Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/3b571a3a-8592-3f05-b59a-ed747d47f537.roa
File:                     3b571a3a-8592-3f05-b59a-ed747d47f537.roa (raw, json)
Hash identifier:          2T8YVh6B1/EOM+zjQMSyAibj+jCYSq/to/VIEoP0TXU=
Subject key identifier:   1F:8F:DB:84:2A:FF:51:E0:2D:12:D5:B3:DB:C7:FC:6E:7F:60:1C:48
Certificate issuer:       /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial:       010D0C9F43285848D35859EAE3970633B1585F00
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/3b571a3a-8592-3f05-b59a-ed747d47f537.roa
Signing time:             Sun 09 Feb 2025 13:00:28 +0000
ROA not before:           Sun 09 Feb 2025 13:00:28 +0000
ROA not after:            Sat 10 May 2025 12:00:28 +0000
asID:                     834
IP address blocks:        206.174.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d3:58:59:ea:e3:97:06:33:b1:58:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
        Validity
            Not Before: Feb  9 13:00:28 2025 GMT
            Not After : May 10 12:00:28 2025 GMT
        Subject: CN=33cfc4c7-a0e3-4163-9227-1f48f5dceec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:bb:3b:d4:6e:7f:ad:8d:30:e4:fd:fb:73:
                    b9:e4:aa:ff:60:5e:a3:90:28:08:e3:86:3d:ba:18:
                    fd:b0:8b:ab:d2:9f:16:1f:a2:06:72:55:14:b6:33:
                    6b:a6:35:c9:39:21:ba:30:4d:ec:6d:ed:6a:38:c3:
                    82:4b:ab:b3:a4:1e:0e:b2:f9:fc:1a:a3:e8:2b:d6:
                    de:e9:b7:2b:ed:5a:ee:77:e0:25:99:44:26:34:3f:
                    95:be:db:7f:d1:da:c8:08:b3:71:6d:26:f5:3a:0b:
                    5b:ee:e9:07:35:a4:96:f4:85:2a:fa:57:35:9e:16:
                    92:dd:97:a7:3d:1f:08:82:56:c3:92:50:55:b9:a5:
                    43:0e:db:5b:bf:41:24:61:8d:1c:19:3d:fe:7f:74:
                    02:17:15:74:f4:70:c8:d6:7b:d6:30:f1:59:ba:b5:
                    fb:47:f5:8f:53:2c:68:18:53:fc:94:0c:53:28:a4:
                    df:07:a1:f5:7b:21:52:59:3f:63:2b:84:eb:d0:8c:
                    b1:f2:de:3e:3d:8d:47:d2:53:5a:a4:1f:bd:02:6f:
                    06:10:90:a3:9c:40:1c:8c:1d:e4:a7:c0:01:ef:df:
                    7f:4a:10:0f:1b:f1:8c:9d:61:e3:2e:92:f6:f3:f1:
                    c9:b2:20:2d:06:2e:46:30:d3:d8:f8:23:e1:5b:bd:
                    11:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8F:DB:84:2A:FF:51:E0:2D:12:D5:B3:DB:C7:FC:6E:7F:60:1C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/3b571a3a-8592-3f05-b59a-ed747d47f537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.174.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:92:c1:d1:5d:ee:7c:69:01:04:3c:18:0b:ed:b7:19:3e:
         dc:54:6f:7a:ff:5e:29:2a:e7:b1:a2:17:c1:76:d0:8f:d9:d1:
         f0:0d:fa:90:ef:1d:3e:30:b4:80:77:65:40:9e:4f:0b:cd:4d:
         f0:07:4e:84:da:58:7c:67:ad:ab:38:46:65:2d:dd:cd:60:9b:
         de:ff:66:a6:43:f2:f6:91:73:7f:e1:3c:06:54:5b:75:7c:24:
         34:65:43:0f:5e:ed:c9:3f:5c:ec:99:41:37:b1:92:48:df:85:
         ab:43:99:99:bf:b0:ae:cd:4a:a4:a4:51:e2:ff:97:77:b0:2b:
         19:ca:46:39:a9:d3:c0:a9:13:42:e6:94:05:d8:42:91:5b:89:
         06:7b:d3:82:a1:f7:d8:3e:1b:53:3d:c2:bd:93:72:cc:a4:3f:
         26:1b:27:87:9f:e8:cd:ed:e4:3e:43:fc:bf:18:16:fa:2f:40:
         eb:28:36:2d:ef:f6:c6:f3:2f:1b:ae:fa:2c:4c:d0:01:6b:0d:
         33:6c:e3:a8:81:d7:53:08:0b:11:60:0a:5d:96:c7:68:d1:8a:
         16:8f:2b:45:6d:5e:42:10:a9:2f:ae:2c:07:c1:b4:33:a4:fa:
         d2:41:6b:bd:ad:8f:fa:f8:57:0a:e8:7a:00:7d:64:2d:99:6c:
         f4:74:34:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTWFnq45cGM7FYXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl
MjY1MB4XDTI1MDIwOTEzMDAyOFoXDTI1MDUxMDEyMDAyOFowLzEtMCsGA1UEAxMk
MzNjZmM0YzctYTBlMy00MTYzLTkyMjctMWY0OGY1ZGNlZWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIW7O9Ruf62NMOT9+3O55Kr/YF6jkCgI44Y9
uhj9sIur0p8WH6IGclUUtjNrpjXJOSG6ME3sbe1qOMOCS6uzpB4Osvn8GqPoK9be
6bcr7Vrud+AlmUQmND+Vvtt/0drICLNxbSb1Ogtb7ukHNaSW9IUq+lc1nhaS3Zen
PR8IglbDklBVuaVDDttbv0EkYY0cGT3+f3QCFxV09HDI1nvWMPFZurX7R/WPUyxo
GFP8lAxTKKTfB6H1eyFSWT9jK4Tr0Iyx8t4+PY1H0lNapB+9Am8GEJCjnEAcjB3k
p8AB799/ShAPG/GMnWHjLpL28/HJsiAtBi5GMNPY+CPhW70RZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+P24Qq/1HgLRLVs9vH/G5/YBxIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5
ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvM2I1NzFhM2EtODU5Mi0z
ZjA1LWI1OWEtZWQ3NDdkNDdmNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl
MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl
ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0
MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzq6IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGX4ksHRXe58aQEEPBgL7bcZPtxUb3r/Xikq57GiF8F20I/Z0fAN+pDv
HT4wtIB3ZUCeTwvNTfAHToTaWHxnras4RmUt3c1gm97/ZqZD8vaRc3/hPAZUW3V8
JDRlQw9e7ck/XOyZQTexkkjfhatDmZm/sK7NSqSkUeL/l3ewKxnKRjmp08CpE0Lm
lAXYQpFbiQZ704Kh99g+G1M9wr2TcsykPyYbJ4ef6M3t5D5D/L8YFvovQOsoNi3v
9sbzLxuu+ixM0AFrDTNs46iB11MICxFgCl2Wx2jRihaPK0VtXkIQqS+uLAfBtDOk
+tJBa72tj/r4VwroegB9ZC2ZbPR0NMI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:11:09 2025 by rpki-client