Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/283cabe2-ec9e-3b00-84d6-725909a6148b.roa
File:                     283cabe2-ec9e-3b00-84d6-725909a6148b.roa (raw, json)
Hash identifier:          GcIFyUTqpBTUt2Fyl/rKvA9Mcs94C8YqdWRRa5nn84w=
Subject key identifier:   87:B0:6F:8C:76:90:29:CB:96:15:0B:D7:26:1A:CB:3B:EE:50:69:D2
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285848EF613ABDB2258D2903232B80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/283cabe2-ec9e-3b00-84d6-725909a6148b.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     26554
IP address blocks:        64.40.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3a:bd:b2:25:8d:29:03:23:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=ab23c1e7-e0c9-4111-8753-dc95dac129b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:13:6e:0f:60:7b:9a:61:38:fa:67:07:cf:
                    3f:5a:e0:a2:dd:e7:e2:97:a5:b7:24:b9:a0:ee:54:
                    47:82:62:83:82:01:4b:d1:5d:ef:93:e1:91:c4:f6:
                    35:03:f1:67:c6:52:a0:09:fa:c3:10:07:39:3c:7e:
                    46:96:e8:ec:a6:88:2b:ea:67:0e:5c:01:a1:9f:ac:
                    1b:96:1a:f5:d8:0d:66:41:51:e7:3a:0c:df:bc:b2:
                    78:c3:25:ab:20:7a:fa:63:66:2f:c0:76:4f:3d:f4:
                    d4:d8:de:c6:4b:f5:19:2b:7a:64:74:c5:36:81:23:
                    13:9e:76:be:82:55:00:02:1e:b6:45:61:af:7a:d4:
                    38:e3:59:80:2a:b6:6d:ca:30:9e:30:31:71:61:bb:
                    0f:a0:f2:d6:26:6b:82:f6:50:bc:c1:d8:20:cc:79:
                    37:f3:e9:1b:20:95:25:f7:df:27:db:76:7c:5d:8f:
                    50:11:0c:94:af:43:4e:27:8f:40:d4:25:b4:de:59:
                    c9:b9:5a:61:84:8f:5f:7f:87:13:04:76:b3:25:b5:
                    5c:32:ee:24:45:31:49:0b:37:25:2a:21:48:b0:86:
                    f7:23:81:54:e0:03:d1:7f:f1:6c:c3:b0:f2:c5:45:
                    2f:6b:17:68:9f:d6:27:69:3c:e9:3c:a1:df:0e:c8:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B0:6F:8C:76:90:29:CB:96:15:0B:D7:26:1A:CB:3B:EE:50:69:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/283cabe2-ec9e-3b00-84d6-725909a6148b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:35:76:56:6a:c7:31:cc:75:8d:74:10:ac:04:d5:09:1a:
         79:7d:aa:c1:3f:7d:4e:84:4e:5f:57:4a:3d:d2:27:a8:42:1b:
         59:62:d6:a5:df:81:4b:da:60:eb:4b:74:ae:b7:6d:b2:5c:e8:
         69:9d:7c:0d:5a:7e:d1:05:2e:06:7d:7e:59:ec:7b:b6:06:3d:
         14:00:a7:9d:b7:1e:66:61:ec:de:49:da:a2:97:70:52:a0:f5:
         54:a9:8a:a9:a4:4f:d2:f4:76:82:96:c5:83:09:74:ec:ed:df:
         a0:29:33:2e:0d:0d:bd:24:18:1c:d4:5f:9c:e2:ec:8e:6f:6a:
         78:1f:81:5b:29:73:b1:cd:91:3d:54:fd:76:38:79:eb:41:26:
         98:5e:b3:df:8e:80:18:81:ea:94:e9:a8:5c:bd:8a:2a:af:87:
         61:d0:61:48:05:ef:05:d0:09:88:72:b6:79:12:3d:28:a9:16:
         96:dd:a7:42:c2:6b:22:73:b0:60:67:64:a3:4c:6e:91:73:56:
         57:b8:11:60:b2:aa:3e:12:d5:b6:0c:64:eb:b5:89:53:1f:33:
         9e:eb:48:58:05:6b:94:cd:e8:e6:e1:69:7e:56:15:91:50:1d:
         68:a5:22:6c:39:a2:96:8a:7c:75:7b:73:38:39:77:f2:f4:23:
         5e:72:c9:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTq9siWNKQMjK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
YWIyM2MxZTctZTBjOS00MTExLTg3NTMtZGM5NWRhYzEyOWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmYTbg9ge5phOPpnB88/WuCi3efil6W3JLmg
7lRHgmKDggFL0V3vk+GRxPY1A/FnxlKgCfrDEAc5PH5Glujspogr6mcOXAGhn6wb
lhr12A1mQVHnOgzfvLJ4wyWrIHr6Y2YvwHZPPfTU2N7GS/UZK3pkdMU2gSMTnna+
glUAAh62RWGvetQ441mAKrZtyjCeMDFxYbsPoPLWJmuC9lC8wdggzHk38+kbIJUl
998n23Z8XY9QEQyUr0NOJ49A1CW03lnJuVphhI9ff4cTBHazJbVcMu4kRTFJCzcl
KiFIsIb3I4FU4APRf/Fsw7DyxUUvaxdon9YnaTzpPKHfDshtkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIewb4x2kCnLlhUL1yYayzvuUGnSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvMjgzY2FiZTItZWM5ZS0z
YjAwLTg0ZDYtNzI1OTA5YTYxNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABG7NXZWascxzHWNdBCsBNUJGnl9qsE/fU6ETl9XSj3SJ6hCG1li1qXf
gUvaYOtLdK63bbJc6GmdfA1aftEFLgZ9flnse7YGPRQAp523HmZh7N5J2qKXcFKg
9VSpiqmkT9L0doKWxYMJdOzt36ApMy4NDb0kGBzUX5zi7I5vangfgVspc7HNkT1U
/XY4eetBJphes9+OgBiB6pTpqFy9iiqvh2HQYUgF7wXQCYhytnkSPSipFpbdp0LC
ayJzsGBnZKNMbpFzVle4EWCyqj4S1bYMZOu1iVMfM57rSFgFa5TN6ObhaX5WFZFQ
HWilImw5opaKfHV7czg5d/L0I15yySA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:02 2025 by rpki-client