Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5a83b14-8f08-3236-91cb-44d70d7aa25b.roa
File:                     c5a83b14-8f08-3236-91cb-44d70d7aa25b.roa (raw, json)
Hash identifier:          zUt7GWf9AvHND3++NYIV8uW9bgPUYAHZGTQKy9Dr+vw=
Subject key identifier:   06:C4:38:74:A0:D7:FA:CD:59:E2:B9:3C:AD:B7:71:75:7F:91:4E:54
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C22552E4360FA7A2DE600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5a83b14-8f08-3236-91cb-44d70d7aa25b.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.195.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:22:55:2e:43:60:fa:7a:2d:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=52c10a0a-9428-40f3-8753-a00f28045353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:83:fa:3a:c8:41:70:17:bb:99:02:b8:08:
                    fa:78:fc:15:2a:21:81:95:49:40:32:b9:39:98:22:
                    70:aa:d8:d0:ed:66:47:b7:ef:1e:ec:d5:1c:18:ea:
                    31:45:74:c5:a7:43:dc:9d:da:be:5d:da:2b:d3:dd:
                    59:e5:45:1f:b6:e8:d5:e5:46:4a:97:35:d8:47:68:
                    b1:77:d1:64:5a:22:e3:15:f0:10:c1:53:97:1a:cc:
                    a4:49:2e:6f:04:38:7e:25:09:0f:60:b3:6b:8b:29:
                    60:c6:a6:20:08:1c:b6:fe:a4:ac:69:2f:3a:ae:f7:
                    64:a9:33:66:a6:d3:86:fd:69:5e:1f:6a:08:bc:e5:
                    6c:c8:37:67:b0:52:f6:b0:6f:4f:49:ea:45:2f:d3:
                    29:45:e7:73:29:2b:4a:cd:38:8f:83:3f:c8:6d:ae:
                    73:95:ee:67:55:26:9e:53:ff:73:7b:e6:be:6a:a2:
                    cf:b1:e6:04:6b:b2:d3:75:98:e9:86:4d:8b:15:1f:
                    9f:d0:79:a4:49:71:bc:6a:44:09:0d:60:61:c4:df:
                    2a:c1:0d:b4:aa:a5:14:6f:a9:4d:a3:d3:95:f0:8a:
                    f1:0f:65:2d:e2:d8:d1:f1:9f:11:15:5e:77:d0:61:
                    db:4d:1e:2a:ab:7d:c4:7e:b5:51:80:1a:c8:9f:ef:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C4:38:74:A0:D7:FA:CD:59:E2:B9:3C:AD:B7:71:75:7F:91:4E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5a83b14-8f08-3236-91cb-44d70d7aa25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.195.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b2:ca:7c:23:11:89:e9:89:98:dc:be:b7:7a:84:36:57:4b:
         39:c6:6c:86:a2:2b:ae:39:4b:31:e3:f8:7c:b2:6d:6d:fa:32:
         f9:bd:58:df:d6:f0:6a:20:98:be:9a:e1:0a:98:52:c8:cb:d1:
         2e:b7:0e:bf:44:d8:92:26:a3:c1:41:9e:7e:69:a4:54:12:1f:
         88:33:78:38:63:b4:07:10:18:3d:88:fc:0f:30:c1:e2:e8:72:
         63:b4:95:c1:1e:97:32:12:b3:4d:b4:f5:78:97:ff:e9:f1:0d:
         80:32:d8:48:02:ae:1c:9c:f9:53:22:6b:2f:2b:cb:1a:5b:e1:
         d0:35:af:09:c2:3b:f3:69:e3:b3:8c:92:e7:19:b9:0d:97:4c:
         6b:1f:aa:69:ae:16:40:31:fa:c9:3c:e2:02:43:98:e0:6b:94:
         71:ca:dd:67:38:c1:b9:90:24:39:a3:61:6b:25:7a:bf:51:a7:
         1d:78:c7:32:90:1e:c9:ea:ef:1d:02:a3:b7:30:86:1d:62:15:
         b6:11:b6:31:60:40:bc:4d:18:8a:a3:4b:a5:17:5b:81:35:a4:
         7f:05:62:9a:a5:b4:3c:81:cf:61:8b:ea:e0:c4:31:e8:6f:fa:
         fa:e6:17:85:9e:4a:4d:f0:a7:0d:20:bd:92:dc:05:72:35:c5:
         6b:0e:c9:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITCJVLkNg+not5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NTJjMTBhMGEtOTQyOC00MGYzLTg3NTMtYTAwZjI4MDQ1MzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmCD+jrIQXAXu5kCuAj6ePwVKiGBlUlAMrk5
mCJwqtjQ7WZHt+8e7NUcGOoxRXTFp0Pcndq+Xdor091Z5UUftujV5UZKlzXYR2ix
d9FkWiLjFfAQwVOXGsykSS5vBDh+JQkPYLNriylgxqYgCBy2/qSsaS86rvdkqTNm
ptOG/WleH2oIvOVsyDdnsFL2sG9PSepFL9MpRedzKStKzTiPgz/Iba5zle5nVSae
U/9ze+a+aqLPseYEa7LTdZjphk2LFR+f0HmkSXG8akQJDWBhxN8qwQ20qqUUb6lN
o9OV8IrxD2Ut4tjR8Z8RFV530GHbTR4qq33EfrVRgBrIn++mhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbEOHSg1/rNWeK5PK23cXV/kU5UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzVhODNiMTQtOGYwOC0z
MjM2LTkxY2ItNDRkNzBkN2FhMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8PwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKyynwjEYnpiZjcvrd6hDZXSznGbIaiK645SzHj+HyybW36Mvm9WN/W
8GogmL6a4QqYUsjL0S63Dr9E2JImo8FBnn5ppFQSH4gzeDhjtAcQGD2I/A8wweLo
cmO0lcEelzISs0209XiX/+nxDYAy2EgCrhyc+VMiay8ryxpb4dA1rwnCO/Np47OM
kucZuQ2XTGsfqmmuFkAx+sk84gJDmOBrlHHK3Wc4wbmQJDmjYWsler9Rpx14xzKQ
Hsnq7x0Co7cwhh1iFbYRtjFgQLxNGIqjS6UXW4E1pH8FYpqltDyBz2GL6uDEMehv
+vrmF4WeSk3wpw0gvZLcBXI1xWsOyf0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:42 2025 by rpki-client