Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa
File:                     4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa (raw, json)
Hash identifier:          Gxz2OQXdiE35JIx0PTdtXLJHKv5bMihaXE+amoxJcUs=
Subject key identifier:   CC:25:8A:9F:A9:BA:B6:73:DA:D9:86:73:A8:A4:D1:23:DB:41:A2:68
Certificate issuer:       /CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
Certificate serial:       010D0C9F4328584902EBFE240F9FBE3BF34F1200
Authority key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     11260
IP address blocks:        67.213.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:fe:24:0f:9f:be:3b:f3:4f:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=ae9ff83d-d50c-4886-90ac-83bfa4ceca14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:d7:5b:70:82:9a:fe:a0:01:bd:4d:33:36:
                    0f:42:b2:cd:1a:14:7e:a3:4c:ce:7d:fd:03:97:12:
                    80:e3:9c:5f:80:0a:56:37:58:45:0f:af:eb:a9:62:
                    03:98:fa:4a:11:35:99:ae:91:dc:64:10:e2:24:94:
                    62:2e:99:52:2e:d4:0b:22:b7:12:d3:74:ed:73:71:
                    2b:e2:5e:bb:85:08:a1:99:54:80:a5:31:c6:26:cd:
                    eb:85:27:00:69:b5:ee:fe:43:bc:7c:ab:67:1e:86:
                    ca:32:bc:02:2a:e1:67:d4:9b:2a:20:a5:e1:bd:cf:
                    b4:f0:ad:4c:48:80:e3:34:44:1b:39:4a:d5:c8:88:
                    3a:15:ce:27:9b:6c:86:5b:c3:67:96:f5:37:27:a4:
                    73:64:28:6f:c3:df:a4:fe:c6:d5:1f:6d:e2:01:cf:
                    ed:64:91:72:4a:c4:8d:37:de:40:b4:09:cf:ec:37:
                    a2:d6:01:b6:59:b1:21:36:68:64:1e:97:c5:68:e9:
                    ec:ed:89:09:bf:81:ae:c8:a0:40:c0:41:72:95:59:
                    1f:f9:1c:f3:45:e4:43:be:44:76:0b:ed:e0:e4:fb:
                    f2:1a:c4:85:94:5b:7a:81:84:c3:d8:d1:2a:42:56:
                    0b:08:71:a7:2a:a8:a1:73:15:eb:94:00:0d:f0:05:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:25:8A:9F:A9:BA:B6:73:DA:D9:86:73:A8:A4:D1:23:DB:41:A2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl

            X509v3 Authority Key Identifier:
                keyid:95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:a1:f4:ff:08:1f:a9:c0:67:93:71:90:b3:42:79:69:12:
         1c:6e:d5:5d:96:c2:d7:bd:c9:2e:03:94:ff:1d:01:8c:f9:45:
         10:da:3d:d5:4b:75:6c:08:43:b7:20:4d:8c:9e:64:b4:bb:21:
         58:31:b6:51:26:e7:a1:b2:a8:1e:52:02:4b:69:29:ac:e8:08:
         4d:17:cc:0d:1e:a6:2a:25:0b:ac:f8:2e:d9:71:71:81:ea:41:
         8d:48:09:1d:4a:09:8e:24:41:be:42:6e:4e:56:e0:56:ae:6e:
         96:f0:ad:48:41:d0:a7:32:b7:3a:2a:9c:0c:9d:95:55:43:ca:
         24:41:d2:9e:6b:f5:c4:13:3a:d5:34:fe:f2:19:8e:26:cb:7b:
         c1:75:d1:a5:6b:20:4e:df:24:6c:c4:3b:18:9a:21:95:d5:bc:
         05:3c:a7:8a:28:92:08:be:74:2c:56:86:d5:e9:66:c5:4c:4b:
         8b:6b:14:38:f2:f0:82:d0:2b:77:6e:44:6a:60:6a:5d:8b:ec:
         d2:73:4b:8b:90:9c:59:c7:ae:9b:00:24:06:7c:c8:a3:42:3f:
         21:8e:96:ae:83:80:02:95:ed:e8:e3:41:ae:b2:d4:69:ba:d8:
         8c:8f:3f:d0:45:90:fe:b9:56:44:8b:10:46:12:43:e7:bf:b8:
         71:3c:0c:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/4kD5++O/NPEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhNDhhZDAtZjYxMy00YzY2LWIwN2EtNjQ3M2Q4YTVh
YTI2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
YWU5ZmY4M2QtZDUwYy00ODg2LTkwYWMtODNiZmE0Y2VjYTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6TXW3CCmv6gAb1NMzYPQrLNGhR+o0zOff0D
lxKA45xfgApWN1hFD6/rqWIDmPpKETWZrpHcZBDiJJRiLplSLtQLIrcS03Ttc3Er
4l67hQihmVSApTHGJs3rhScAabXu/kO8fKtnHobKMrwCKuFn1JsqIKXhvc+08K1M
SIDjNEQbOUrVyIg6Fc4nm2yGW8NnlvU3J6RzZChvw9+k/sbVH23iAc/tZJFySsSN
N95AtAnP7Dei1gG2WbEhNmhkHpfFaOns7YkJv4GuyKBAwEFylVkf+RzzReRDvkR2
C+3g5PvyGsSFlFt6gYTD2NEqQlYLCHGnKqihcxXrlAAN8AUoQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwlip+purZz2tmGc6ik0SPbQaJoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iY2E0
OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhhNWFhMjYvNGI2ZDczZGEtMThmYS0z
MDAyLTk4NjItNmIxY2I5ZDhkZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmNhNDhhZDAtZjYxMy00YzY2LWIw
N2EtNjQ3M2Q4YTVhYTI2L2JjYTQ4YWQwLWY2MTMtNGM2Ni1iMDdhLTY0NzNkOGE1
YWEyNi5jcmwwHwYDVR0jBBgwFoAUlVtTPU6qo+ng50X9/OZIWSdLLRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iY2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDcz
ZDhhNWFhMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9VgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHG1ofT/CB+pwGeTcZCzQnlpEhxu1V2Wwte9yS4DlP8dAYz5RRDaPdVL
dWwIQ7cgTYyeZLS7IVgxtlEm56GyqB5SAktpKazoCE0XzA0epiolC6z4LtlxcYHq
QY1ICR1KCY4kQb5Cbk5W4FaubpbwrUhB0KcytzoqnAydlVVDyiRB0p5r9cQTOtU0
/vIZjibLe8F10aVrIE7fJGzEOxiaIZXVvAU8p4ookgi+dCxWhtXpZsVMS4trFDjy
8ILQK3duRGpgal2L7NJzS4uQnFnHrpsAJAZ8yKNCPyGOlq6DgAKV7ejjQa6y1Gm6
2IyPP9BFkP65VkSLEEYSQ+e/uHE8DKc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:31 2025 by rpki-client