Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4fc98cd7-4077-3cec-a289-2f027a718339.roa
File:                     4fc98cd7-4077-3cec-a289-2f027a718339.roa (raw, json)
Hash identifier:          aRuP1k1nMG8A+5DU5vn29RkoMychlJXenAZxDVStK5M=
Subject key identifier:   B6:41:FF:B0:11:51:E3:4E:67:B7:A9:89:E7:F4:3F:CC:61:49:F5:73
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F4328584839EAB5AAA2B31214E20BB738
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4fc98cd7-4077-3cec-a289-2f027a718339.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     33711
IP address blocks:        128.254.224.0/24 maxlen: 24
                          128.254.226.0/24 maxlen: 24
                          128.254.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:b5:aa:a2:b3:12:14:e2:0b:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=fcfc7cd5-3c6b-46c0-a2a1-9bf723925c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:a6:f4:6e:5a:ed:35:22:f2:27:48:ef:b1:
                    53:28:f0:94:90:4a:a4:b7:79:6e:f6:cd:4b:e5:bc:
                    79:da:54:32:2b:1e:88:9c:62:f1:36:51:0e:ae:71:
                    26:ca:77:dc:47:3b:3f:a7:04:2e:94:3b:ce:b9:20:
                    fa:1a:2c:e7:fe:fa:e7:82:43:25:99:47:dd:e1:50:
                    63:ea:12:46:3c:17:66:7d:14:c1:4f:e0:e2:0d:95:
                    fd:05:b6:87:cf:67:89:a4:ab:08:df:10:c3:f8:18:
                    84:77:1e:f8:d0:3a:5b:dd:40:5f:da:0d:c8:b7:82:
                    31:12:73:6d:6d:b6:69:d2:6a:4c:ca:3b:4d:44:ba:
                    3d:fa:b1:72:6e:f4:21:74:53:a4:3a:c1:b0:fe:28:
                    87:d4:fb:80:81:2d:69:b0:17:ea:9e:37:25:e1:20:
                    2d:95:6f:48:c5:5f:09:4e:f0:70:b8:df:6a:a9:0b:
                    03:1b:e9:9a:57:f4:69:a2:ed:9d:54:0a:01:0e:7d:
                    df:18:13:5d:fd:db:21:16:b5:2a:45:6c:85:4a:6d:
                    18:6a:63:0e:71:34:b8:c9:c4:da:13:f3:14:38:ee:
                    fb:5b:01:98:d7:f4:3d:c6:a9:d8:32:ea:d0:ce:40:
                    be:86:b7:b6:8a:f4:c2:78:19:15:f3:6e:05:b0:2f:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:41:FF:B0:11:51:E3:4E:67:B7:A9:89:E7:F4:3F:CC:61:49:F5:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4fc98cd7-4077-3cec-a289-2f027a718339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.224.0/24
                  128.254.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1f:6f:26:94:de:5a:ca:6b:a8:5e:4b:28:0a:04:00:80:a2:
         f7:82:31:2d:12:3a:4b:cd:0c:ec:83:50:6a:bd:dd:0a:93:19:
         dc:83:bf:b2:9a:a2:d9:61:5b:38:8e:c5:a7:89:dd:67:c8:cd:
         a4:42:6a:43:12:1a:a6:2b:97:a6:e1:90:49:e5:bb:a6:ce:23:
         de:42:a9:b6:d3:f8:6b:fc:d1:7f:4d:67:b1:5e:95:70:06:3b:
         e8:d4:d7:67:e1:e6:87:da:d6:cf:85:c9:ae:6f:ec:38:b5:7a:
         b1:d5:01:92:43:19:8e:11:8b:10:82:5f:d7:93:5e:d1:a9:d5:
         0a:e7:84:39:cd:ad:32:05:50:2d:ed:f3:c6:b4:c0:08:f1:59:
         fd:37:9a:4d:07:e3:5d:e5:79:93:8f:15:3b:b4:e3:61:fc:9f:
         3f:d9:67:52:c5:ea:50:82:e9:b4:c2:3f:e6:60:e1:f1:27:8d:
         6c:3e:12:cb:24:3e:f5:27:a2:e2:88:46:17:b9:0c:eb:3b:cf:
         2b:f4:e4:80:bd:3e:d7:7f:ed:3f:c3:e0:42:f2:48:25:86:24:
         43:86:91:24:4b:c8:f6:4f:2c:da:b7:19:da:1b:36:ba:3e:ef:
         39:b8:77:1a:03:27:f9:4f:ee:40:96:47:6b:ef:38:3d:2e:c8:
         dd:06:85:ef
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEg56rWqorMSFOILtzgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTUxMTUxNDMtMTFjOC00YjA2LTgwYTEtYTk5MWZhNTBm
MmZhMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
ZmNmYzdjZDUtM2M2Yi00NmMwLWEyYTEtOWJmNzIzOTI1YzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgGm9G5a7TUi8idI77FTKPCUkEqkt3lu9s1L
5bx52lQyKx6InGLxNlEOrnEmynfcRzs/pwQulDvOuSD6Gizn/vrngkMlmUfd4VBj
6hJGPBdmfRTBT+DiDZX9BbaHz2eJpKsI3xDD+BiEdx740Dpb3UBf2g3It4IxEnNt
bbZp0mpMyjtNRLo9+rFybvQhdFOkOsGw/iiH1PuAgS1psBfqnjcl4SAtlW9IxV8J
TvBwuN9qqQsDG+maV/Rpou2dVAoBDn3fGBNd/dshFrUqRWyFSm0YamMOcTS4ycTa
E/MUOO77WwGY1/Q9xqnYMurQzkC+hre2ivTCeBkV824FsC/n8QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLZB/7ARUeNOZ7epief0P8xhSfVzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNTEx
NTE0My0xMWM4LTRiMDYtODBhMS1hOTkxZmE1MGYyZmEvNGZjOThjZDctNDA3Ny0z
Y2VjLWEyODktMmYwMjdhNzE4MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTUxMTUxNDMtMTFjOC00YjA2LTgw
YTEtYTk5MWZhNTBmMmZhLzE1MTE1MTQzLTExYzgtNGIwNi04MGExLWE5OTFmYTUw
ZjJmYS5jcmwwHwYDVR0jBBgwFoAUVxb9oR0aCplObiedKLlylvm9hkQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNTExNTE0My0xMWM4LTRiMDYtODBhMS1hOTkx
ZmE1MGYyZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgP7gAwQB
gP7iMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHEfbyaU3lrKa6heSygKBACAoveCMS0SOkvNDOyDUGq93QqT
GdyDv7KaotlhWziOxaeJ3WfIzaRCakMSGqYrl6bhkEnlu6bOI95CqbbT+Gv80X9N
Z7FelXAGO+jU12fh5ofa1s+Fya5v7Di1erHVAZJDGY4RixCCX9eTXtGp1QrnhDnN
rTIFUC3t88a0wAjxWf03mk0H413leZOPFTu042H8nz/ZZ1LF6lCC6bTCP+Zg4fEn
jWw+EsskPvUnouKIRhe5DOs7zyv05IC9Ptd/7T/D4ELySCWGJEOGkSRLyPZPLNq3
GdobNro+7zm4dxoDJ/lP7kCWR2vvOD0uyN0Ghe8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:39:49 2025 by rpki-client