Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/e243a063-2fee-35ac-9d0e-667f57577af5.roa
File:                     e243a063-2fee-35ac-9d0e-667f57577af5.roa (raw, json)
Hash identifier:          cFx15AGX1LNe7iUSzERrQVyk3T4KxNMVaBZRSKNi57o=
Subject key identifier:   C1:3E:A4:92:E7:8C:B1:A2:81:13:10:C4:51:AE:9D:C8:75:28:AE:FA
Certificate issuer:       /CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245
Certificate serial:       010D0C9F43285848090FBB04E2131F6CEB0B5800
Authority key identifier: DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/e243a063-2fee-35ac-9d0e-667f57577af5.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     54009
IP address blocks:        198.147.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:bb:04:e2:13:1f:6c:eb:0b:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=e3193b50-7d20-4422-a677-d1fcee141c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:bd:2c:ce:93:87:4e:7e:df:e4:8a:25:10:
                    20:34:79:14:e6:a6:d7:b8:8f:39:2d:86:f0:73:87:
                    61:d2:02:a6:d5:e9:7b:12:e7:1e:ae:a5:ce:ec:91:
                    5a:ea:7b:d4:d4:7d:1b:1f:f4:e6:84:50:46:65:8b:
                    a9:7a:56:1b:a2:d7:9f:63:2b:c6:cf:0f:01:5e:33:
                    55:d0:4a:df:7f:72:15:c7:8c:7f:75:35:ea:a8:3c:
                    a5:60:58:95:4d:da:34:ca:f2:b5:dd:94:31:99:59:
                    b5:22:1f:d5:86:3e:30:a9:e9:9d:94:5e:cc:3f:47:
                    52:b8:4c:51:1b:9a:2f:8f:ba:09:21:4e:10:2a:ba:
                    0c:fb:a9:25:66:8a:16:55:c4:54:31:88:e9:3c:cd:
                    68:54:34:32:1f:19:fc:4c:69:90:74:03:98:ac:13:
                    d6:0d:e9:74:6e:69:cb:2f:a3:e2:22:df:59:24:5b:
                    70:b9:03:7f:3d:ed:9d:3b:0c:ca:69:56:bb:71:d7:
                    1d:cb:8f:e7:61:d0:d0:b1:ab:4b:f2:dd:4f:80:12:
                    27:73:f0:d0:08:af:ce:d1:5b:54:70:88:07:56:4b:
                    6c:3b:5a:bd:f9:a3:54:4e:9d:9d:8f:53:09:a4:3f:
                    42:6d:79:e1:29:58:f1:33:a0:6b:74:c2:fe:a6:92:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3E:A4:92:E7:8C:B1:A2:81:13:10:C4:51:AE:9D:C8:75:28:AE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/e243a063-2fee-35ac-9d0e-667f57577af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.crl

            X509v3 Authority Key Identifier:
                keyid:DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.147.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:57:d8:ff:de:ee:2d:86:22:c0:29:c1:ae:16:5d:eb:2f:e8:
         f6:0b:21:01:19:0f:cf:76:61:f7:a1:3f:c7:95:ef:69:82:cb:
         b1:e0:f7:c8:0c:d1:aa:1b:f2:23:21:25:8e:a0:7a:b6:d0:49:
         75:81:9b:ac:b2:cf:40:4e:ec:fc:e9:c9:a3:7b:ec:df:f4:7f:
         e1:32:63:35:95:c4:87:6a:ba:7f:12:93:7e:19:82:79:8a:97:
         d5:bc:42:24:3d:c9:e6:b4:a2:ee:33:42:fb:69:94:2f:d3:6f:
         3b:a5:a3:f3:ba:3a:50:1d:03:7e:76:74:5e:e7:99:01:48:55:
         e1:82:22:fe:29:e9:c6:b6:b2:62:db:e5:5b:97:5d:e2:08:37:
         bf:7f:ee:0a:7e:c0:c3:ea:1a:54:92:4f:f7:a7:01:4e:d0:d5:
         df:24:dd:0a:3f:a5:15:9e:04:42:4d:67:c3:52:4f:1d:41:63:
         a1:a6:04:87:23:8f:4a:ab:08:02:05:f9:1e:3d:cf:0c:7e:77:
         98:7d:a6:92:3f:ea:e8:d6:af:60:b5:99:4c:a0:c2:0a:fc:f8:
         2a:38:b9:a2:74:87:c2:f2:07:78:21:58:68:44:fe:29:66:8a:
         b3:8c:a2:ac:03:30:97:34:27:09:56:de:e2:a1:a0:27:bf:37:
         4d:62:7d:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7sE4hMfbOsLWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTljNTA1MTQtZWViYS00YWIyLWI4ZTAtMmE2NDI3NGVi
MjQ1MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
ZTMxOTNiNTAtN2QyMC00NDIyLWE2NzctZDFmY2VlMTQxYzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrG9LM6Th05+3+SKJRAgNHkU5qbXuI85LYbw
c4dh0gKm1el7EucerqXO7JFa6nvU1H0bH/TmhFBGZYupelYbotefYyvGzw8BXjNV
0Erff3IVx4x/dTXqqDylYFiVTdo0yvK13ZQxmVm1Ih/Vhj4wqemdlF7MP0dSuExR
G5ovj7oJIU4QKroM+6klZooWVcRUMYjpPM1oVDQyHxn8TGmQdAOYrBPWDel0bmnL
L6PiIt9ZJFtwuQN/Pe2dOwzKaVa7cdcdy4/nYdDQsatL8t1PgBInc/DQCK/O0VtU
cIgHVktsO1q9+aNUTp2dj1MJpD9CbXnhKVjxM6BrdML+ppIWLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFME+pJLnjLGigRMQxFGunch1KK76MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOWM1
MDUxNC1lZWJhLTRhYjItYjhlMC0yYTY0Mjc0ZWIyNDUvZTI0M2EwNjMtMmZlZS0z
NWFjLTlkMGUtNjY3ZjU3NTc3YWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTljNTA1MTQtZWViYS00YWIyLWI4
ZTAtMmE2NDI3NGViMjQ1L2E5YzUwNTE0LWVlYmEtNGFiMi1iOGUwLTJhNjQyNzRl
YjI0NS5jcmwwHwYDVR0jBBgwFoAU3ZYpjh1ow6GiOci11ZLDmMbBPVUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOWM1MDUxNC1lZWJhLTRhYjItYjhlMC0yYTY0
Mjc0ZWIyNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpP3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERX2P/e7i2GIsApwa4WXesv6PYLIQEZD892YfehP8eV72mCy7Hg98gM
0aob8iMhJY6gerbQSXWBm6yyz0BO7PzpyaN77N/0f+EyYzWVxIdqun8Sk34ZgnmK
l9W8QiQ9yea0ou4zQvtplC/Tbzulo/O6OlAdA352dF7nmQFIVeGCIv4p6ca2smLb
5VuXXeIIN79/7gp+wMPqGlSST/enAU7Q1d8k3Qo/pRWeBEJNZ8NSTx1BY6GmBIcj
j0qrCAIF+R49zwx+d5h9ppI/6ujWr2C1mUygwgr8+Co4uaJ0h8LyB3ghWGhE/ilm
irOMoqwDMJc0JwlW3uKhoCe/N01ifSw=
-----END CERTIFICATE-----
Generated at Sun May 11 10:51:29 2025 by rpki-client