Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/833be4d1-720c-3d49-b351-1bc4b9d13ae6.roa
File:                     833be4d1-720c-3d49-b351-1bc4b9d13ae6.roa (raw, json)
Hash identifier:          zRoXWzRpDbLGEQTgC6dkxChNSPJ3cEOUK/DAzd1jbAc=
Subject key identifier:   40:17:98:B1:97:68:42:12:D1:7C:A4:D0:8B:78:8B:76:E7:02:BB:92
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB699C9B573D9086590E90
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/833be4d1-720c-3d49-b351-1bc4b9d13ae6.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     3356
IP address blocks:        205.141.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:69:9c:9b:57:3d:90:86:59:0e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=7356f5eb-9d11-4b05-bcff-5243eefca0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:d4:e7:4d:48:84:dd:01:e7:99:d8:9e:9a:
                    e3:93:79:fe:29:c5:9e:88:50:0e:f8:21:39:e3:92:
                    96:7f:a7:43:0f:62:9f:64:ff:27:97:74:e2:e3:86:
                    d7:9d:1a:ba:33:fb:87:b1:97:1d:08:6a:6f:7a:91:
                    eb:7c:13:be:26:61:f0:87:1d:8a:38:2a:3f:59:93:
                    b2:31:43:a7:0a:28:8e:e2:2c:eb:2c:54:24:e0:1b:
                    e6:99:75:4d:42:64:17:f5:de:32:df:68:17:94:e2:
                    14:06:01:aa:6b:dd:e4:59:d8:85:e4:86:59:8d:3a:
                    9a:36:d6:9f:d6:b8:64:0f:0d:6f:0e:f8:0e:79:db:
                    34:72:1d:32:02:41:31:b7:d9:67:61:fc:02:88:28:
                    ba:e6:77:cc:fe:68:d3:e3:2c:87:a6:6d:af:c0:ad:
                    0e:0b:bf:fc:8e:ea:bc:00:7f:3e:84:1b:b1:3e:14:
                    95:49:ed:8d:fd:4f:2f:05:b6:0a:d7:15:ce:f2:e8:
                    74:8c:66:95:bc:11:24:71:87:d1:11:fd:7b:f5:35:
                    b6:70:c4:f7:89:cb:1b:ed:66:cd:4d:c1:d1:08:7e:
                    be:77:e7:a7:63:48:ea:e3:a2:23:77:a4:08:d5:cf:
                    2d:b7:2f:fa:b2:dd:3e:5f:01:71:70:5a:14:8f:f4:
                    53:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:17:98:B1:97:68:42:12:D1:7C:A4:D0:8B:78:8B:76:E7:02:BB:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/833be4d1-720c-3d49-b351-1bc4b9d13ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:2a:ba:53:ee:76:65:58:1e:81:88:31:4b:c1:5f:e5:30:00:
         d1:ed:df:6b:dd:32:be:b5:68:6c:58:f8:6c:15:ff:79:11:34:
         83:dd:f0:86:b7:f6:10:ec:cf:67:ae:79:24:0d:3f:dd:f3:30:
         78:62:e2:7c:d1:47:a7:39:6a:51:06:5c:e8:4a:9b:a2:2e:5d:
         f9:eb:74:6c:24:eb:43:47:26:2a:fb:67:06:70:b1:4a:c2:ed:
         98:f2:4c:77:72:ac:7e:87:42:4e:ca:82:ea:fa:cc:5b:e1:13:
         75:5b:e1:64:ee:e7:a2:68:9c:ab:77:ad:82:03:75:89:5c:95:
         14:dc:59:43:e5:72:6c:b2:e7:d1:ee:ba:05:63:32:27:f2:bf:
         df:d1:ee:ad:22:93:ba:98:9e:0b:b7:1f:77:3c:00:70:27:a6:
         a9:8e:80:da:fb:46:03:d5:75:0d:fd:58:97:3f:ee:96:ef:41:
         b2:3d:f3:6c:5d:87:a3:64:e1:46:41:39:39:cf:84:ac:e9:3c:
         e6:64:ce:3c:f2:74:d9:12:9a:6e:97:89:cc:60:98:77:26:ab:
         8f:f7:5e:07:76:21:76:4a:3d:41:6e:a6:14:98:fd:66:30:86:
         8f:9e:36:09:9e:4d:ed:f9:6d:96:90:9c:b4:41:2d:0e:a0:0d:
         4d:2b:64:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2mcm1c9kIZZDpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk
NzM1NmY1ZWItOWQxMS00YjA1LWJjZmYtNTI0M2VlZmNhMGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+HU501IhN0B55nYnprjk3n+KcWeiFAO+CE5
45KWf6dDD2KfZP8nl3Ti44bXnRq6M/uHsZcdCGpvepHrfBO+JmHwhx2KOCo/WZOy
MUOnCiiO4izrLFQk4BvmmXVNQmQX9d4y32gXlOIUBgGqa93kWdiF5IZZjTqaNtaf
1rhkDw1vDvgOeds0ch0yAkExt9lnYfwCiCi65nfM/mjT4yyHpm2vwK0OC7/8juq8
AH8+hBuxPhSVSe2N/U8vBbYK1xXO8uh0jGaVvBEkcYfREf179TW2cMT3icsb7WbN
TcHRCH6+d+enY0jq46Ijd6QI1c8tty/6st0+XwFxcFoUj/RT9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAXmLGXaEIS0Xyk0It4i3bnAruSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODMzYmU0ZDEtNzIwYy0z
ZDQ5LWIzNTEtMWJjNGI5ZDEzYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY3OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcqulPudmVYHoGIMUvBX+UwANHt32vdMr61aGxY+GwV/3kRNIPd8Ia3
9hDsz2eueSQNP93zMHhi4nzRR6c5alEGXOhKm6IuXfnrdGwk60NHJir7ZwZwsUrC
7ZjyTHdyrH6HQk7Kgur6zFvhE3Vb4WTu56JonKt3rYIDdYlclRTcWUPlcmyy59Hu
ugVjMifyv9/R7q0ik7qYngu3H3c8AHAnpqmOgNr7RgPVdQ39WJc/7pbvQbI982xd
h6Nk4UZBOTnPhKzpPOZkzjzydNkSmm6XicxgmHcmq4/3Xgd2IXZKPUFuphSY/WYw
ho+eNgmeTe35bZaQnLRBLQ6gDU0rZIo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:28 2025 by rpki-client