Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fd8341c1-a2ed-3963-a060-b1ba3d227628.roa
File:                     fd8341c1-a2ed-3963-a060-b1ba3d227628.roa (raw, json)
Hash identifier:          lbYqLHU8ENQ+wLyS/WFt/hxnxK+KkdRFX5KVe8Tq9TE=
Subject key identifier:   5D:8C:02:F0:56:33:21:FA:CD:9D:8D:9B:C2:C8:A9:EC:23:B5:97:79
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285848CDE110CA9EB8CCE6D8771380
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fd8341c1-a2ed-3963-a060-b1ba3d227628.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     31898
IP address blocks:        170.114.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:10:ca:9e:b8:cc:e6:d8:77:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=7e43cab3-7759-453d-819a-2b5c9c7288f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:99:a0:2c:c8:66:57:08:1b:11:d9:ca:d3:4b:
                    e2:77:8c:ad:0e:be:b1:0e:2e:5b:47:bf:e4:89:73:
                    54:15:05:a3:e4:51:ce:fb:d7:91:c0:0c:3d:7a:e2:
                    0a:e5:ea:35:78:59:bb:e0:90:14:a7:6c:1d:7e:cd:
                    c1:41:24:3d:de:04:70:b6:58:40:53:9b:88:eb:f9:
                    dd:f1:87:b0:29:02:3a:6a:fe:9a:c1:50:3a:0a:1f:
                    fd:8c:51:8f:c3:81:bc:ae:0f:dd:49:0c:01:86:00:
                    c7:d3:43:5d:39:2d:22:87:09:d1:4a:fe:c8:15:53:
                    08:64:72:15:74:d3:db:f0:27:d1:ff:cd:9a:df:ff:
                    2b:a2:5e:6a:62:b7:c5:68:60:35:b0:6f:1d:22:48:
                    1a:3f:21:f8:4b:ec:34:13:57:94:b2:de:2b:a6:a1:
                    d4:ef:d5:5f:0d:91:07:c8:c2:85:de:c5:33:85:5b:
                    3c:1d:4c:76:2a:44:a1:22:2a:6d:aa:c6:ee:79:85:
                    b9:06:aa:a9:a2:4d:ab:96:54:80:a9:bb:95:5a:b8:
                    d4:44:74:4f:15:5d:6c:99:ba:75:82:09:d4:3b:de:
                    0f:d6:fa:63:1a:2c:f9:e1:b8:29:15:e6:19:3e:55:
                    52:f9:75:7d:4b:cf:b1:44:c8:16:a0:ad:48:ee:9b:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8C:02:F0:56:33:21:FA:CD:9D:8D:9B:C2:C8:A9:EC:23:B5:97:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fd8341c1-a2ed-3963-a060-b1ba3d227628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:36:a5:f6:84:90:02:5f:b9:77:14:8f:77:4d:fc:71:6d:10:
         80:b6:03:4e:d2:fa:71:52:1e:6c:76:1d:8e:c5:18:d2:f2:08:
         93:69:31:f9:0c:56:78:0f:d7:97:e3:3e:4c:81:df:e2:98:21:
         5f:86:3c:dc:e3:fc:81:39:91:fe:80:9f:ed:30:57:7b:04:6f:
         a3:f8:13:1b:ec:f4:e0:3f:45:10:6e:91:d6:5d:f8:f4:00:59:
         ea:38:12:5c:73:b1:bb:9f:bc:c2:d0:df:ea:e7:04:35:f0:65:
         fe:34:6b:70:e9:ba:ff:e1:3c:30:fe:a2:96:58:f7:4c:e0:fe:
         25:86:a6:55:09:27:59:27:4d:79:38:89:f8:79:fe:4c:eb:77:
         0a:b4:8b:f4:58:1d:e5:4e:cd:a3:ef:02:8f:d8:1c:8e:e9:75:
         c4:e7:7f:17:8c:ff:ae:d7:bb:e4:e7:66:51:ab:73:dc:34:04:
         99:20:b0:d0:95:25:b3:85:92:1d:62:00:07:c4:31:de:39:da:
         71:56:aa:7a:cb:2d:10:7e:a9:93:1b:ed:53:c5:38:e6:99:12:
         ac:1f:75:70:7e:4d:de:d3:b9:9b:72:22:ce:8c:16:e4:a2:05:
         e5:1f:a6:9f:67:e4:25:e6:db:bf:0b:8d:e9:ef:ae:e2:1d:bf:
         8e:9e:68:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RDKnrjM5th3E4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk
N2U0M2NhYjMtNzc1OS00NTNkLTgxOWEtMmI1YzljNzI4OGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5mgLMhmVwgbEdnK00vid4ytDr6xDi5bR7/k
iXNUFQWj5FHO+9eRwAw9euIK5eo1eFm74JAUp2wdfs3BQSQ93gRwtlhAU5uI6/nd
8YewKQI6av6awVA6Ch/9jFGPw4G8rg/dSQwBhgDH00NdOS0ihwnRSv7IFVMIZHIV
dNPb8CfR/82a3/8rol5qYrfFaGA1sG8dIkgaPyH4S+w0E1eUst4rpqHU79VfDZEH
yMKF3sUzhVs8HUx2KkShIiptqsbueYW5Bqqpok2rllSAqbuVWrjURHRPFV1smbp1
ggnUO94P1vpjGiz54bgpFeYZPlVS+XV9S8+xRMgWoK1I7pucGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2MAvBWMyH6zZ2Nm8LIqewjtZd5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZmQ4MzQxYzEtYTJlZC0z
OTYzLWEwNjAtYjFiYTNkMjI3NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQ2pfaEkAJfuXcUj3dN/HFtEIC2A07S+nFSHmx2HY7FGNLyCJNpMfkM
VngP15fjPkyB3+KYIV+GPNzj/IE5kf6An+0wV3sEb6P4Exvs9OA/RRBukdZd+PQA
Weo4ElxzsbufvMLQ3+rnBDXwZf40a3Dpuv/hPDD+opZY90zg/iWGplUJJ1knTXk4
ifh5/kzrdwq0i/RYHeVOzaPvAo/YHI7pdcTnfxeM/67Xu+TnZlGrc9w0BJkgsNCV
JbOFkh1iAAfEMd452nFWqnrLLRB+qZMb7VPFOOaZEqwfdXB+Td7TuZtyIs6MFuSi
BeUfpp9n5CXm278LjenvruIdv46eaAg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:28:45 2025 by rpki-client