Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa
File:                     9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa (raw, json)
Hash identifier:          uAq1G465QXMc3BqxoWydcISEdK5QfG81PYPvZXEI0Cw=
Subject key identifier:   B4:64:6A:91:FE:4B:E8:26:3E:BC:BC:13:ED:E7:FB:FF:8A:51:93:C4
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F43285848BBBB87DF90618DF1C2AE7400
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     0
IP address blocks:        206.53.168.0/23 maxlen: 26
                          206.53.173.0/24 maxlen: 26
                          2606:a980:0:2::/64 maxlen: 64
                          2606:a980:0:6::/64 maxlen: 64
                          2606:a980:0:a::/64 maxlen: 64
                          2606:a980:0:b::/64 maxlen: 64
                          2606:a980:0:c::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:87:df:90:61:8d:f1:c2:ae:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=efb6a56e-0d3b-43ff-af1a-1eaffa972d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:57:b2:8f:dc:df:25:66:07:97:6d:ef:55:
                    37:d3:36:2d:b2:c3:b9:99:50:72:66:d9:98:de:25:
                    75:04:55:de:46:62:09:c5:76:e2:99:d6:a0:aa:7f:
                    e4:45:63:e5:86:66:9e:c4:a2:ed:82:5f:44:08:46:
                    43:56:97:91:e7:81:17:b5:83:96:d8:22:50:de:0d:
                    32:fb:76:c0:30:cd:50:aa:a1:84:c3:1f:47:26:b8:
                    80:03:31:f3:e9:11:01:23:95:b6:40:45:3a:52:a6:
                    7c:80:86:70:8d:c4:14:b1:bd:6b:06:f3:53:bd:95:
                    3e:b3:b5:18:99:4f:c6:45:98:94:7b:8d:5b:b3:95:
                    ba:1a:38:13:c9:b9:60:29:da:cc:4a:f9:70:1e:e7:
                    53:dd:a1:84:9b:9e:53:58:04:65:5c:c6:b2:b1:94:
                    82:19:3e:f6:8a:fe:a8:20:ba:6f:f9:27:15:92:06:
                    79:b8:84:74:88:fe:b5:1d:88:45:eb:64:1f:c3:80:
                    7b:4a:c6:13:0c:ef:04:a2:ca:95:00:6f:c4:78:8a:
                    5c:13:3c:47:ed:48:34:1d:ea:16:10:21:60:d6:c9:
                    bf:4d:4b:62:81:fe:fd:1d:bc:87:6c:a9:69:f4:26:
                    0d:ae:5c:02:d6:d6:39:6b:cc:2b:3c:30:e7:cd:e6:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:64:6A:91:FE:4B:E8:26:3E:BC:BC:13:ED:E7:FB:FF:8A:51:93:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.168.0/23
                  206.53.173.0/24
                IPv6:
                  2606:a980:0:2::/64
                  2606:a980:0:6::/64
                  2606:a980:0:a::-2606:a980:0:c:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:7b:8d:d5:24:23:50:07:47:e4:21:bd:30:05:7b:36:d2:5f:
         73:32:1b:11:28:5e:37:74:7c:c5:5e:b1:2c:f1:98:b1:fc:8a:
         90:d8:5f:da:3c:8c:cd:47:35:49:05:24:14:55:ac:d0:68:92:
         30:bb:86:f2:bf:61:94:44:cd:17:4c:ae:1a:99:c9:96:35:c9:
         82:7d:21:84:b2:66:fb:05:c6:67:52:ab:0b:21:d9:77:ff:c3:
         a6:43:15:76:cf:4a:ec:8c:30:f5:d2:5e:b5:94:93:3f:e0:92:
         c2:94:b1:a2:17:34:ce:4a:bc:05:d6:22:34:3a:7b:25:0b:ca:
         d3:5d:52:17:50:26:b6:6c:de:91:84:21:a7:9c:63:2b:2b:f2:
         d1:cc:75:9b:e6:09:08:b3:a6:6b:0f:b0:e1:e4:17:80:48:d7:
         44:50:7a:41:48:9d:f5:df:30:41:f8:cb:04:68:db:db:50:14:
         d0:93:00:66:e5:37:a8:fd:87:ba:7f:56:16:34:ea:5f:8b:be:
         1f:6a:bd:a0:3f:91:71:be:91:13:eb:d4:b7:b6:10:c4:be:41:
         b1:82:21:ec:ce:4a:85:93:6f:28:89:14:43:40:9d:1e:77:f3:
         d4:8d:4c:f8:e0:7c:87:eb:19:11:9c:11:f2:7f:b1:61:7c:25:
         3c:c2:a3:bf
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEi7u4ffkGGN8cKudAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJkYWEyMTctZjAwZi00NmM1LWExMDItZTVmZjJhY2Ix
MDViMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZWZiNmE1NmUtMGQzYi00M2ZmLWFmMWEtMWVhZmZhOTcyZDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCtXso/c3yVmB5dt71U30zYtssO5mVByZtmY
3iV1BFXeRmIJxXbimdagqn/kRWPlhmaexKLtgl9ECEZDVpeR54EXtYOW2CJQ3g0y
+3bAMM1QqqGEwx9HJriAAzHz6REBI5W2QEU6UqZ8gIZwjcQUsb1rBvNTvZU+s7UY
mU/GRZiUe41bs5W6GjgTyblgKdrMSvlwHudT3aGEm55TWARlXMaysZSCGT72iv6o
ILpv+ScVkgZ5uIR0iP61HYhF62Qfw4B7SsYTDO8EosqVAG/EeIpcEzxH7Ug0HeoW
ECFg1sm/TUtigf79HbyHbKlp9CYNrlwC1tY5a8wrPDDnzebIMQIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFLRkapH+S+gmPry8E+3n+/+KUZPEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRh
YTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZmMmFjYjEwNWIvOWNlOGRmNDEtMjhlZi0z
OTBlLTg4YzctZDVjNjQwMzliMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmJkYWEyMTctZjAwZi00NmM1LWEx
MDItZTVmZjJhY2IxMDViLzJiZGFhMjE3LWYwMGYtNDZjNS1hMTAyLWU1ZmYyYWNi
MTA1Yi5jcmwwHwYDVR0jBBgwFoAUwIjTWY7ATOSXd4i3N52Puz3pHqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRhYTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZm
MmFjYjEwNWIuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjASBAIAATAMAwQBzjWoAwQA
zjWtMDQEAgACMC4DCQAmBqmAAAAAAgMJACYGqYAAAAAGMBYDCQEmBqmAAAAACgMJ
ACYGqYAAAAAMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACF7jdUkI1AHR+QhvTAFezbSX3MyGxEoXjd0fMVe
sSzxmLH8ipDYX9o8jM1HNUkFJBRVrNBokjC7hvK/YZREzRdMrhqZyZY1yYJ9IYSy
ZvsFxmdSqwsh2Xf/w6ZDFXbPSuyMMPXSXrWUkz/gksKUsaIXNM5KvAXWIjQ6eyUL
ytNdUhdQJrZs3pGEIaecYysr8tHMdZvmCQizpmsPsOHkF4BI10RQekFInfXfMEH4
ywRo29tQFNCTAGblN6j9h7p/VhY06l+Lvh9qvaA/kXG+kRPr1Le2EMS+QbGCIezO
SoWTbyiJFENAnR5389SNTPjgfIfrGRGcEfJ/sWF8JTzCo78=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:06:59 2025 by rpki-client