Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddc58bec-83ab-3adb-96ab-e65df8a20431.roa
File:                     ddc58bec-83ab-3adb-96ab-e65df8a20431.roa (raw, json)
Hash identifier:          zPmBhlRAb7aVZ2FY7BSqTL32i1X4A0tv/rbrBYMQ6GQ=
Subject key identifier:   5C:68:F3:1D:CD:2C:AD:B3:BC:C8:3F:5B:25:2F:56:AC:E3:16:4C:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150EDF191BA7294E16E4F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddc58bec-83ab-3adb-96ab-e65df8a20431.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.225.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:ed:f1:91:ba:72:94:e1:6e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=13b80dcd-83df-490b-bb32-e023686800a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:70:c3:4d:4d:ee:e0:64:89:de:a3:6c:17:cc:
                    5b:3f:e9:15:4c:ea:b7:53:50:b0:fc:12:54:3f:f2:
                    ea:16:69:fc:09:a0:9e:d0:14:9a:ab:07:85:36:ed:
                    0d:9b:ce:a7:fd:1a:f7:90:40:83:e9:19:42:03:18:
                    c1:42:09:35:66:ec:5a:df:de:63:d4:ce:b9:4d:ee:
                    8a:0c:94:e5:fe:71:38:cc:48:00:6e:ae:d3:eb:c0:
                    df:05:65:04:ae:37:38:32:06:f4:26:8d:2a:6e:67:
                    85:97:ea:d8:8b:4f:56:0a:45:78:df:fd:d0:7d:68:
                    ee:c0:98:88:ab:1c:af:1f:4c:a7:29:3a:b1:95:ac:
                    09:de:c3:c9:a7:2c:4e:4b:9c:0c:15:44:8c:58:96:
                    b2:2c:79:7f:17:bb:e2:17:40:c8:d8:21:90:13:6e:
                    f3:61:f4:31:68:c0:e2:7a:80:75:18:4b:53:41:6c:
                    04:5f:95:6a:9c:66:26:3e:b5:69:7b:c9:66:ec:db:
                    ef:76:90:2d:03:50:f7:3d:bd:b3:2b:40:ef:19:0c:
                    f2:1a:7f:72:cf:76:9d:4b:ea:6f:45:f8:66:b6:d3:
                    26:f5:ae:25:2d:56:ba:f5:80:05:d5:90:77:3e:0f:
                    c5:c2:00:0a:c5:1b:2d:66:1d:05:d5:32:63:ef:db:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:F3:1D:CD:2C:AD:B3:BC:C8:3F:5B:25:2F:56:AC:E3:16:4C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddc58bec-83ab-3adb-96ab-e65df8a20431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.225.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:92:93:b0:19:5f:02:0d:1e:02:26:c0:55:ee:f5:ef:bc:16:
         8b:32:dc:0f:7e:10:88:7d:ba:e5:da:64:1c:ce:a4:a7:7d:eb:
         ad:67:4d:3e:e2:13:dc:e4:8f:64:a5:9f:7f:bd:d5:8e:4d:b0:
         60:f3:65:da:63:4d:a2:d4:86:c8:f8:80:5d:cc:36:df:7b:9f:
         ec:a6:8d:a1:26:23:fb:fe:43:db:c5:2d:0f:91:f0:dc:c8:c8:
         ed:23:46:c8:29:7f:b2:eb:d1:fb:6b:5e:cd:45:53:8a:20:06:
         95:8d:a6:21:94:39:09:02:fd:c0:30:9d:21:79:ed:91:a5:0e:
         da:65:7c:97:7e:e1:1c:6d:b4:66:f1:0f:05:12:b4:39:8b:51:
         6e:00:1a:de:6b:7b:3a:2e:67:7e:e1:3e:74:f3:25:da:97:26:
         4e:bd:11:77:aa:a4:a8:8f:dd:62:4b:b1:be:2f:76:8a:4c:be:
         ec:c4:c9:23:90:ac:45:50:88:4c:17:3d:b2:bd:d9:8c:09:e3:
         c6:7a:14:64:79:ae:f0:8a:db:27:00:9f:92:0c:f4:2d:17:50:
         d5:31:0f:c0:30:c2:57:21:2e:a4:19:45:ad:91:ac:57:81:bb:
         88:29:78:09:32:82:6c:5a:a2:b8:17:fc:5f:60:84:2b:9a:80:
         7a:bb:8a:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUO3xkbpylOFuTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTNiODBkY2QtODNkZi00OTBiLWJiMzItZTAyMzY4NjgwMGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHDDTU3u4GSJ3qNsF8xbP+kVTOq3U1Cw/BJU
P/LqFmn8CaCe0BSaqweFNu0Nm86n/Rr3kECD6RlCAxjBQgk1Zuxa395j1M65Te6K
DJTl/nE4zEgAbq7T68DfBWUErjc4Mgb0Jo0qbmeFl+rYi09WCkV43/3QfWjuwJiI
qxyvH0ynKTqxlawJ3sPJpyxOS5wMFUSMWJayLHl/F7viF0DI2CGQE27zYfQxaMDi
eoB1GEtTQWwEX5VqnGYmPrVpe8lm7NvvdpAtA1D3Pb2zK0DvGQzyGn9yz3adS+pv
RfhmttMm9a4lLVa69YAF1ZB3Pg/FwgAKxRstZh0F1TJj79sK+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxo8x3NLK2zvMg/WyUvVqzjFkweMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGRjNThiZWMtODNhYi0z
YWRiLTk2YWItZTY1ZGY4YTIwNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFySk7AZXwINHgImwFXu9e+8Fosy3A9+EIh9uuXaZBzOpKd9661nTT7i
E9zkj2Sln3+91Y5NsGDzZdpjTaLUhsj4gF3MNt97n+ymjaEmI/v+Q9vFLQ+R8NzI
yO0jRsgpf7Lr0ftrXs1FU4ogBpWNpiGUOQkC/cAwnSF57ZGlDtplfJd+4RxttGbx
DwUStDmLUW4AGt5rezouZ37hPnTzJdqXJk69EXeqpKiP3WJLsb4vdopMvuzEySOQ
rEVQiEwXPbK92YwJ48Z6FGR5rvCK2ycAn5IM9C0XUNUxD8AwwlchLqQZRa2RrFeB
u4gpeAkygmxaorgX/F9ghCuagHq7isY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:07 2025 by rpki-client