Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/13c44343-66dc-3339-b6e1-56b2ab520e15.roa
File:                     13c44343-66dc-3339-b6e1-56b2ab520e15.roa (raw, json)
Hash identifier:          2oJjPun/har4kDtg+GLr7pPP9O9/EW44yjAX5xWQRb8=
Subject key identifier:   FB:8F:30:63:57:F1:1F:1B:57:87:20:60:D2:27:57:F7:25:F9:C1:2A
Certificate issuer:       /CN=6c51bc31-98e8-463b-9f8c-17aa8735990c
Certificate serial:       010D0C9F43285848748B1C0DBF3A7D8761F94E00
Authority key identifier: 3D:13:54:89:45:2F:F1:8E:1C:B6:BB:41:F6:9B:BE:04:8C:CE:78:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/13c44343-66dc-3339-b6e1-56b2ab520e15.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        199.201.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:1c:0d:bf:3a:7d:87:61:f9:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c51bc31-98e8-463b-9f8c-17aa8735990c
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=03932c27-d1e5-4450-9fb2-3a81d6652393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:5d:38:ec:62:ba:0f:eb:24:44:fd:6a:4a:
                    61:ba:47:bf:8b:62:a9:70:79:6d:a3:44:cf:c2:26:
                    eb:12:33:09:8d:e7:a2:87:7b:f8:af:f2:f2:4e:1e:
                    a3:dc:c1:e3:93:65:eb:90:bb:f7:d7:5c:d9:fb:60:
                    52:9a:22:4e:cb:f0:f2:4e:70:ea:c9:9b:bf:09:b3:
                    a8:37:b9:58:8e:f4:8d:95:7b:3e:9e:2a:9d:11:cf:
                    d4:78:b7:40:46:1c:49:c6:1f:f1:ca:2c:4e:3f:3d:
                    95:9e:1e:59:fc:6e:de:9b:27:9a:8f:0b:83:eb:21:
                    ad:b3:82:02:c9:da:32:33:ee:b7:e7:33:90:05:93:
                    19:ad:85:d6:e0:e3:48:0c:b8:07:b9:7b:9b:ee:02:
                    ce:53:d3:9e:0f:21:96:14:52:87:38:26:a5:77:92:
                    be:3a:41:0d:24:a8:ce:e0:63:1d:5e:e2:46:cc:a8:
                    e3:61:a4:03:1c:e5:a7:d4:03:1a:46:4f:7e:e8:0e:
                    21:7b:7b:f6:eb:b9:b6:35:c8:3b:7d:34:16:b8:83:
                    bb:40:fd:20:df:33:ff:fb:3d:da:7c:27:b8:e3:f6:
                    12:9c:23:a4:3a:81:3c:ca:b0:92:d5:b0:14:78:b9:
                    92:6c:89:93:19:70:60:6a:45:b3:90:a7:6b:80:de:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8F:30:63:57:F1:1F:1B:57:87:20:60:D2:27:57:F7:25:F9:C1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/13c44343-66dc-3339-b6e1-56b2ab520e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/6c51bc31-98e8-463b-9f8c-17aa8735990c.crl

            X509v3 Authority Key Identifier:
                keyid:3D:13:54:89:45:2F:F1:8E:1C:B6:BB:41:F6:9B:BE:04:8C:CE:78:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:50:2d:78:9c:e9:17:09:25:55:0e:48:bd:f1:68:c8:17:a3:
         6a:f8:04:16:3c:5b:ce:ce:ce:8b:7e:dc:36:c1:c0:31:c6:65:
         b9:8f:5a:fa:82:a6:a1:bc:25:05:df:8f:42:36:f4:d0:05:a8:
         8b:13:55:96:f5:8f:b2:80:d7:d8:89:25:07:0e:84:98:87:9b:
         a2:0d:19:e2:63:85:ac:d2:53:0a:dc:8f:27:0a:ca:64:29:5d:
         e5:f9:e3:a8:2a:19:5a:4b:9a:02:b8:2e:7f:86:05:52:a6:66:
         f3:9e:2f:85:4d:73:f8:36:c4:5d:c4:04:68:bf:7a:6c:4f:44:
         11:9d:36:57:b3:ba:d4:0c:ea:9f:7c:20:85:3f:4f:28:65:56:
         e9:b0:f2:f9:f7:85:51:d2:2e:63:35:66:47:93:08:93:f8:b4:
         3f:00:ee:62:cf:9d:da:dd:76:d7:d5:a7:eb:88:cb:2b:dd:9f:
         a8:64:b6:7f:9e:af:1c:1a:9d:f0:13:97:a7:46:84:1d:13:3b:
         00:b0:c8:18:2d:c6:fa:e1:e9:6c:1b:ff:26:9f:49:61:46:37:
         c4:26:88:7a:cd:70:a2:17:fc:38:a3:ff:7b:1e:f8:7e:0b:b9:
         5f:a2:df:5f:af:63:15:bf:dc:8b:83:4b:26:1c:bb:b2:b4:0b:
         6a:d7:0f:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ixwNvzp9h2H5TgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM1MWJjMzEtOThlOC00NjNiLTlmOGMtMTdhYTg3MzU5
OTBjMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
MDM5MzJjMjctZDFlNS00NDUwLTlmYjItM2E4MWQ2NjUyMzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJZdOOxiug/rJET9akphuke/i2KpcHlto0TP
wibrEjMJjeeih3v4r/LyTh6j3MHjk2XrkLv311zZ+2BSmiJOy/DyTnDqyZu/CbOo
N7lYjvSNlXs+niqdEc/UeLdARhxJxh/xyixOPz2Vnh5Z/G7emyeajwuD6yGts4IC
ydoyM+635zOQBZMZrYXW4ONIDLgHuXub7gLOU9OeDyGWFFKHOCald5K+OkENJKjO
4GMdXuJGzKjjYaQDHOWn1AMaRk9+6A4he3v267m2Ncg7fTQWuIO7QP0g3zP/+z3a
fCe44/YSnCOkOoE8yrCS1bAUeLmSbImTGXBgakWzkKdrgN6CjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPuPMGNX8R8bV4cgYNInV/cl+cEqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YzUx
YmMzMS05OGU4LTQ2M2ItOWY4Yy0xN2FhODczNTk5MGMvMTNjNDQzNDMtNjZkYy0z
MzM5LWI2ZTEtNTZiMmFiNTIwZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmM1MWJjMzEtOThlOC00NjNiLTlm
OGMtMTdhYTg3MzU5OTBjLzZjNTFiYzMxLTk4ZTgtNDYzYi05ZjhjLTE3YWE4NzM1
OTkwYy5jcmwwHwYDVR0jBBgwFoAUPRNUiUUv8Y4ctrtB9pu+BIzOeEcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YzUxYmMzMS05OGU4LTQ2M2ItOWY4Yy0xN2Fh
ODczNTk5MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8nzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpQLXic6RcJJVUOSL3xaMgXo2r4BBY8W87Ozot+3DbBwDHGZbmPWvqC
pqG8JQXfj0I29NAFqIsTVZb1j7KA19iJJQcOhJiHm6INGeJjhazSUwrcjycKymQp
XeX546gqGVpLmgK4Ln+GBVKmZvOeL4VNc/g2xF3EBGi/emxPRBGdNlezutQM6p98
IIU/TyhlVumw8vn3hVHSLmM1ZkeTCJP4tD8A7mLPndrddtfVp+uIyyvdn6hktn+e
rxwanfATl6dGhB0TOwCwyBgtxvrh6Wwb/yafSWFGN8QmiHrNcKIX/Dij/3se+H4L
uV+i31+vYxW/3IuDSyYcu7K0C2rXD3E=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:43 2025 by rpki-client