Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa
File:                     b669b545-6455-356d-9552-6f650359ccf1.roa (raw, json)
Hash identifier:          ZhsYExKsWpRogT76Rg8Au+0uT/DllOOtyG0s1v0faVg=
Subject key identifier:   77:CA:40:CF:23:37:6B:32:DE:CD:8A:03:D6:13:7D:7B:65:97:5C:E6
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F432858492D53E91C97D80150D39CDC80
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa
Signing time:             Thu 13 Mar 2025 18:34:16 +0000
ROA not before:           Thu 13 Mar 2025 18:34:16 +0000
ROA not after:            Wed 11 Jun 2025 18:34:16 +0000
asID:                     12189
IP address blocks:        209.51.128.0/24 maxlen: 24
                          209.51.134.0/24 maxlen: 24
                          209.51.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2d:53:e9:1c:97:d8:01:50:d3:9c:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Mar 13 18:34:16 2025 GMT
            Not After : Jun 11 18:34:16 2025 GMT
        Subject: CN=d34ca427-c8e0-43d2-bf80-24000ee3d31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:b1:98:80:ef:ed:53:39:9b:68:9c:1d:04:
                    c0:ba:35:16:65:4b:a4:4b:64:1a:f9:7c:6c:79:0d:
                    f7:5b:5e:eb:8d:9b:a3:34:a9:e7:28:74:9f:8c:db:
                    82:cf:58:ae:6d:2c:bc:d4:95:e4:0e:e6:6d:30:62:
                    04:cb:2d:29:ee:10:e6:ee:3e:59:f9:76:d2:e9:c9:
                    d7:71:41:bf:56:be:13:8e:f8:8d:00:f6:be:70:74:
                    84:af:23:3e:07:29:51:27:73:08:61:da:dc:4c:ea:
                    b0:19:31:39:28:a9:ed:13:30:bc:91:b3:7a:56:a5:
                    ab:3d:da:5d:1b:89:1f:c0:75:2d:23:1f:e9:91:8a:
                    82:21:d0:9f:7b:1e:86:24:c8:9e:a9:a3:9f:f9:0e:
                    10:b7:82:b6:6c:26:a9:c6:82:8d:ad:c9:36:69:5f:
                    88:af:48:ac:2c:1b:e9:28:4d:57:d0:23:38:76:a2:
                    23:39:ea:19:01:57:7f:63:c0:3b:83:16:68:93:29:
                    0d:29:06:33:40:30:07:14:20:7f:9d:ce:13:d9:1d:
                    ab:84:c2:bc:70:1e:39:93:de:07:aa:28:a3:04:36:
                    6e:97:2c:38:01:5a:84:da:63:5d:2d:85:ba:a2:b7:
                    ae:05:2c:d8:a4:cf:3b:ce:5f:ee:df:42:d0:f4:67:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CA:40:CF:23:37:6B:32:DE:CD:8A:03:D6:13:7D:7B:65:97:5C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.128.0/24
                  209.51.134.0/24
                  209.51.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1c:60:91:0f:12:28:2c:51:08:fe:f7:03:49:7e:42:70:1d:
         fc:48:07:0e:75:d5:f7:a7:da:20:f1:12:4c:4d:c8:5a:8d:09:
         3c:da:8f:03:41:31:6b:eb:1a:26:c6:a8:63:69:84:eb:e5:e7:
         34:75:d6:27:60:fa:5c:94:5f:e7:2f:0d:08:92:de:59:01:86:
         fc:ec:c8:1b:a0:d8:97:20:5c:f5:73:42:4d:73:0c:92:ee:cf:
         b4:25:77:f0:77:39:cc:a5:9e:9f:9b:4a:ff:1b:2e:3b:80:17:
         5e:3d:d2:61:b0:90:3f:78:82:c9:12:9e:0d:03:a1:9b:e8:7f:
         8a:49:81:b0:87:96:d6:84:9a:cb:ac:a5:4b:cf:64:f4:cf:59:
         2e:0a:29:27:f7:4d:cd:b5:60:ee:f1:ea:cb:06:08:e8:c7:44:
         62:2b:1b:f6:04:20:0d:f3:e4:a1:f0:61:2d:60:68:5b:c0:75:
         e8:12:4f:ee:af:fc:2e:2a:0c:87:f2:59:60:39:63:b1:9e:25:
         20:6f:1d:b7:4a:7c:5b:6b:11:97:12:33:6a:a9:c4:f6:19:f5:
         15:3d:c0:80:42:ff:42:bf:64:96:1d:09:f2:11:8c:81:4c:03:
         b9:b4:f2:45:c3:bf:b8:db:fe:c7:65:4e:2f:2a:6c:ec:d2:29:
         a7:6c:4e:0c
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEktU+kcl9gBUNOc3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI1MDMxMzE4MzQxNloXDTI1MDYxMTE4MzQxNlowLzEtMCsGA1UEAxMk
ZDM0Y2E0MjctYzhlMC00M2QyLWJmODAtMjQwMDBlZTNkMzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcuxmIDv7VM5m2icHQTAujUWZUukS2Qa+Xxs
eQ33W17rjZujNKnnKHSfjNuCz1iubSy81JXkDuZtMGIEyy0p7hDm7j5Z+XbS6cnX
cUG/Vr4TjviNAPa+cHSEryM+BylRJ3MIYdrcTOqwGTE5KKntEzC8kbN6VqWrPdpd
G4kfwHUtIx/pkYqCIdCfex6GJMieqaOf+Q4Qt4K2bCapxoKNrck2aV+Ir0isLBvp
KE1X0CM4dqIjOeoZAVd/Y8A7gxZokykNKQYzQDAHFCB/nc4T2R2rhMK8cB45k94H
qiijBDZulyw4AVqE2mNdLYW6oreuBSzYpM87zl/u30LQ9GcidQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFHfKQM8jN2sy3s2KA9YTfXtll1zmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYjY2OWI1NDUtNjQ1NS0z
NTZkLTk1NTItNmY2NTAzNTljY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA0TOAAwQA
0TOGAwQA0TOYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGscYJEPEigsUQj+9wNJfkJwHfxIBw511fen2iDx
EkxNyFqNCTzajwNBMWvrGibGqGNphOvl5zR11idg+lyUX+cvDQiS3lkBhvzsyBug
2JcgXPVzQk1zDJLuz7Qld/B3Ocylnp+bSv8bLjuAF1490mGwkD94gskSng0DoZvo
f4pJgbCHltaEmsuspUvPZPTPWS4KKSf3Tc21YO7x6ssGCOjHRGIrG/YEIA3z5KHw
YS1gaFvAdegST+6v/C4qDIfyWWA5Y7GeJSBvHbdKfFtrEZcSM2qpxPYZ9RU9wIBC
/0K/ZJYdCfIRjIFMA7m08kXDv7jb/sdlTi8qbOzSKadsTgw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:38 2025 by rpki-client