Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9bf3e49c-6067-3365-ba1d-b9f1536bb7ef.roa
File:                     9bf3e49c-6067-3365-ba1d-b9f1536bb7ef.roa (raw, json)
Hash identifier:          k2s5BLIx91YZgdQoWPOuomggJ7jVit6AnvE2OC7df/0=
Subject key identifier:   84:5A:AE:F9:BC:0B:D0:18:D9:F3:2F:52:C9:FE:9A:70:FE:8F:DE:32
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285848CB1653C1005F09B4B7EA6E00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9bf3e49c-6067-3365-ba1d-b9f1536bb7ef.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     55293
IP address blocks:        103.72.76.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:53:c1:00:5f:09:b4:b7:ea:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=db21233c-8c20-488c-b709-5f1e673ea874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:69:ed:9e:bd:03:77:09:a9:d4:24:2b:21:
                    e5:56:33:66:d5:8b:8c:20:95:be:65:4c:fc:f0:0a:
                    fa:67:9a:a5:1f:28:77:4c:a0:b5:d8:49:cf:72:ee:
                    26:b6:42:d3:98:f9:84:bd:a5:33:f1:fc:fd:8c:80:
                    24:9b:76:5c:cc:33:90:ca:fb:71:83:d9:d2:60:3f:
                    5b:6c:f1:b5:27:1b:de:62:83:cd:cc:e5:b2:4b:60:
                    35:dc:0d:b9:f8:06:42:24:4a:3e:18:79:10:66:a7:
                    37:e9:85:62:0f:99:c7:05:b6:0c:56:dc:38:58:30:
                    06:d0:d0:39:4e:63:86:3c:54:16:e4:25:31:17:ba:
                    50:ab:0e:c4:92:ef:ae:58:11:83:d4:d5:fd:17:c4:
                    98:1d:42:e8:a7:80:07:bb:cf:89:b7:d5:73:73:bd:
                    92:9d:c2:10:10:61:49:a2:3e:6a:31:05:76:36:86:
                    b3:90:83:b3:d1:e7:f1:36:f2:78:c6:1b:30:47:dd:
                    d1:2a:43:67:a6:8b:2c:0b:ea:a0:f2:50:12:46:fd:
                    67:d8:63:c9:6e:b9:5a:b8:a5:9b:f4:69:f8:4e:b8:
                    94:9f:70:40:69:ca:b1:77:1c:19:67:0e:86:bc:2c:
                    f0:4c:dd:34:9c:25:78:c4:3c:e2:f8:55:16:f7:6f:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5A:AE:F9:BC:0B:D0:18:D9:F3:2F:52:C9:FE:9A:70:FE:8F:DE:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9bf3e49c-6067-3365-ba1d-b9f1536bb7ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:bc:6d:64:8b:90:51:13:09:ff:9a:97:fe:c7:4f:65:f7:14:
         d2:61:d4:35:66:e4:77:ec:47:9d:26:45:04:f2:f9:6d:7b:07:
         c7:a0:fa:52:1c:26:30:7e:54:4b:e9:ed:95:50:8b:5d:d9:91:
         ff:51:15:46:a3:42:5b:d1:0d:8e:db:1e:b9:15:ef:be:0a:5a:
         b2:ec:b6:3f:e8:c3:74:6d:e5:4b:72:94:58:1a:c7:88:c4:05:
         66:51:59:e0:aa:36:7e:08:89:ba:28:73:0a:b4:80:24:92:8d:
         19:68:07:85:4f:d2:7b:e0:20:d1:33:0b:d7:9f:cb:86:6b:04:
         20:80:42:42:24:f8:eb:6b:34:b8:1c:f3:f8:9f:a3:48:75:b8:
         41:16:ab:d9:1c:f7:b1:b0:66:03:ce:f2:52:92:38:ac:38:3e:
         46:b2:5e:63:36:6d:d2:a3:a5:3f:42:b9:96:32:b3:ee:98:24:
         4c:86:92:7a:0d:e2:e8:4e:11:3f:7a:9f:c0:c2:06:d6:e2:87:
         ee:ed:7b:ae:67:26:60:54:68:a7:98:3c:98:62:11:c8:c7:2e:
         66:ec:4e:f1:3b:3a:a4:c3:0e:bf:6b:3e:5d:4b:3e:4a:4f:98:
         ba:5d:60:80:3a:da:02:f2:b5:36:5b:22:9b:0b:07:6d:b8:2a:
         12:f6:bc:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFlPBAF8JtLfqbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZGIyMTIzM2MtOGMyMC00ODhjLWI3MDktNWYxZTY3M2VhODc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBdp7Z69A3cJqdQkKyHlVjNm1YuMIJW+ZUz8
8Ar6Z5qlHyh3TKC12EnPcu4mtkLTmPmEvaUz8fz9jIAkm3ZczDOQyvtxg9nSYD9b
bPG1JxveYoPNzOWyS2A13A25+AZCJEo+GHkQZqc36YViD5nHBbYMVtw4WDAG0NA5
TmOGPFQW5CUxF7pQqw7Eku+uWBGD1NX9F8SYHULop4AHu8+Jt9Vzc72SncIQEGFJ
oj5qMQV2NoazkIOz0efxNvJ4xhswR93RKkNnpossC+qg8lASRv1n2GPJbrlauKWb
9Gn4TriUn3BAacqxdxwZZw6GvCzwTN00nCV4xDzi+FUW929GXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRarvm8C9AY2fMvUsn+mnD+j94yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvOWJmM2U0OWMtNjA2Ny0z
MzY1LWJhMWQtYjlmMTUzNmJiN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0hMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACO8bWSLkFETCf+al/7HT2X3FNJh1DVm5HfsR50mRQTy+W17B8eg+lIc
JjB+VEvp7ZVQi13Zkf9RFUajQlvRDY7bHrkV774KWrLstj/ow3Rt5UtylFgax4jE
BWZRWeCqNn4Iiboocwq0gCSSjRloB4VP0nvgINEzC9efy4ZrBCCAQkIk+OtrNLgc
8/ifo0h1uEEWq9kc97GwZgPO8lKSOKw4PkayXmM2bdKjpT9CuZYys+6YJEyGknoN
4uhOET96n8DCBtbih+7te65nJmBUaKeYPJhiEcjHLmbsTvE7OqTDDr9rPl1LPkpP
mLpdYIA62gLytTZbIpsLB224KhL2vNM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:58 2025 by rpki-client