Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c6b330c7-de93-37bc-b749-d9cc865ee8ec.roa
File:                     c6b330c7-de93-37bc-b749-d9cc865ee8ec.roa (raw, json)
Hash identifier:          CmlxoZL6sSE33SdKV06c1L6o7Ceun4QObKaRCiOK4CU=
Subject key identifier:   A0:8B:16:B1:5E:1B:F7:9E:E8:3B:8E:F2:0D:37:08:B9:9F:F1:87:1D
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F432858486695B0D75B57EC10ED86A900
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c6b330c7-de93-37bc-b749-d9cc865ee8ec.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     23154
IP address blocks:        148.164.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:b0:d7:5b:57:ec:10:ed:86:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=ba4d9307-98a1-4da5-9fff-66752815a94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:c8:9a:ea:2a:9d:e2:8a:16:b8:14:3c:ed:
                    74:6c:3b:98:99:9a:13:0e:52:cd:70:ea:87:a1:9a:
                    9b:6b:a5:f5:3e:d8:60:3f:9e:55:6a:15:91:fe:11:
                    b5:55:6c:21:9f:74:11:ac:d2:4c:bf:37:ba:12:5d:
                    48:96:5e:66:08:45:cd:4e:cc:3c:45:ed:a6:73:bd:
                    23:ce:ad:84:9b:37:68:df:22:ea:1b:fa:04:cd:48:
                    c6:e8:2e:97:9c:35:23:72:59:e9:26:aa:77:df:56:
                    f6:41:ca:80:e3:25:55:34:95:49:57:f0:ba:5d:1c:
                    d2:0f:65:90:82:9d:a1:1b:42:fb:53:ce:e2:99:f1:
                    3e:92:8d:76:1e:a0:da:7e:e0:88:6d:92:15:97:f5:
                    32:f9:45:64:5b:58:3c:22:a4:a0:a0:f1:62:0b:de:
                    8a:4b:02:80:f0:df:c2:73:92:a9:03:b6:01:8d:7e:
                    ec:cc:3b:26:fa:50:df:76:1b:7f:1f:6b:98:25:26:
                    bf:a7:81:56:82:18:2e:8b:42:86:1b:fa:7c:4f:c2:
                    72:1f:b6:af:05:45:1a:57:a2:40:49:54:d9:56:27:
                    43:c6:84:11:de:f6:d4:3b:1c:49:36:21:5e:ff:ed:
                    1a:e8:e1:12:5d:55:10:d2:32:18:0c:c6:9b:a4:54:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:16:B1:5E:1B:F7:9E:E8:3B:8E:F2:0D:37:08:B9:9F:F1:87:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/c6b330c7-de93-37bc-b749-d9cc865ee8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:07:0f:67:74:c4:e1:9c:32:81:5d:e0:22:e8:a5:e9:a5:ee:
         84:05:17:e0:12:08:2d:ff:7a:78:ec:da:2b:d6:50:a4:7f:e2:
         37:05:16:68:f2:75:3a:80:a8:d7:ff:f4:93:7a:86:80:27:fb:
         2b:d7:be:1e:f5:c3:55:76:3a:b4:d9:a0:bb:b5:e5:39:09:70:
         77:cd:a5:b7:48:45:57:bf:81:ea:85:62:97:19:8b:72:80:b8:
         9a:65:40:a0:a0:64:dd:cd:a4:d8:54:78:27:fe:68:71:23:34:
         f7:79:dc:5d:26:2b:d8:0a:81:91:c3:19:c5:ab:25:6b:6e:3b:
         1c:71:69:6c:bc:80:a4:65:7e:70:48:66:bb:be:f4:0f:85:b6:
         c0:5c:45:80:0a:8f:06:eb:89:28:4d:0f:69:89:9e:29:6c:13:
         46:e9:71:be:94:59:f8:18:8a:5b:d8:80:c7:7e:c4:f1:f5:87:
         fd:de:f4:d5:73:ae:2a:7b:ac:00:a5:ff:2a:35:5e:fc:84:80:
         41:ef:83:6e:81:53:6d:8b:40:ba:1a:22:eb:28:f0:14:4a:f1:
         32:82:8e:82:03:5c:17:8d:1d:2e:5a:92:d4:2e:62:86:89:7a:
         ed:be:75:34:90:90:32:10:43:71:86:0a:eb:34:62:fd:d0:e4:
         75:cd:48:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbDXW1fsEO2GqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
YmE0ZDkzMDctOThhMS00ZGE1LTlmZmYtNjY3NTI4MTVhOTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MDImuoqneKKFrgUPO10bDuYmZoTDlLNcOqH
oZqba6X1PthgP55VahWR/hG1VWwhn3QRrNJMvze6El1Ill5mCEXNTsw8Re2mc70j
zq2Emzdo3yLqG/oEzUjG6C6XnDUjclnpJqp331b2QcqA4yVVNJVJV/C6XRzSD2WQ
gp2hG0L7U87imfE+ko12HqDafuCIbZIVl/Uy+UVkW1g8IqSgoPFiC96KSwKA8N/C
c5KpA7YBjX7szDsm+lDfdht/H2uYJSa/p4FWghgui0KGG/p8T8JyH7avBUUaV6JA
SVTZVidDxoQR3vbUOxxJNiFe/+0a6OESXVUQ0jIYDMabpFRwPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKCLFrFeG/ee6DuO8g03CLmf8YcdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYzZiMzMwYzctZGU5My0z
N2JjLWI3NDktZDljYzg2NWVlOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIHD2d0xOGcMoFd4CLopeml7oQFF+ASCC3/enjs2ivWUKR/4jcFFmjy
dTqAqNf/9JN6hoAn+yvXvh71w1V2OrTZoLu15TkJcHfNpbdIRVe/geqFYpcZi3KA
uJplQKCgZN3NpNhUeCf+aHEjNPd53F0mK9gKgZHDGcWrJWtuOxxxaWy8gKRlfnBI
Zru+9A+FtsBcRYAKjwbriShND2mJnilsE0bpcb6UWfgYilvYgMd+xPH1h/3e9NVz
rip7rACl/yo1XvyEgEHvg26BU22LQLoaIuso8BRK8TKCjoIDXBeNHS5aktQuYoaJ
eu2+dTSQkDIQQ3GGCus0Yv3Q5HXNSDo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:45 2025 by rpki-client