Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec307a05-2a04-3496-9e8c-a7182009f08f.roa
File:                     ec307a05-2a04-3496-9e8c-a7182009f08f.roa (raw, json)
Hash identifier:          /TwsDM3ZCOzwZFDzmuPSbywsMuMelGxZ5b3krrsL76s=
Subject key identifier:   F1:A7:FD:8E:A3:DA:23:B3:1C:73:6E:8C:B2:DF:66:EB:42:51:C6:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150E10F7334B8887B85BC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec307a05-2a04-3496-9e8c-a7182009f08f.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.218.160.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:e1:0f:73:34:b8:88:7b:85:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=e4b123ca-e2bc-40a0-8345-ebf90ec22af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:e9:3e:cb:39:43:63:76:40:15:d5:77:a1:
                    cd:94:41:1e:80:fc:25:2a:04:72:29:9f:a7:1d:89:
                    e5:cf:69:01:7b:47:0e:70:f3:38:56:e0:3a:d4:c3:
                    45:25:ad:21:6f:ae:ec:5b:0a:e1:65:03:86:03:59:
                    ed:9c:23:8b:8a:27:9c:22:50:a4:d6:5d:77:c4:bd:
                    09:a0:54:48:e2:a7:8f:63:80:5d:5a:5d:65:0f:1d:
                    ed:57:2f:43:5e:72:8b:3e:15:fb:3e:4e:26:c0:e0:
                    ee:6b:83:b4:e5:b0:2e:fd:e1:90:46:81:0f:87:7b:
                    bf:7c:af:7c:66:5a:79:35:a8:89:ae:df:1a:90:d7:
                    b1:a1:66:7f:3e:72:97:a2:6b:ef:37:bf:fd:b7:73:
                    4e:74:b9:cf:b3:f1:67:77:6c:9c:10:a5:26:fd:86:
                    40:c8:e6:81:85:71:87:ed:53:fa:4b:ec:a3:8b:4b:
                    bc:d4:c8:16:f3:d8:4f:aa:cd:37:45:d9:fc:7b:4a:
                    fa:fa:d6:d4:33:04:75:4a:28:4f:96:9b:1b:71:0f:
                    0b:03:41:75:2b:c0:f2:df:fd:20:b9:6f:d4:3a:c2:
                    53:ea:f7:61:02:ef:c8:7a:3a:05:60:bc:42:3a:e7:
                    76:79:67:55:45:9b:c9:9d:09:6c:21:07:e6:b6:f3:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A7:FD:8E:A3:DA:23:B3:1C:73:6E:8C:B2:DF:66:EB:42:51:C6:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec307a05-2a04-3496-9e8c-a7182009f08f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d8:35:f6:f0:0f:03:de:38:f8:3f:d1:bf:36:3b:b1:14:6f:
         57:eb:6f:e0:cd:2c:62:f8:57:d3:2e:3e:e9:93:b3:97:ae:1c:
         96:6f:34:19:40:ba:f5:d7:37:ab:a2:b2:ad:d3:c5:b1:5c:fa:
         19:26:1f:2d:0f:83:31:5c:c6:9a:78:c2:e3:82:14:ab:49:2b:
         94:47:34:92:e4:76:f7:51:51:82:ec:1d:32:50:84:0a:b2:60:
         0f:e3:58:19:97:b9:f6:99:22:7b:57:99:a5:49:d8:3b:e9:f2:
         75:07:f0:f5:28:2b:3c:44:df:85:c7:31:a0:44:e4:0b:53:a9:
         83:c2:43:2b:64:87:62:49:ba:38:bc:33:9d:85:4a:7e:bc:47:
         60:14:84:05:69:2f:0c:53:80:2c:8b:9c:36:59:27:d1:16:d9:
         9b:49:cf:f4:88:3e:b6:a8:69:15:de:95:19:bd:29:1f:e3:33:
         fb:d5:dd:37:25:2d:51:3c:dc:af:6d:7a:42:cf:7e:f8:1c:79:
         27:d2:69:c6:8c:19:38:4e:8e:cb:03:ea:09:94:12:e5:b0:f3:
         4c:4f:32:96:1f:43:12:c4:a8:cb:3e:d2:1e:84:f0:ef:79:03:
         96:3c:25:c2:a9:22:a1:d0:00:51:6d:f1:fa:9e:17:5a:20:65:
         e5:e0:72:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOEPczS4iHuFvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZTRiMTIzY2EtZTJiYy00MGEwLTgzNDUtZWJmOTBlYzIyYWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDbpPss5Q2N2QBXVd6HNlEEegPwlKgRyKZ+n
HYnlz2kBe0cOcPM4VuA61MNFJa0hb67sWwrhZQOGA1ntnCOLiiecIlCk1l13xL0J
oFRI4qePY4BdWl1lDx3tVy9DXnKLPhX7Pk4mwODua4O05bAu/eGQRoEPh3u/fK98
Zlp5NaiJrt8akNexoWZ/PnKXomvvN7/9t3NOdLnPs/Fnd2ycEKUm/YZAyOaBhXGH
7VP6S+yji0u81MgW89hPqs03Rdn8e0r6+tbUMwR1SihPlpsbcQ8LA0F1K8Dy3/0g
uW/UOsJT6vdhAu/IejoFYLxCOud2eWdVRZvJnQlsIQfmtvONAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGn/Y6j2iOzHHNujLLfZutCUcYKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWMzMDdhMDUtMmEwNC0z
NDk2LTllOGMtYTcxODIwMDlmMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtqgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbYNfbwDwPeOPg/0b82O7EUb1frb+DNLGL4V9MuPumTs5euHJZvNBlA
uvXXN6uisq3TxbFc+hkmHy0PgzFcxpp4wuOCFKtJK5RHNJLkdvdRUYLsHTJQhAqy
YA/jWBmXufaZIntXmaVJ2Dvp8nUH8PUoKzxE34XHMaBE5AtTqYPCQytkh2JJuji8
M52FSn68R2AUhAVpLwxTgCyLnDZZJ9EW2ZtJz/SIPraoaRXelRm9KR/jM/vV3Tcl
LVE83K9tekLPfvgceSfSacaMGThOjssD6gmUEuWw80xPMpYfQxLEqMs+0h6E8O95
A5Y8JcKpIqHQAFFt8fqeF1ogZeXgcuw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:10 2025 by rpki-client