Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/481ebe93-b4cf-3fd1-8c1f-2bed2ba100eb.roa
File:                     481ebe93-b4cf-3fd1-8c1f-2bed2ba100eb.roa (raw, json)
Hash identifier:          z0P/lEnW5CwurSXpaSZ4vbuV2HweMVBkAkJMlhfhx+I=
Subject key identifier:   97:AC:BB:02:B3:01:F3:F4:8B:98:0A:67:6D:76:A7:F5:FA:53:F1:4B
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F432858488BA7E6CA91AF5947D6652880
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/481ebe93-b4cf-3fd1-8c1f-2bed2ba100eb.roa
Signing time:             Tue 14 Jan 2025 20:42:33 +0000
ROA not before:           Tue 14 Jan 2025 20:42:33 +0000
ROA not after:            Mon 14 Apr 2025 19:42:33 +0000
asID:                     16509
IP address blocks:        172.84.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8b:a7:e6:ca:91:af:59:47:d6:65:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Jan 14 20:42:33 2025 GMT
            Not After : Apr 14 19:42:33 2025 GMT
        Subject: CN=cade6630-cc94-4674-8131-6fb0e1696d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:e2:1a:81:9f:e5:83:02:ae:6f:42:9a:7f:
                    05:3d:02:a4:40:db:9a:03:87:37:bb:2d:8d:0a:a0:
                    9d:de:3b:16:76:10:34:2d:f8:00:fe:bb:9d:4e:89:
                    50:89:00:5d:5e:c3:38:e9:00:53:43:a9:cf:e5:44:
                    8b:4b:41:0b:d5:be:1b:dc:6f:ef:57:ad:23:68:a8:
                    42:51:bc:71:eb:e3:a6:ff:41:1e:80:64:2a:cf:1b:
                    69:ba:33:55:83:e3:29:44:7a:00:72:2a:74:c7:29:
                    96:06:cc:92:c7:e7:81:c2:f7:cf:1c:b6:45:82:87:
                    4d:6e:97:09:fd:c7:8d:5a:99:fd:a0:37:88:48:12:
                    72:8b:54:9c:d6:fb:96:47:0d:1b:41:18:ac:cf:ad:
                    67:38:cc:e0:3b:de:d8:1d:88:98:d3:5d:48:ec:93:
                    a2:96:1c:5a:2a:61:22:41:aa:a6:42:a7:15:42:fa:
                    c8:bc:74:db:bc:a6:a0:12:98:d4:59:95:60:5a:49:
                    21:d4:99:fc:f9:c6:97:97:7f:a0:1b:80:0b:5f:fc:
                    8e:42:6e:45:4c:99:ee:e5:57:3c:f9:0b:8b:d8:e0:
                    05:98:97:a1:c3:b9:e9:07:47:51:ca:f9:29:6f:bd:
                    6f:29:0c:89:3e:99:de:97:b6:42:dd:22:5e:62:ce:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AC:BB:02:B3:01:F3:F4:8B:98:0A:67:6D:76:A7:F5:FA:53:F1:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/481ebe93-b4cf-3fd1-8c1f-2bed2ba100eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b6:88:7e:c6:04:85:57:23:e4:e5:28:d8:51:19:cc:cb:4e:
         49:49:cb:9a:99:4b:a7:8c:df:68:c5:e9:06:4c:4e:71:0a:9b:
         4e:e6:9e:f8:fa:97:1c:65:da:c5:a0:08:3f:1c:1a:19:d9:04:
         5b:89:82:ff:34:23:39:3d:d4:9d:45:5c:86:a0:07:a7:af:a1:
         06:49:64:cf:99:8b:df:75:9d:79:b9:0f:fe:2f:c9:87:16:3b:
         09:ea:dd:bf:6a:d9:88:af:78:3e:eb:63:bd:00:ff:d1:b6:3d:
         36:56:45:2b:8b:12:b8:58:2e:45:c2:79:18:03:b4:28:aa:1c:
         b5:a8:1e:74:f4:88:f5:11:22:2f:ce:3c:6b:e6:89:7b:53:80:
         8b:0f:14:c5:9d:af:c4:a6:7d:26:97:c5:2b:fa:98:3d:16:fc:
         95:da:c6:9b:84:c4:1f:13:b9:ba:53:0a:04:a6:fd:e2:32:05:
         6e:0b:6e:aa:a8:87:89:18:71:0a:e1:64:99:32:d0:42:8f:9c:
         6b:c4:9f:90:c4:a8:ab:fd:a4:db:af:68:d8:aa:e6:ae:f9:89:
         30:e5:24:a1:60:02:19:68:38:61:96:5c:1e:a4:51:ea:5b:35:
         8d:85:45:2b:cf:09:99:b3:f4:1b:ad:db:bc:68:d0:30:3c:e7:
         4b:33:d1:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiLp+bKka9ZR9ZlKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz
NGQ2MB4XDTI1MDExNDIwNDIzM1oXDTI1MDQxNDE5NDIzM1owLzEtMCsGA1UEAxMk
Y2FkZTY2MzAtY2M5NC00Njc0LTgxMzEtNmZiMGUxNjk2ZDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WjiGoGf5YMCrm9Cmn8FPQKkQNuaA4c3uy2N
CqCd3jsWdhA0LfgA/rudTolQiQBdXsM46QBTQ6nP5USLS0EL1b4b3G/vV60jaKhC
Ubxx6+Om/0EegGQqzxtpujNVg+MpRHoAcip0xymWBsySx+eBwvfPHLZFgodNbpcJ
/ceNWpn9oDeISBJyi1Sc1vuWRw0bQRisz61nOMzgO97YHYiY011I7JOilhxaKmEi
QaqmQqcVQvrIvHTbvKagEpjUWZVgWkkh1Jn8+caXl3+gG4ALX/yOQm5FTJnu5Vc8
+QuL2OAFmJehw7npB0dRyvkpb71vKQyJPpnel7ZC3SJeYs48twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJesuwKzAfP0i5gKZ212p/X6U/FLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey
NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvNDgxZWJlOTMtYjRjZi0z
ZmQxLThjMWYtMmJlZDJiYTEwMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0
YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1
MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2
MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFRcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAS2iH7GBIVXI+TlKNhRGczLTklJy5qZS6eM32jF6QZMTnEKm07mnvj6
lxxl2sWgCD8cGhnZBFuJgv80Izk91J1FXIagB6evoQZJZM+Zi991nXm5D/4vyYcW
Ownq3b9q2YiveD7rY70A/9G2PTZWRSuLErhYLkXCeRgDtCiqHLWoHnT0iPURIi/O
PGvmiXtTgIsPFMWdr8SmfSaXxSv6mD0W/JXaxpuExB8TubpTCgSm/eIyBW4Lbqqo
h4kYcQrhZJky0EKPnGvEn5DEqKv9pNuvaNiq5q75iTDlJKFgAhloOGGWXB6kUepb
NY2FRSvPCZmz9But27xo0DA850sz0cU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:42 2025 by rpki-client