Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad54f154-c805-3de3-8529-cb8fd1832c11.roa
File:                     ad54f154-c805-3de3-8529-cb8fd1832c11.roa (raw, json)
Hash identifier:          RW0cnmPk5cI41ai7hbLw+6ckGGVdUbqQnKCvRaKZOWc=
Subject key identifier:   5E:FB:BA:2B:02:98:94:FC:CC:05:F3:62:39:89:EA:E0:C9:F2:3F:95
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848ADC61D9C01885F34E10166E0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad54f154-c805-3de3-8529-cb8fd1832c11.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     203
IP address blocks:        216.240.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:1d:9c:01:88:5f:34:e1:01:66:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=e901d80c-3552-4949-b384-62a1f246f121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:dc:d4:97:71:7b:cd:d1:cb:20:fa:86:0f:
                    0e:29:f3:e7:31:0b:67:d4:14:8c:0d:bc:50:c4:6c:
                    c5:af:69:d2:0e:c0:2b:ab:6f:69:52:65:5c:cb:31:
                    3d:6b:13:43:e0:1e:1e:62:4b:ba:eb:5c:31:41:1b:
                    c2:ea:9f:27:bc:98:dc:7c:8c:0c:ab:53:64:1d:b6:
                    b0:cb:8a:7f:0b:87:41:82:de:21:85:eb:51:aa:af:
                    d5:5e:ad:17:2f:7b:bb:be:05:bc:46:6c:4b:7b:85:
                    aa:11:3c:7f:cd:a8:9b:c3:91:3b:97:2b:f1:23:e5:
                    2f:95:d8:71:0f:f6:ba:a7:7d:7d:15:96:89:a5:8d:
                    47:eb:a8:3a:14:cf:ea:d9:88:fd:5d:e5:fe:5f:e6:
                    5c:fa:b2:b0:67:5e:73:09:7d:4a:17:32:89:6b:e6:
                    40:3f:61:34:39:d5:a1:30:0d:7f:d8:6e:7c:49:bc:
                    a4:ec:aa:91:a4:53:a7:a0:4a:ea:3c:7c:ce:17:9b:
                    8f:7d:1e:29:8c:c4:58:48:f3:39:cf:3b:26:65:d8:
                    85:01:81:7b:5c:79:d7:46:00:15:ca:a2:58:fa:b5:
                    bc:95:e2:7f:04:61:ea:59:92:ac:41:91:a5:af:d5:
                    a5:fa:82:c0:ae:fe:e3:8c:a1:fd:af:27:df:41:90:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FB:BA:2B:02:98:94:FC:CC:05:F3:62:39:89:EA:E0:C9:F2:3F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad54f154-c805-3de3-8529-cb8fd1832c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:9d:87:a8:0f:30:77:18:f9:5b:b3:ed:d8:ed:c1:27:d2:
         2a:6e:d3:78:2a:84:f7:ff:8f:67:91:dc:fd:07:25:59:29:28:
         2b:d2:aa:3c:fa:20:b2:9b:85:83:ac:7e:f0:58:a0:e6:ba:9e:
         c3:bd:fe:60:14:6f:0d:c4:95:76:c6:17:98:73:42:84:bd:1a:
         98:1a:b7:96:22:0d:b2:14:dc:6a:88:09:aa:b3:84:c7:de:d6:
         7c:2f:f4:a8:15:c6:9d:89:4f:af:2e:38:b5:a6:24:af:36:47:
         1c:f6:7a:df:db:26:22:2d:47:dd:a1:e0:0f:11:1d:df:03:84:
         74:0f:81:6d:ef:c3:cf:e8:7f:a6:42:73:9d:a6:4d:37:f0:ae:
         96:5c:05:28:3e:af:d1:88:31:0c:16:41:c2:ce:3c:43:30:cd:
         2c:ca:c9:f6:a9:14:da:84:4f:9d:d5:a1:45:cc:f8:33:81:66:
         87:18:2a:26:74:b0:32:ff:4c:6f:c2:ca:fe:d5:b5:fd:f4:bf:
         e9:49:68:dc:f7:a4:09:8b:37:46:39:85:9e:61:a1:88:47:d3:
         91:85:76:4a:a9:53:3e:58:32:b5:8a:38:56:20:69:98:27:74:
         a0:d1:ed:cf:2f:18:22:ae:d4:65:01:d6:df:fd:88:95:c3:14:
         d2:27:6e:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxh2cAYhfNOEBZuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZTkwMWQ4MGMtMzU1Mi00OTQ5LWIzODQtNjJhMWYyNDZmMTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRLc1Jdxe83RyyD6hg8OKfPnMQtn1BSMDbxQ
xGzFr2nSDsArq29pUmVcyzE9axND4B4eYku661wxQRvC6p8nvJjcfIwMq1NkHbaw
y4p/C4dBgt4hhetRqq/VXq0XL3u7vgW8RmxLe4WqETx/zaibw5E7lyvxI+Uvldhx
D/a6p319FZaJpY1H66g6FM/q2Yj9XeX+X+Zc+rKwZ15zCX1KFzKJa+ZAP2E0OdWh
MA1/2G58Sbyk7KqRpFOnoErqPHzOF5uPfR4pjMRYSPM5zzsmZdiFAYF7XHnXRgAV
yqJY+rW8leJ/BGHqWZKsQZGlr9Wl+oLArv7jjKH9ryffQZBlwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF77uisCmJT8zAXzYjmJ6uDJ8j+VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWQ1NGYxNTQtYzgwNS0z
ZGUzLTg1MjktY2I4ZmQxODMyYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETtnYeoDzB3GPlbs+3Y7cEn0ipu03gqhPf/j2eR3P0HJVkpKCvSqjz6
ILKbhYOsfvBYoOa6nsO9/mAUbw3ElXbGF5hzQoS9Gpgat5YiDbIU3GqICaqzhMfe
1nwv9KgVxp2JT68uOLWmJK82Rxz2et/bJiItR92h4A8RHd8DhHQPgW3vw8/of6ZC
c52mTTfwrpZcBSg+r9GIMQwWQcLOPEMwzSzKyfapFNqET53VoUXM+DOBZocYKiZ0
sDL/TG/Cyv7Vtf30v+lJaNz3pAmLN0Y5hZ5hoYhH05GFdkqpUz5YMrWKOFYgaZgn
dKDR7c8vGCKu1GUB1t/9iJXDFNInbig=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:21:45 2025 by rpki-client