Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d85ee93a-891c-3bde-aff8-ad622cbfd228.roa
File:                     d85ee93a-891c-3bde-aff8-ad622cbfd228.roa (raw, json)
Hash identifier:          cVGXwoGa3MnyzjYoyGPMiNsZGwKn4BTPXPtZAA3Mdhs=
Subject key identifier:   5D:4B:6B:6A:F9:00:97:61:B6:B9:3B:70:3B:48:C0:FF:99:C0:26:52
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849071BF3284ADB4BE30700B400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d85ee93a-891c-3bde-aff8-ad622cbfd228.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     6461
IP address blocks:        173.46.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:f3:28:4a:db:4b:e3:07:00:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=f92ddcc1-a6ed-41d9-a5b2-c4d8d4cbddd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:28:ea:93:71:38:cd:d9:7c:a5:a3:78:26:
                    e6:23:10:09:be:61:68:7f:c1:24:b0:b3:1a:5d:d6:
                    ff:95:e9:84:af:f0:88:fb:65:0a:2f:2d:6f:33:ad:
                    0f:df:8a:e7:c8:bd:61:26:17:be:ae:b0:67:8f:e1:
                    ac:c0:cd:03:88:cf:7d:2f:be:ff:15:10:82:fb:70:
                    f8:57:ce:03:98:d3:f6:39:7b:37:c9:e0:9e:75:83:
                    9e:b8:93:dd:94:af:79:9f:8b:2b:7b:ea:b3:41:d3:
                    34:8c:b5:a4:f5:bf:2a:79:7a:b1:49:60:20:6a:31:
                    8c:f7:4c:54:a9:a5:45:48:6c:b6:c1:12:39:a4:5b:
                    ef:2a:31:cb:3d:10:8f:02:cf:a2:04:3d:39:35:98:
                    7f:5e:2e:1c:4e:63:74:ce:42:e6:71:9d:53:31:4b:
                    71:51:ba:7e:84:37:12:32:09:f2:84:3f:a9:35:a8:
                    65:02:47:5c:3b:6d:b5:57:cc:3c:7b:06:a9:89:20:
                    ca:81:45:07:ef:fb:7a:8c:5f:02:b2:9b:95:8a:bc:
                    8b:8d:c2:22:42:ea:5f:75:fb:88:33:10:b6:7c:cd:
                    e1:4b:e6:10:fa:fa:3e:59:17:3b:eb:ad:b2:e1:f0:
                    0f:9e:ac:cb:6c:06:e8:0d:ae:a6:54:76:32:ab:0e:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4B:6B:6A:F9:00:97:61:B6:B9:3B:70:3B:48:C0:FF:99:C0:26:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d85ee93a-891c-3bde-aff8-ad622cbfd228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.46.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:48:59:38:93:df:f5:36:3a:40:96:df:0d:a0:ce:a5:75:eb:
         3b:c6:f0:fa:62:7e:54:b5:50:92:28:3b:76:e9:96:61:e2:59:
         3f:46:78:6e:3a:48:18:60:92:11:e0:1c:92:16:b6:71:6f:66:
         16:f8:37:86:29:88:d9:fd:41:cb:ec:e8:58:45:ad:a9:ba:8c:
         18:49:13:b8:bc:46:31:5f:7f:a7:81:c4:f3:61:07:be:a1:db:
         38:1a:f3:7e:58:58:bc:d2:eb:f1:cd:be:ee:09:28:5d:7c:d0:
         83:76:99:d8:40:36:5b:95:49:05:b8:87:65:c0:a1:c0:66:bf:
         c9:bf:47:df:38:1d:ea:55:5f:d9:af:62:d2:f0:dd:57:74:24:
         c7:3a:46:6c:a1:d6:42:6a:5f:42:4c:92:ac:a3:c5:50:09:3e:
         b0:bb:a1:92:2e:ff:18:cc:9d:1a:7d:8a:aa:97:79:22:5d:54:
         35:8b:97:72:68:3e:8b:ef:ae:0b:c8:7b:6b:ae:38:95:80:36:
         40:6a:9d:50:00:8e:c5:ca:ef:6c:0a:8b:09:29:92:3a:24:ea:
         b5:76:ff:39:8f:87:50:bf:e8:79:88:2f:67:68:4c:bd:a1:fb:
         18:79:73:ea:11:7d:f6:f6:ef:4f:f9:bf:2f:cf:9a:ec:9f:cf:
         cf:ba:b8:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/MoSttL4wcAtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZjkyZGRjYzEtYTZlZC00MWQ5LWE1YjItYzRkOGQ0Y2JkZGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDEo6pNxOM3ZfKWjeCbmIxAJvmFof8EksLMa
Xdb/lemEr/CI+2UKLy1vM60P34rnyL1hJhe+rrBnj+GswM0DiM99L77/FRCC+3D4
V84DmNP2OXs3yeCedYOeuJPdlK95n4sre+qzQdM0jLWk9b8qeXqxSWAgajGM90xU
qaVFSGy2wRI5pFvvKjHLPRCPAs+iBD05NZh/Xi4cTmN0zkLmcZ1TMUtxUbp+hDcS
MgnyhD+pNahlAkdcO221V8w8ewapiSDKgUUH7/t6jF8CspuViryLjcIiQupfdfuI
MxC2fM3hS+YQ+vo+WRc7662y4fAPnqzLbAboDa6mVHYyqw6JxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF1La2r5AJdhtrk7cDtIwP+ZwCZSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZDg1ZWU5M2EtODkxYy0z
YmRlLWFmZjgtYWQ2MjJjYmZkMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErS5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlIWTiT3/U2OkCW3w2gzqV16zvG8PpiflS1UJIoO3bplmHiWT9GeG46
SBhgkhHgHJIWtnFvZhb4N4YpiNn9Qcvs6FhFram6jBhJE7i8RjFff6eBxPNhB76h
2zga835YWLzS6/HNvu4JKF180IN2mdhANluVSQW4h2XAocBmv8m/R984HepVX9mv
YtLw3Vd0JMc6Rmyh1kJqX0JMkqyjxVAJPrC7oZIu/xjMnRp9iqqXeSJdVDWLl3Jo
PovvrgvIe2uuOJWANkBqnVAAjsXK72wKiwkpkjok6rV2/zmPh1C/6HmIL2doTL2h
+xh5c+oRffb270/5vy/Pmuyfz8+6uKM=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:15:12 2025 by rpki-client