Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/f881d9c8-1fe2-3fe0-8329-84d4754946d4.roa
File:                     f881d9c8-1fe2-3fe0-8329-84d4754946d4.roa (raw, json)
Hash identifier:          0P/4Yrkt6W74PfWJSrBcZFj2SaHfPZokk7uRPatqIrI=
Subject key identifier:   95:00:6D:19:B0:7A:27:36:93:CB:DA:57:7A:A0:D6:E2:BB:36:C6:03
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584882809BF73194CC53552E8E00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/f881d9c8-1fe2-3fe0-8329-84d4754946d4.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     12083
IP address blocks:        216.186.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:9b:f7:31:94:cc:53:55:2e:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=8cc8681a-855e-46c1-817b-c74787f411ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f2:1e:81:a7:c3:a3:29:73:b4:59:c7:bf:b5:
                    8a:34:fa:fd:8a:c4:0a:ef:0b:fd:a1:c0:48:ea:fa:
                    60:47:13:82:54:72:5e:97:c4:37:2d:60:ea:47:96:
                    72:77:bb:84:b4:64:0c:5f:41:2d:32:c1:bc:aa:d0:
                    00:4a:16:d7:b2:57:e1:57:c3:9b:e5:dc:c0:cb:e1:
                    9a:7e:16:04:5a:fd:e8:e1:9a:54:63:be:a4:f5:5d:
                    7c:cf:8d:11:2f:2a:58:d9:9d:dc:19:4f:c5:20:c4:
                    9c:d6:6b:1c:66:3b:8d:b7:5d:13:46:cd:75:41:ad:
                    1d:ac:35:ef:be:02:9c:e3:fc:f8:05:21:36:4f:28:
                    07:f3:5e:e3:6b:0b:fc:0e:dc:d9:32:5f:8d:c5:fb:
                    1b:67:af:c1:f6:9f:19:5f:32:ae:08:c0:f4:d7:a5:
                    73:b5:6c:43:ba:b9:e7:ab:7a:4d:20:d6:ff:08:53:
                    9a:9c:14:70:f1:b7:39:0d:24:2d:6c:cd:44:b2:e0:
                    21:83:5b:29:e3:c6:a0:fe:ea:eb:bf:b8:d0:c2:e9:
                    11:71:83:b9:af:6e:f3:5f:82:19:5d:1b:47:a0:ea:
                    52:51:d2:4c:d7:e1:4f:5a:30:4c:2c:26:7a:ea:52:
                    2b:ff:32:f4:b3:1b:fd:24:84:bb:96:3c:a5:c4:fd:
                    d4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:00:6D:19:B0:7A:27:36:93:CB:DA:57:7A:A0:D6:E2:BB:36:C6:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/f881d9c8-1fe2-3fe0-8329-84d4754946d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.186.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:1c:57:9a:39:88:f1:97:18:98:d8:16:8d:40:28:86:f0:
         ae:fc:82:9e:73:1c:15:45:bb:8e:f3:e1:72:95:87:fc:52:b9:
         92:d0:41:27:6a:64:48:c7:bd:be:5b:38:9c:52:14:68:02:4e:
         22:e4:4c:69:6f:07:da:c0:0d:2a:d8:80:37:3f:22:5e:c7:e6:
         2b:cb:6b:00:bc:f7:99:5c:db:5b:25:9f:e3:bd:2f:73:65:6d:
         a8:9d:d2:68:29:58:f6:b4:37:29:c4:07:e5:99:84:83:86:88:
         2d:17:ac:62:d1:b8:e3:d1:22:4c:ce:88:f0:0e:f7:33:1c:2e:
         07:f9:bd:0b:6e:37:1c:18:7b:be:2f:96:64:ef:75:ab:03:22:
         e2:6d:ab:08:de:37:01:37:e9:7c:7b:ae:59:2b:03:4e:de:0a:
         f9:b6:02:89:67:af:ec:ec:51:75:d4:c7:60:2a:85:2e:0b:24:
         dd:49:45:5a:90:8f:39:53:a2:05:ef:ed:1f:49:31:7c:92:c7:
         60:c1:4a:c1:c8:73:3e:67:9b:14:ee:a9:ba:c4:78:f2:c4:de:
         6c:8c:a9:fa:d9:2a:c0:18:7c:c4:b2:2a:d5:6a:03:e9:25:f1:
         81:df:59:f6:a8:aa:bd:07:32:e7:6e:02:52:f2:da:f1:68:da:
         46:fc:b9:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJv3MZTMU1UujgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OGNjODY4MWEtODU1ZS00NmMxLTgxN2ItYzc0Nzg3ZjQxMWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvIegafDoylztFnHv7WKNPr9isQK7wv9ocBI
6vpgRxOCVHJel8Q3LWDqR5Zyd7uEtGQMX0EtMsG8qtAAShbXslfhV8Ob5dzAy+Ga
fhYEWv3o4ZpUY76k9V18z40RLypY2Z3cGU/FIMSc1mscZjuNt10TRs11Qa0drDXv
vgKc4/z4BSE2TygH817jawv8DtzZMl+NxfsbZ6/B9p8ZXzKuCMD016VztWxDurnn
q3pNINb/CFOanBRw8bc5DSQtbM1EsuAhg1sp48ag/urrv7jQwukRcYO5r27zX4IZ
XRtHoOpSUdJM1+FPWjBMLCZ66lIr/zL0sxv9JIS7ljylxP3U2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJUAbRmweic2k8vaV3qg1uK7NsYDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZjg4MWQ5YzgtMWZlMi0z
ZmUwLTgzMjktODRkNDc1NDk0NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LqkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFC3HFeaOYjxlxiY2BaNQCiG8K78gp5zHBVFu47z4XKVh/xSuZLQQSdq
ZEjHvb5bOJxSFGgCTiLkTGlvB9rADSrYgDc/Il7H5ivLawC895lc21sln+O9L3Nl
baid0mgpWPa0NynEB+WZhIOGiC0XrGLRuOPRIkzOiPAO9zMcLgf5vQtuNxwYe74v
lmTvdasDIuJtqwjeNwE36Xx7rlkrA07eCvm2Aolnr+zsUXXUx2AqhS4LJN1JRVqQ
jzlTogXv7R9JMXySx2DBSsHIcz5nmxTuqbrEePLE3myMqfrZKsAYfMSyKtVqA+kl
8YHfWfaoqr0HMuduAlLy2vFo2kb8uZQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:30 2025 by rpki-client