Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa
File:                     c851c3fd-7eed-3f14-bb90-6206ef839144.roa (raw, json)
Hash identifier:          oE/ifFCAgRFs6RPP0i+EqAxqB1KagxdPshmPBXIBU0Q=
Subject key identifier:   F5:1F:08:34:5F:61:CB:B0:90:DC:05:C9:F5:18:88:3C:AB:8D:D8:17
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068F86B6D92F46C4CBB780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        72.31.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8f:86:b6:d9:2f:46:c4:cb:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f5fe0da5-880b-4f4c-8f50-a8f8a940d35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:3b:c5:02:c1:6f:c4:ad:6a:6a:fb:52:74:
                    2e:7b:99:ea:56:ae:de:6c:8c:b9:f9:af:0c:e3:87:
                    cc:b2:f1:06:0f:6a:b0:2f:cf:de:cc:c4:bc:58:35:
                    c2:9b:93:26:56:cd:a7:dc:d5:27:5f:31:17:73:eb:
                    01:5e:c3:07:84:6e:b1:70:61:68:d9:85:36:a5:ae:
                    30:6b:d8:9f:42:f3:0a:fd:d4:80:38:fb:2c:78:45:
                    87:25:4a:9e:7a:fa:e9:72:e4:3d:72:07:d5:d3:71:
                    ec:3d:48:51:d2:48:02:bc:5b:9b:aa:7f:ab:1d:af:
                    c2:a5:26:29:0b:0d:2c:5f:47:3b:23:d9:a2:8e:08:
                    2b:54:c9:57:a8:34:2b:5b:9b:eb:54:4a:dd:dd:dc:
                    e1:97:9b:4a:66:5a:fd:af:90:41:b7:6a:df:41:dc:
                    2d:17:0f:76:6d:db:f9:82:d9:e6:26:8e:41:cf:da:
                    1c:aa:c6:86:06:a5:c3:4d:93:73:0d:55:e4:50:64:
                    81:e7:78:90:e8:01:7e:1a:31:45:f8:0f:fe:a1:66:
                    76:bb:af:f0:6f:00:de:92:1e:21:1d:c5:35:db:a3:
                    75:62:91:e2:c3:d9:bc:36:44:fe:6d:1e:b2:75:d9:
                    20:46:09:22:4b:f4:d1:6a:d7:bd:86:fe:d8:f1:19:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1F:08:34:5F:61:CB:B0:90:DC:05:C9:F5:18:88:3C:AB:8D:D8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a8:0a:31:28:14:56:d3:15:40:3a:53:fd:a3:e6:a9:c0:8d:
         52:4c:94:9c:71:21:57:3d:99:fa:97:4b:61:fe:70:c4:7d:65:
         30:9e:03:c9:9d:1b:cd:3d:59:41:5d:2c:1b:6f:59:03:a5:5a:
         07:65:1d:ef:5c:52:fd:c3:3f:a9:bc:aa:cc:63:1b:76:4f:45:
         57:83:80:a6:68:bf:c9:2e:fb:8e:c7:17:db:f9:7d:e0:f7:2b:
         a2:b5:aa:90:09:4f:bf:c3:b3:c9:16:1d:4f:20:e8:a2:0d:c8:
         5e:bc:2f:10:80:2f:b2:8a:7a:a8:54:d4:b0:bc:2f:a1:c8:e0:
         07:7f:65:62:5c:69:17:46:08:b1:34:ae:0e:4f:e6:0e:91:e5:
         92:a3:ca:5f:be:92:46:db:c0:15:66:e0:3d:d9:ef:c8:b3:20:
         1e:70:ca:d6:a0:cd:73:ad:39:9c:1a:0d:56:ad:49:44:43:1f:
         a3:58:d3:32:d3:08:a9:66:af:46:29:ff:56:d6:e4:d6:07:e9:
         5f:85:e3:25:a1:4d:9b:24:87:14:69:2c:09:3e:e1:7f:5c:ee:
         fc:21:a3:c8:b0:5b:22:92:c9:fa:03:dc:9e:20:73:d7:e4:ca:
         d6:fc:c0:6d:da:34:a6:dc:4c:b3:29:eb:d4:e1:3c:71:08:11:
         90:6e:b6:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBo+GttkvRsTLt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZjVmZTBkYTUtODgwYi00ZjRjLThmNTAtYThmOGE5NDBkMzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaE7xQLBb8Stamr7UnQue5nqVq7ebIy5+a8M
44fMsvEGD2qwL8/ezMS8WDXCm5MmVs2n3NUnXzEXc+sBXsMHhG6xcGFo2YU2pa4w
a9ifQvMK/dSAOPsseEWHJUqeevrpcuQ9cgfV03HsPUhR0kgCvFubqn+rHa/CpSYp
Cw0sX0c7I9mijggrVMlXqDQrW5vrVErd3dzhl5tKZlr9r5BBt2rfQdwtFw92bdv5
gtnmJo5Bz9ocqsaGBqXDTZNzDVXkUGSB53iQ6AF+GjFF+A/+oWZ2u6/wbwDekh4h
HcU126N1YpHiw9m8NkT+bR6yddkgRgkiS/TRate9hv7Y8RlNFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUfCDRfYcuwkNwFyfUYiDyrjdgXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzg1MWMzZmQtN2VlZC0z
ZjE0LWJiOTAtNjIwNmVmODM5MTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB++MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyoCjEoFFbTFUA6U/2j5qnAjVJMlJxxIVc9mfqXS2H+cMR9ZTCeA8md
G809WUFdLBtvWQOlWgdlHe9cUv3DP6m8qsxjG3ZPRVeDgKZov8ku+47HF9v5feD3
K6K1qpAJT7/Ds8kWHU8g6KINyF68LxCAL7KKeqhU1LC8L6HI4Ad/ZWJcaRdGCLE0
rg5P5g6R5ZKjyl++kkbbwBVm4D3Z78izIB5wytagzXOtOZwaDVatSURDH6NY0zLT
CKlmr0Yp/1bW5NYH6V+F4yWhTZskhxRpLAk+4X9c7vwho8iwWyKSyfoD3J4gc9fk
ytb8wG3aNKbcTLMp69ThPHEIEZButu0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:13 2025 by rpki-client