKi
dUBsyQ1ZRnLLuMjSVVWYJJoOFpyLDCq88gAlbiHX5r26MD73FCSbpc9JH1cE7Znk
HQJc2faivHHgk2Jm1fgTprVf2uAvk7UaKEbKLxB6ZV+8asmczF+uEfagY2vr4Sce
KjlihJjLKGBl+hVYos3f5lvy5brNQ7wxWFzyHqGpjJT3KHNRq6d7boWEj6zrNzNK
1bRdl2/zo/NCRYgc4bvOwTmbQg22AiThg2Xdk3qgoxa+MB8qwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNu0H/8G1eJ81p7btPPJ1DOtdgp2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNzZjODkzOTgtZGNiOS0z
ZDA3LWE3MTEtZTUwNGIxNDIyYmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQj55MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2dwh+tYirLuLNF8y0LtCaImD9+xKhL66Qq45wIyRtTFuBc9wTGBkWu
LO7B5VjiqQ9Dw3P/n+NsXuUcmlewvIZgLV9ibxuxOOQIQiIAwEEr1GnOez4mMMaF
mGlyUOHEvxZ2HgeVzBdxrydAGHPFwcPxCl0XmO5c2oLyFX2bOc5io0PsUSgv+8Hi
RL0kK6IoCwy7Aa18S4LpDgxIh6Z/SNObAyY9ZN27Qd8dEMxU5ebCzWTYUQfO9kDo
MUmR9VJq5OKHKnnADO81CQXLE+DhPTKCVz9+HJL6OdDQ3AnkDa+HBtVhKppgsVGV
I6D886Dn2JO8phamV9/j8Te0V/96/9E=
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:48:30 2025 by rpki-client