Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7045a60-4c62-39c8-949c-52968d1cb529.roa
File:                     b7045a60-4c62-39c8-949c-52968d1cb529.roa (raw, json)
Hash identifier:          j8jptA5a8EjcVkpx0RWvnypx2UUfuBUN7+rHCTPK9NA=
Subject key identifier:   2E:C0:92:B6:FA:79:48:F7:01:2E:A3:57:BB:B0:CF:CC:9D:8B:41:93
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F432858488BF9871F1D45B3C3D55424C0
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7045a60-4c62-39c8-949c-52968d1cb529.roa
Signing time:             Tue 14 Jan 2025 23:27:01 +0000
ROA not before:           Tue 14 Jan 2025 23:27:01 +0000
ROA not after:            Mon 14 Apr 2025 22:27:01 +0000
asID:                     40244
IP address blocks:        67.231.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8b:f9:87:1f:1d:45:b3:c3:d5:54:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Jan 14 23:27:01 2025 GMT
            Not After : Apr 14 22:27:01 2025 GMT
        Subject: CN=f1e10950-eef9-41a5-ada0-5ccfff60acde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:de:1a:f4:96:32:d8:f5:cd:2a:79:b8:48:
                    0f:5e:ac:c1:ea:fd:c9:d5:29:93:97:83:b2:3b:cc:
                    3c:58:0f:3a:c1:45:62:58:81:a0:6d:c0:2e:b3:5f:
                    6a:45:53:71:e4:b7:61:18:7f:c1:47:ca:97:a0:87:
                    f1:a7:e8:59:7b:c1:ab:76:03:1c:f2:e5:68:c3:bf:
                    50:90:ff:e4:91:92:7c:b8:91:80:45:32:b1:2e:12:
                    ec:98:48:9c:9e:4b:47:a0:54:c0:d5:6d:6a:1a:3a:
                    78:31:43:3d:f9:42:ac:ac:c3:31:e5:1b:68:c3:1b:
                    96:8f:55:8c:83:19:93:15:a9:db:d8:02:dc:1b:da:
                    a2:b2:b3:6c:77:d1:13:66:a1:bd:61:7e:cd:0b:9b:
                    f8:09:6c:45:f0:ad:34:16:31:f5:3e:14:a5:6b:d4:
                    f9:42:c8:f7:f8:51:a1:77:86:7e:f1:b5:9c:60:c8:
                    8a:e5:c0:89:32:c4:26:2d:b2:91:87:8e:f3:98:a8:
                    de:fc:e5:db:5d:60:96:fb:31:bc:de:ea:7e:f5:8b:
                    4b:16:af:89:c8:7e:49:32:e0:9e:e8:8b:54:b3:a9:
                    24:6f:e6:0d:97:ad:75:1c:ed:67:d8:a7:d6:32:6f:
                    99:6a:df:ab:6c:04:d5:f6:57:70:b3:93:de:b1:56:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C0:92:B6:FA:79:48:F7:01:2E:A3:57:BB:B0:CF:CC:9D:8B:41:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7045a60-4c62-39c8-949c-52968d1cb529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.231.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7c:d6:21:39:35:1e:5c:f5:ac:10:1c:09:5f:30:f9:6a:5e:
         6c:55:a8:94:90:19:d6:e1:64:ed:00:6b:c1:54:1b:af:6b:06:
         90:b4:e1:c5:08:e9:1e:1a:0e:23:86:ca:a6:19:18:91:50:34:
         93:53:84:5c:ef:ea:67:46:c8:43:d1:9f:3e:c7:2c:aa:5a:28:
         82:31:75:b9:5f:72:d4:66:27:73:75:8a:35:74:1a:7f:6e:e4:
         ac:47:0d:41:fa:e2:86:03:f2:e4:97:ac:15:23:9a:9d:ef:8c:
         a9:b4:e3:7b:cb:41:1c:d2:e1:44:f5:de:42:a4:2a:86:ea:60:
         b8:42:58:30:bb:5b:4a:a3:b7:6a:aa:b9:80:f7:b8:1e:a1:95:
         76:20:b9:16:65:82:31:53:66:7c:c3:fe:1c:60:3f:0d:0a:af:
         1f:76:b2:de:e7:d6:a9:ad:d5:35:02:99:18:aa:9c:5b:dc:86:
         1f:a5:68:5d:39:7e:f2:ac:f8:54:0e:17:7c:4e:7a:a9:dd:71:
         db:94:45:ed:7c:1d:2e:bf:03:60:14:60:ae:fc:88:f0:0d:cc:
         a9:6a:93:ca:1a:b7:19:6d:df:2e:bf:00:9b:44:11:88:73:c5:
         8c:b6:22:5a:93:cd:71:74:76:20:b8:37:a4:aa:de:e1:29:69:
         41:d5:dd:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiL+YcfHUWzw9VUJMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgw
NjNjMB4XDTI1MDExNDIzMjcwMVoXDTI1MDQxNDIyMjcwMVowLzEtMCsGA1UEAxMk
ZjFlMTA5NTAtZWVmOS00MWE1LWFkYTAtNWNjZmZmNjBhY2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU/eGvSWMtj1zSp5uEgPXqzB6v3J1SmTl4Oy
O8w8WA86wUViWIGgbcAus19qRVNx5LdhGH/BR8qXoIfxp+hZe8GrdgMc8uVow79Q
kP/kkZJ8uJGARTKxLhLsmEicnktHoFTA1W1qGjp4MUM9+UKsrMMx5RtowxuWj1WM
gxmTFanb2ALcG9qisrNsd9ETZqG9YX7NC5v4CWxF8K00FjH1PhSla9T5Qsj3+FGh
d4Z+8bWcYMiK5cCJMsQmLbKRh47zmKje/OXbXWCW+zG83up+9YtLFq+JyH5JMuCe
6ItUs6kkb+YNl611HO1n2KfWMm+Zat+rbATV9ldws5PesVanWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7Akrb6eUj3AS6jV7uwz8ydi0GTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5
N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvYjcwNDVhNjAtNGM2Mi0z
OWM4LTk0OWMtNTI5NjhkMWNiNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc0OTdhM2ItYTBmOS00NWJkLWFi
MGItNGU3MzdjODgwNjNjL2I3NDk3YTNiLWEwZjktNDViZC1hYjBiLTRlNzM3Yzg4
MDYzYy5jcmwwHwYDVR0jBBgwFoAU5diIGp8HiJED/JAy72HfTKkW/RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTcz
N2M4ODA2M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+fwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFp81iE5NR5c9awQHAlfMPlqXmxVqJSQGdbhZO0Aa8FUG69rBpC04cUI
6R4aDiOGyqYZGJFQNJNThFzv6mdGyEPRnz7HLKpaKIIxdblfctRmJ3N1ijV0Gn9u
5KxHDUH64oYD8uSXrBUjmp3vjKm043vLQRzS4UT13kKkKobqYLhCWDC7W0qjt2qq
uYD3uB6hlXYguRZlgjFTZnzD/hxgPw0Krx92st7n1qmt1TUCmRiqnFvchh+laF05
fvKs+FQOF3xOeqndcduURe18HS6/A2AUYK78iPANzKlqk8oatxlt3y6/AJtEEYhz
xYy2IlqTzXF0diC4N6Sq3uEpaUHV3To=
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:25:01 2025 by rpki-client