Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/a5d505ed-30ad-3e75-b9b6-13d664161125.roa
File:                     a5d505ed-30ad-3e75-b9b6-13d664161125.roa (raw, json)
Hash identifier:          ioIVFVyvs1SdF989lBohqMKDJLIl0IWUQKAAWbGkX5c=
Subject key identifier:   3C:BF:7E:21:4F:DD:C3:3B:51:7B:03:F2:67:C4:E2:E5:A6:E4:23:40
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858488AE0A201ECC21F3075B735E0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/a5d505ed-30ad-3e75-b9b6-13d664161125.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     109
IP address blocks:        64.100.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a2:01:ec:c2:1f:30:75:b7:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=eb57513e-ce6c-4c11-a0cd-638ee80d916c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a2:88:e0:eb:cc:33:1d:08:0e:99:c5:2a:cd:
                    38:f9:13:3a:8c:f7:4b:54:68:29:8b:48:06:8a:3d:
                    7b:ad:4e:54:78:47:01:47:7e:f0:b0:b7:a9:06:67:
                    1d:c5:cf:fe:c6:ab:88:a2:8d:fd:fa:24:ed:c3:4f:
                    e8:03:b4:87:ef:8b:da:f3:30:0a:27:43:c2:22:09:
                    8f:62:42:3f:51:f4:dd:34:e3:04:c9:d6:55:33:99:
                    29:18:9e:8f:4b:eb:02:b9:fc:7b:41:ae:cd:e8:7d:
                    e8:c6:a7:32:ae:c7:96:12:68:69:4e:1b:33:33:ad:
                    5e:07:eb:69:e3:b5:da:54:45:52:7d:05:e1:47:6f:
                    8a:ee:a2:68:86:f5:59:28:d3:9c:22:51:ac:1c:8d:
                    3d:92:a7:89:dc:79:ea:f6:39:96:46:51:ec:dc:5b:
                    bb:bf:bf:d7:ed:9b:4d:31:0e:5c:1e:37:e3:c7:d9:
                    af:5e:3a:db:75:45:55:95:a8:17:01:20:fb:aa:2b:
                    79:19:03:5b:22:c0:ac:ed:80:ba:5a:c4:26:95:44:
                    3e:b0:78:89:ff:60:7c:41:2a:03:fa:0c:89:56:ff:
                    27:13:96:65:bc:b4:8f:be:b2:a6:92:80:05:fa:c0:
                    fb:b1:64:02:0c:5c:23:76:bc:91:1a:ec:b7:47:00:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BF:7E:21:4F:DD:C3:3B:51:7B:03:F2:67:C4:E2:E5:A6:E4:23:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/a5d505ed-30ad-3e75-b9b6-13d664161125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.100.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:67:b5:89:f4:a7:01:c5:57:df:5f:3e:65:95:fb:e4:d2:ca:
         bc:49:89:b8:9b:0f:6f:bf:7f:cd:25:f4:1c:56:5d:d4:a6:94:
         98:63:02:35:db:61:81:10:a7:13:29:81:b2:89:9f:08:1f:c2:
         1a:59:21:f7:10:8c:e0:2e:d1:cc:3d:ca:7d:44:64:ae:f9:22:
         b5:64:de:ce:6b:58:4e:2f:76:e3:54:9a:ae:2a:64:0a:01:9a:
         b0:d5:e6:83:33:50:f2:c9:6c:74:25:ed:9d:f3:51:65:55:7b:
         0f:6a:fd:3b:0c:48:e3:14:43:40:43:b1:0d:4a:af:b3:c8:c8:
         a0:39:43:12:60:90:cb:cf:71:c2:54:fe:37:81:0c:c6:c4:e2:
         1b:aa:fc:f6:df:8d:b1:05:d4:1e:d2:9d:7a:bb:89:01:15:52:
         25:9e:73:cb:49:0c:1c:65:d0:97:b4:ff:fd:76:f1:51:22:2d:
         28:3b:c7:ef:83:f3:98:9d:1c:fa:95:02:24:9a:71:6d:17:29:
         e9:e8:c9:20:90:bb:ec:35:91:ae:c3:10:79:6b:04:4d:a2:e4:
         ef:f3:01:9b:c6:0f:32:f6:51:9f:f2:28:69:1d:aa:30:47:03:
         66:4d:29:ed:dd:ed:fc:f0:4d:58:25:30:18:68:98:92:3b:6a:
         e4:ef:ff:bc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiK4KIB7MIfMHW3NeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy
MDZiMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
ZWI1NzUxM2UtY2U2Yy00YzExLWEwY2QtNjM4ZWU4MGQ5MTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKKI4OvMMx0IDpnFKs04+RM6jPdLVGgpi0gG
ij17rU5UeEcBR37wsLepBmcdxc/+xquIoo39+iTtw0/oA7SH74va8zAKJ0PCIgmP
YkI/UfTdNOMEydZVM5kpGJ6PS+sCufx7Qa7N6H3oxqcyrseWEmhpThszM61eB+tp
47XaVEVSfQXhR2+K7qJohvVZKNOcIlGsHI09kqeJ3Hnq9jmWRlHs3Fu7v7/X7ZtN
MQ5cHjfjx9mvXjrbdUVVlagXASD7qit5GQNbIsCs7YC6WsQmlUQ+sHiJ/2B8QSoD
+gyJVv8nE5ZlvLSPvrKmkoAF+sD7sWQCDFwjdryRGuy3RwD9vQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDy/fiFP3cM7UXsD8mfE4uWm5CNAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5
NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvYTVkNTA1ZWQtMzBhZC0z
ZTc1LWI5YjYtMTNkNjY0MTYxMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1
M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy
MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0
NjU1MjIwNmIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCQGQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZ2e1ifSnAcVX318+ZZX75NLKvEmJuJsPb79/zSX0HFZd1KaUmGMCNdth
gRCnEymBsomfCB/CGlkh9xCM4C7RzD3KfURkrvkitWTezmtYTi9241SaripkCgGa
sNXmgzNQ8slsdCXtnfNRZVV7D2r9OwxI4xRDQEOxDUqvs8jIoDlDEmCQy89xwlT+
N4EMxsTiG6r89t+NsQXUHtKderuJARVSJZ5zy0kMHGXQl7T//XbxUSItKDvH74Pz
mJ0c+pUCJJpxbRcp6ejJIJC77DWRrsMQeWsETaLk7/MBm8YPMvZRn/IoaR2qMEcD
Zk0p7d3t/PBNWCUwGGiYkjtq5O//vA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:05 2025 by rpki-client