Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/77e799cb-a436-3318-85a0-aa9c82570b24.roa
File:                     77e799cb-a436-3318-85a0-aa9c82570b24.roa (raw, json)
Hash identifier:          mv/suqp/uTpWDT2ayg/YtaLHxsRIj347vsMpjfLNaN8=
Subject key identifier:   90:B0:8D:8A:14:61:7B:25:CF:44:E0:49:1C:AA:42:CF:70:38:DF:5A
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858494CC949581A3C36322C594D80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/77e799cb-a436-3318-85a0-aa9c82570b24.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     174
IP address blocks:        67.159.24.0/23 maxlen: 23
                          67.159.28.0/24 maxlen: 24
                          67.159.29.0/24 maxlen: 24
                          2001:49f0:d11a::/48 maxlen: 48
                          2001:49f0:d124::/48 maxlen: 48
                          2001:49f0:d125::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:49:58:1a:3c:36:32:2c:59:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=75f6e61c-18f7-425f-89eb-1a5a411db15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:6a:2b:7c:df:7d:b1:0e:86:7e:fd:2d:1b:
                    7c:6e:79:ef:3d:02:66:76:d7:9a:5a:c4:0a:80:8f:
                    cb:5a:3f:ce:9e:93:5e:d9:f4:69:64:91:15:7d:89:
                    17:24:d1:b2:f4:cf:ca:1b:03:9b:4e:c1:a8:be:b8:
                    0d:32:76:da:bd:5c:fd:eb:4a:ea:40:b3:03:37:b6:
                    ae:64:72:69:41:08:4f:9a:85:68:95:8e:6a:40:1e:
                    dc:72:fb:45:6e:86:5f:90:9b:1a:37:9f:c9:5e:1c:
                    6b:48:43:73:4c:ec:97:68:b0:5d:62:1e:66:7b:f0:
                    be:61:6a:06:9d:30:35:4f:60:64:db:55:fb:c3:c2:
                    75:02:4b:be:4b:fe:36:28:8d:42:2c:32:62:0b:6c:
                    4d:26:71:d2:4a:a2:1e:0b:d8:e6:a9:b4:ba:f2:e8:
                    ee:80:28:bb:0f:bf:4c:8f:c0:30:5a:c5:b2:ae:40:
                    f0:26:1f:86:f8:12:65:02:ab:87:b2:e4:ca:95:fd:
                    a8:70:2f:6a:79:34:60:1d:40:48:71:e0:d5:73:ee:
                    55:69:91:7e:01:12:1a:f3:6f:d6:4b:d5:32:d0:7c:
                    0b:01:76:a4:1a:d2:f7:a5:b8:c3:ee:3e:65:1c:cd:
                    9c:4b:6d:65:c5:d6:3f:fd:84:ce:b1:3c:39:0e:e5:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B0:8D:8A:14:61:7B:25:CF:44:E0:49:1C:AA:42:CF:70:38:DF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/77e799cb-a436-3318-85a0-aa9c82570b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.24.0/23
                  67.159.28.0/23
                IPv6:
                  2001:49f0:d11a::/48
                  2001:49f0:d124::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:76:df:2f:bd:5a:32:b3:b1:a1:ee:fe:30:34:3e:70:e3:86:
         50:b2:58:a3:7b:ae:f7:44:2d:8c:3d:27:4e:73:c1:dd:a0:61:
         9a:ea:78:8f:75:ec:e7:ba:f1:59:79:8f:8b:dd:5a:8a:b6:ff:
         15:53:8c:1f:c0:69:85:9b:3a:2c:cd:f9:66:2a:12:50:73:99:
         41:dc:2c:fc:15:d1:86:b9:b1:66:ce:9f:2f:43:43:51:18:71:
         bb:71:66:44:b2:bb:ae:82:59:65:3d:61:43:6f:bd:4e:f8:ed:
         1f:c0:ba:cd:d8:7e:6a:b7:3e:bc:9c:5a:7c:95:14:6a:a1:c9:
         6e:c0:57:25:a1:04:8b:d4:56:7c:9e:37:61:0c:c4:0b:e0:6c:
         02:a0:98:6f:1b:4f:a5:c1:9f:98:e3:8b:6a:a6:ab:11:23:06:
         a9:0a:48:34:ff:d8:c4:28:58:51:77:e8:7d:c4:78:32:96:70:
         91:61:75:ed:7d:5a:d1:49:ff:86:34:72:18:c0:9e:91:01:89:
         fb:19:a4:08:03:5f:3a:1a:ca:57:e1:5f:c8:31:f1:aa:e5:75:
         5e:70:27:81:9b:0e:02:e1:2f:8f:fc:2f:b7:7d:c8:8b:a8:88:
         20:cb:1f:40:39:a5:ac:38:e8:15:4e:0a:d9:25:ae:94:89:5d:
         60:75:1b:d9
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWElMyUlYGjw2MixZTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NzVmNmU2MWMtMThmNy00MjVmLTg5ZWItMWE1YTQxMWRiMTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQJqK3zffbEOhn79LRt8bnnvPQJmdteaWsQK
gI/LWj/OnpNe2fRpZJEVfYkXJNGy9M/KGwObTsGovrgNMnbavVz960rqQLMDN7au
ZHJpQQhPmoVolY5qQB7ccvtFboZfkJsaN5/JXhxrSENzTOyXaLBdYh5me/C+YWoG
nTA1T2Bk21X7w8J1Aku+S/42KI1CLDJiC2xNJnHSSqIeC9jmqbS68ujugCi7D79M
j8AwWsWyrkDwJh+G+BJlAquHsuTKlf2ocC9qeTRgHUBIceDVc+5VaZF+ARIa82/W
S9Uy0HwLAXakGtL3pbjD7j5lHM2cS21lxdY//YTOsTw5DuWdVQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFJCwjYoUYXslz0TgSRyqQs9wON9aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNzdlNzk5Y2ItYTQzNi0z
MzE4LTg1YTAtYWE5YzgyNTcwYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQ58YAwQB
Q58cMBgEAgACMBIDBwAgAUnw0RoDBwEgAUnw0SQwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXXbfL71aMrOx
oe7+MDQ+cOOGULJYo3uu90QtjD0nTnPB3aBhmup4j3Xs57rxWXmPi91airb/FVOM
H8BphZs6LM35ZioSUHOZQdws/BXRhrmxZs6fL0NDURhxu3FmRLK7roJZZT1hQ2+9
TvjtH8C6zdh+arc+vJxafJUUaqHJbsBXJaEEi9RWfJ43YQzEC+BsAqCYbxtPpcGf
mOOLaqarESMGqQpINP/YxChYUXfofcR4MpZwkWF17X1a0Un/hjRyGMCekQGJ+xmk
CANfOhrKV+FfyDHxquV1XnAngZsOAuEvj/wvt33Ii6iIIMsfQDmlrDjoFU4K2SWu
lIldYHUb2Q==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:37 2025 by rpki-client