Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/49903a71-6fe0-3b51-8832-6a8e6cb625d6.roa
File:                     49903a71-6fe0-3b51-8832-6a8e6cb625d6.roa (raw, json)
Hash identifier:          FDdY9FBO3vamyGDs30G9jvJjG/23TYww8EnrJ7cStqM=
Subject key identifier:   EC:5C:39:09:E3:66:28:D5:23:02:F4:04:DC:FC:BF:C1:31:73:41:C6
Certificate issuer:       /CN=a8fd2c6e-ced3-4794-8ce7-a370fe480610
Certificate serial:       010D0C9F4328583E02343948D64B4825DC477CC0
Authority key identifier: 79:0D:4F:8D:60:FE:DE:7D:DD:70:ED:3E:46:34:D7:45:BF:0F:90:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/49903a71-6fe0-3b51-8832-6a8e6cb625d6.roa
Signing time:             Tue 24 May 2022 14:21:40 +0000
ROA not before:           Tue 24 May 2022 14:21:40 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     834
IP address blocks:        69.166.226.0/23 maxlen: 24
                          69.166.236.0/23 maxlen: 24
                          69.166.205.0/24 maxlen: 24
                          69.166.207.0/24 maxlen: 24
                          69.166.229.0/24 maxlen: 24
                          69.166.230.0/24 maxlen: 24
                          69.166.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:02:34:39:48:d6:4b:48:25:dc:47:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8fd2c6e-ced3-4794-8ce7-a370fe480610
        Validity
            Not Before: May 24 14:21:40 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=71be1639-d3c6-48fc-bc3f-f1c0b1714edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:09:c1:2c:29:91:fb:48:36:98:f3:1a:c7:
                    24:38:60:2a:be:b8:d8:ab:46:0b:14:ab:bd:6e:04:
                    02:bf:cd:93:8c:f1:d6:1b:08:89:c4:76:2d:df:8f:
                    82:6d:de:7f:5a:0d:a8:ad:c9:72:47:0e:30:79:e2:
                    b0:2c:2c:5a:e8:14:d8:81:35:02:2b:68:1e:5a:9c:
                    68:74:71:49:d4:b7:9f:b1:f3:c0:a4:7c:5e:1c:5b:
                    f8:10:04:bc:34:d1:86:f4:a0:fd:4b:02:07:01:c5:
                    b9:a7:06:5d:db:f6:c8:f8:fb:1a:91:fe:5e:81:8a:
                    39:23:b3:33:a0:61:13:12:73:59:f3:4e:69:7c:42:
                    bf:09:ce:f3:32:66:a8:5f:da:ce:78:b2:57:6d:ba:
                    cb:6e:b2:0f:9b:0f:f2:97:1a:f2:b9:9d:c6:a7:47:
                    5a:f6:55:1d:b8:ac:af:cc:26:a3:61:9f:12:83:d0:
                    c7:5c:27:f4:de:80:f6:37:78:4e:a2:f5:45:45:f6:
                    60:1e:a7:b7:f4:0f:e5:4f:13:0d:4a:aa:07:0c:94:
                    a4:6d:0d:b2:46:9c:77:40:ea:6d:7b:d5:4e:29:97:
                    f4:c0:b0:78:43:bc:44:e0:9c:f6:d0:6d:ce:cd:71:
                    d0:06:de:94:bb:4c:18:93:3f:e7:a8:9d:a5:1c:0e:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5C:39:09:E3:66:28:D5:23:02:F4:04:DC:FC:BF:C1:31:73:41:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/49903a71-6fe0-3b51-8832-6a8e6cb625d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/a8fd2c6e-ced3-4794-8ce7-a370fe480610.crl

            X509v3 Authority Key Identifier:
                keyid:79:0D:4F:8D:60:FE:DE:7D:DD:70:ED:3E:46:34:D7:45:BF:0F:90:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.205.0/24
                  69.166.207.0/24
                  69.166.226.0/23
                  69.166.229.0-69.166.230.255
                  69.166.235.0-69.166.237.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:41:db:8c:c7:e7:6f:ad:3c:79:ab:f3:d9:73:62:f3:24:ff:
         af:42:43:22:cd:ef:cb:ae:14:8b:04:69:3f:07:e0:6c:ad:1b:
         fb:2f:9b:b0:ec:8d:af:c4:00:d2:13:df:75:ce:9e:d4:3c:9f:
         cd:13:40:bb:6c:ab:e0:7d:ad:e3:84:56:0c:d4:d6:ca:c2:c5:
         19:27:21:97:bc:cc:eb:4a:43:97:cd:c2:58:d8:3f:15:6b:61:
         08:39:3c:52:04:c6:00:e1:ee:80:21:67:0f:51:ca:bc:ce:95:
         98:9b:47:08:89:f9:e0:ee:2e:12:b6:68:7e:fd:57:20:c8:7f:
         04:5b:19:a6:59:d7:e3:c5:df:d1:3c:e0:ea:43:6d:c3:7f:59:
         32:16:f2:30:32:61:a2:93:e8:17:2c:01:e9:dd:fb:4c:98:14:
         28:34:ab:11:ad:00:8c:1e:67:fa:61:fd:8a:42:48:06:d3:7c:
         84:26:5e:d6:cc:2a:2b:07:54:c2:0d:b7:d5:75:f5:88:37:a9:
         8c:97:90:55:66:82:f1:82:76:90:5c:fb:2c:d1:3e:d0:18:f4:
         52:a3:79:b7:9d:fe:8c:89:d0:49:bd:56:56:49:48:73:3d:be:
         93:79:da:66:a5:15:8c:e1:9a:55:62:8e:0d:35:f4:aa:2b:8a:
         59:4e:04:2c
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWD4CNDlI1ktIJdxHfMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThmZDJjNmUtY2VkMy00Nzk0LThjZTctYTM3MGZlNDgw
NjEwMB4XDTIyMDUyNDE0MjE0MFoXDTI0MDgyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NzFiZTE2MzktZDNjNi00OGZjLWJjM2YtZjFjMGIxNzE0ZWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKUJwSwpkftINpjzGsckOGAqvrjYq0YLFKu9
bgQCv82TjPHWGwiJxHYt34+Cbd5/Wg2orclyRw4weeKwLCxa6BTYgTUCK2geWpxo
dHFJ1LefsfPApHxeHFv4EAS8NNGG9KD9SwIHAcW5pwZd2/bI+Psakf5egYo5I7Mz
oGETEnNZ805pfEK/Cc7zMmaoX9rOeLJXbbrLbrIPmw/ylxryuZ3Gp0da9lUduKyv
zCajYZ8Sg9DHXCf03oD2N3hOovVFRfZgHqe39A/lTxMNSqoHDJSkbQ2yRpx3QOpt
e9VOKZf0wLB4Q7xE4Jz20G3OzXHQBt6Uu0wYkz/nqJ2lHA65LQIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFOxcOQnjZijVIwL0BNz8v8Exc0HGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOGZk
MmM2ZS1jZWQzLTQ3OTQtOGNlNy1hMzcwZmU0ODA2MTAvNDk5MDNhNzEtNmZlMC0z
YjUxLTg4MzItNmE4ZTZjYjYyNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYThmZDJjNmUtY2VkMy00Nzk0LThj
ZTctYTM3MGZlNDgwNjEwL2E4ZmQyYzZlLWNlZDMtNDc5NC04Y2U3LWEzNzBmZTQ4
MDYxMC5jcmwwHwYDVR0jBBgwFoAUeQ1PjWD+3n3dcO0+RjTXRb8PkAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hOGZkMmM2ZS1jZWQzLTQ3OTQtOGNlNy1hMzcw
ZmU0ODA2MTAuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQARabNAwQA
RabPAwQBRabiMAwDBABFpuUDBABFpuYwDAMEAEWm6wMEAUWm7DBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3
QduMx+dvrTx5q/PZc2LzJP+vQkMize/LrhSLBGk/B+BsrRv7L5uw7I2vxADSE991
zp7UPJ/NE0C7bKvgfa3jhFYM1NbKwsUZJyGXvMzrSkOXzcJY2D8Va2EIOTxSBMYA
4e6AIWcPUcq8zpWYm0cIifng7i4Stmh+/VcgyH8EWxmmWdfjxd/RPODqQ23Df1ky
FvIwMmGik+gXLAHp3ftMmBQoNKsRrQCMHmf6Yf2KQkgG03yEJl7WzCorB1TCDbfV
dfWIN6mMl5BVZoLxgnaQXPss0T7QGPRSo3m3nf6MidBJvVZWSUhzPb6TedpmpRWM
4ZpVYo4NNfSqK4pZTgQs
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:40 2025 by rpki-client