Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/cca9dae9-2f19-3eba-9783-9689f593ab54.roa
File:                     cca9dae9-2f19-3eba-9783-9689f593ab54.roa (raw, json)
Hash identifier:          uXihw5hUZFw1BDg6HD4e04dFkYcQTa/MJPnd+Hp1ebE=
Subject key identifier:   33:05:E2:E3:9A:47:2C:A7:C6:42:31:11:D9:7D:63:DE:44:5D:AB:4E
Certificate issuer:       /CN=465e1a7d-d25c-41fa-b387-a7c000917fbd
Certificate serial:       010D0C9F43285848FD56A1CAD414ECCCA8478900
Authority key identifier: EF:6D:74:C3:28:7D:81:AC:C2:33:40:EF:1D:9E:92:10:FA:D4:F9:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/cca9dae9-2f19-3eba-9783-9689f593ab54.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     17098
IP address blocks:        158.51.40.0/22 maxlen: 32
                          172.97.100.0/22 maxlen: 32
                          209.182.252.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:a1:ca:d4:14:ec:cc:a8:47:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465e1a7d-d25c-41fa-b387-a7c000917fbd
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=cdc9c453-0e00-4536-9565-2346af29fe14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:25:85:3a:22:c5:e2:ad:17:f7:29:50:d0:
                    82:61:c4:53:e0:bd:9d:64:9d:b7:b0:25:70:20:f0:
                    fb:fd:7e:57:9a:75:43:2c:22:34:bf:9b:dd:c7:66:
                    db:17:59:ac:d4:87:48:cf:76:02:be:3b:7d:bf:2f:
                    d7:f6:48:e8:cf:2b:d6:10:22:ed:b0:b3:3c:8a:2e:
                    87:8e:9f:2f:52:8a:b3:93:46:b9:7a:44:e3:a9:b8:
                    43:57:3e:62:9d:7e:7e:ec:4a:93:d0:8e:af:44:a4:
                    1d:4a:1a:22:7d:4d:cb:a7:09:65:25:72:40:16:74:
                    4e:5d:61:94:1a:5b:aa:e6:a9:b4:92:f6:5e:6c:4e:
                    9e:ac:e5:9f:71:f2:ab:21:16:90:60:68:0b:4f:cd:
                    64:2c:bb:35:69:ba:09:d8:8e:da:58:d5:ff:ab:ca:
                    6b:24:63:d7:e9:e5:6a:c7:1d:2b:d4:f5:f9:c2:34:
                    9e:2c:d2:f4:d0:78:c7:55:99:4d:bb:04:21:de:eb:
                    ca:f2:8e:b4:0c:df:49:4f:db:aa:21:b6:da:7a:72:
                    34:b8:83:c0:8b:49:31:01:1d:fc:b1:d9:08:d2:67:
                    93:8b:7b:a7:19:58:88:a5:19:ac:f0:6e:d6:40:80:
                    e5:75:95:6f:90:7f:5b:27:db:c1:0f:4a:4a:e6:8b:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:05:E2:E3:9A:47:2C:A7:C6:42:31:11:D9:7D:63:DE:44:5D:AB:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/cca9dae9-2f19-3eba-9783-9689f593ab54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/465e1a7d-d25c-41fa-b387-a7c000917fbd.crl

            X509v3 Authority Key Identifier:
                keyid:EF:6D:74:C3:28:7D:81:AC:C2:33:40:EF:1D:9E:92:10:FA:D4:F9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.40.0/22
                  172.97.100.0/22
                  209.182.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d6:bb:9a:50:8b:0b:b9:6d:68:c0:5b:5c:ef:1c:17:c3:51:
         0d:00:47:21:fa:38:45:3c:2e:b8:c5:a3:55:be:fc:5e:cb:97:
         c6:b7:61:99:f7:24:1b:35:59:1c:cb:6e:58:94:5b:d3:4a:de:
         54:fd:a2:ea:b1:e2:bc:16:97:58:ce:ee:6c:c7:ed:cd:03:c6:
         a6:c5:d3:ad:76:58:f1:a9:af:2e:9c:1e:9d:fc:1a:99:75:57:
         90:e6:da:ca:01:0d:da:8f:2a:77:1b:8b:97:72:5a:e1:e4:c8:
         fb:1e:7d:16:67:16:ce:4d:a7:e9:c2:50:01:7d:a7:29:fd:85:
         b7:c0:cf:84:22:72:e6:e9:b2:df:7e:51:3f:cc:48:67:38:25:
         63:0a:f9:87:5a:d7:70:45:5e:de:45:28:53:35:44:97:89:05:
         1e:ae:8e:97:a7:41:86:31:11:41:6f:de:8d:de:fd:03:42:1c:
         58:1b:2f:51:b8:6f:9f:22:d3:f7:bf:60:27:cc:cd:f5:5b:ec:
         45:b9:85:f1:d0:22:b9:a7:a0:54:d6:76:de:25:8f:a6:1f:d6:
         43:bf:2a:c3:5c:b3:9b:a0:ea:7f:4f:cc:66:1b:9c:c7:0a:7c:
         d8:78:3e:29:ee:6b:b8:a3:71:1c:e0:10:87:51:b1:11:44:d6:
         1c:be:02:14
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEj9VqHK1BTszKhHiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY1ZTFhN2QtZDI1Yy00MWZhLWIzODctYTdjMDAwOTE3
ZmJkMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2RjOWM0NTMtMGUwMC00NTM2LTk1NjUtMjM0NmFmMjlmZTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoElhToixeKtF/cpUNCCYcRT4L2dZJ23sCVw
IPD7/X5XmnVDLCI0v5vdx2bbF1ms1IdIz3YCvjt9vy/X9kjozyvWECLtsLM8ii6H
jp8vUoqzk0a5ekTjqbhDVz5inX5+7EqT0I6vRKQdShoifU3LpwllJXJAFnROXWGU
Gluq5qm0kvZebE6erOWfcfKrIRaQYGgLT81kLLs1aboJ2I7aWNX/q8prJGPX6eVq
xx0r1PX5wjSeLNL00HjHVZlNuwQh3uvK8o60DN9JT9uqIbbaenI0uIPAi0kxAR38
sdkI0meTi3unGViIpRms8G7WQIDldZVvkH9bJ9vBD0pK5ov19QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFDMF4uOaRyynxkIxEdl9Y95EXatOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NjVl
MWE3ZC1kMjVjLTQxZmEtYjM4Ny1hN2MwMDA5MTdmYmQvY2NhOWRhZTktMmYxOS0z
ZWJhLTk3ODMtOTY4OWY1OTNhYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDY1ZTFhN2QtZDI1Yy00MWZhLWIz
ODctYTdjMDAwOTE3ZmJkLzQ2NWUxYTdkLWQyNWMtNDFmYS1iMzg3LWE3YzAwMDkx
N2ZiZC5jcmwwHwYDVR0jBBgwFoAU7210wyh9gazCM0DvHZ6SEPrU+XswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NjVlMWE3ZC1kMjVjLTQxZmEtYjM4Ny1hN2Mw
MDA5MTdmYmQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnjMoAwQC
rGFkAwQC0bb8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACPWu5pQiwu5bWjAW1zvHBfDUQ0ARyH6OEU8LrjF
o1W+/F7Ll8a3YZn3JBs1WRzLbliUW9NK3lT9ouqx4rwWl1jO7mzH7c0DxqbF0612
WPGpry6cHp38Gpl1V5Dm2soBDdqPKncbi5dyWuHkyPsefRZnFs5Np+nCUAF9pyn9
hbfAz4Qicubpst9+UT/MSGc4JWMK+Yda13BFXt5FKFM1RJeJBR6ujpenQYYxEUFv
3o3e/QNCHFgbL1G4b58i0/e/YCfMzfVb7EW5hfHQIrmnoFTWdt4lj6Yf1kO/KsNc
s5ug6n9PzGYbnMcKfNh4Pinua7ijcRzgEIdRsRFE1hy+AhQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:41:17 2025 by rpki-client