Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa
File:                     cafde11a-c375-36a5-a218-aad0aa1a246b.roa (raw, json)
Hash identifier:          hyk3bO1bP68GlR+v+XhfXFGastFMTBRjYaEI3yV79O4=
Subject key identifier:   0C:E3:A7:C3:FE:47:02:80:5B:90:C0:48:61:53:F8:3D:AA:31:89:5A
Certificate issuer:       /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
Certificate serial:       010D0C9F43285848854B436A990D783BB622FA30
Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        135.109.194.0/24 maxlen: 24
                          135.109.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:43:6a:99:0d:78:3b:b6:22:fa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=f0349baf-06f3-4934-83d2-0f09bade4b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:38:cc:79:6c:2b:8a:da:82:39:0b:7e:08:
                    7c:a3:7f:a9:59:7a:9b:8e:a9:fe:c6:98:9a:13:99:
                    d7:d4:ed:59:9f:38:59:bb:5d:99:d7:97:ca:3e:a8:
                    ff:15:2c:fa:b0:d8:4d:b0:83:b7:bf:6b:85:61:a9:
                    8d:c3:3a:cc:55:92:be:0d:f1:d3:3a:dd:ec:76:45:
                    d8:8c:6c:5a:21:90:8f:dd:e1:af:20:a2:b7:21:c5:
                    ec:5f:68:1c:52:2d:6a:10:07:e6:4a:53:0d:7b:93:
                    cf:01:de:c8:10:0b:89:65:2e:a9:a4:52:8b:bb:ad:
                    d5:4d:6e:d2:e6:d7:8f:5b:28:6d:1e:65:26:31:b0:
                    3b:89:83:f5:1c:01:05:a3:4d:95:df:6e:6c:f9:cb:
                    58:16:ae:e5:26:32:07:0f:37:3a:9d:3f:3b:ed:47:
                    75:ee:74:df:65:13:d8:02:1c:10:02:82:3a:07:19:
                    3f:4b:54:77:04:4d:be:43:27:6f:23:07:04:03:04:
                    aa:7f:7e:55:8c:43:27:c6:a3:fb:f9:6c:14:52:e3:
                    6b:f9:49:c8:7c:da:db:42:fb:d9:70:79:06:34:9a:
                    25:26:1e:c3:8c:da:d9:f4:e6:3e:9e:43:f8:b6:cb:
                    bd:d6:bc:12:7b:fe:4f:53:83:86:6a:1d:15:cf:6e:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E3:A7:C3:FE:47:02:80:5B:90:C0:48:61:53:F8:3D:AA:31:89:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl

            X509v3 Authority Key Identifier:
                keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.109.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:14:a0:b4:1d:7d:c3:5b:92:14:17:d9:7f:c4:ab:22:2d:2f:
         e5:ad:d5:b4:3b:2e:cb:b5:dd:f1:85:ac:a8:a0:13:52:a4:44:
         cd:dc:5f:33:f0:3c:71:e2:17:ef:1c:27:5e:77:54:d2:35:a2:
         fd:30:5f:9b:56:8f:d9:fe:91:a1:8f:16:3f:4a:53:27:db:25:
         9a:b1:77:bb:9d:43:ec:d4:d1:7b:1e:b1:9e:a9:ee:19:74:5e:
         79:4c:d8:64:07:d0:1e:14:e4:b0:4a:91:a9:b7:3e:66:af:5a:
         00:0d:cd:39:71:84:32:1a:ea:03:73:56:58:81:14:06:53:62:
         b8:14:cb:a2:5c:17:ca:96:59:b0:0a:85:5f:99:4a:b6:0e:5f:
         47:82:e8:cc:2f:94:d3:a7:dc:0b:98:ab:b4:f5:3c:00:15:73:
         af:5d:96:e0:e2:11:b9:03:5e:39:6c:4d:c4:55:86:ed:84:4f:
         7c:8d:2f:ea:f3:4d:4d:97:59:ca:06:64:01:3f:48:2b:f6:da:
         5c:53:f4:e0:4b:7a:80:98:81:a7:42:0d:dd:b3:c1:77:2c:e3:
         73:b6:0f:b5:7b:45:bb:59:f3:93:8e:69:1b:55:61:1a:96:a8:
         59:9d:60:a0:61:2a:58:94:63:42:d7:a7:51:2b:1b:0f:7c:82:
         4e:e8:a1:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0NqmQ14O7Yi+jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMzYzc0MzMtNmQ1ZC00ZjdjLWIyZWYtOThjY2IxZDEw
OGQ2MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
ZjAzNDliYWYtMDZmMy00OTM0LTgzZDItMGYwOWJhZGU0YjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ84zHlsK4ragjkLfgh8o3+pWXqbjqn+xpia
E5nX1O1ZnzhZu12Z15fKPqj/FSz6sNhNsIO3v2uFYamNwzrMVZK+DfHTOt3sdkXY
jGxaIZCP3eGvIKK3IcXsX2gcUi1qEAfmSlMNe5PPAd7IEAuJZS6ppFKLu63VTW7S
5tePWyhtHmUmMbA7iYP1HAEFo02V325s+ctYFq7lJjIHDzc6nT877Ud17nTfZRPY
AhwQAoI6Bxk/S1R3BE2+QydvIwcEAwSqf35VjEMnxqP7+WwUUuNr+UnIfNrbQvvZ
cHkGNJolJh7DjNrZ9OY+nkP4tsu91rwSe/5PU4OGah0Vz27bjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAzjp8P+RwKAW5DASGFT+D2qMYlaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNj
NzQzMy02ZDVkLTRmN2MtYjJlZi05OGNjYjFkMTA4ZDYvY2FmZGUxMWEtYzM3NS0z
NmE1LWEyMTgtYWFkMGFhMWEyNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTMzYzc0MzMtNmQ1ZC00ZjdjLWIy
ZWYtOThjY2IxZDEwOGQ2L2UzM2M3NDMzLTZkNWQtNGY3Yy1iMmVmLTk4Y2NiMWQx
MDhkNi5jcmwwHwYDVR0jBBgwFoAUFlvmbqkKMt6CtBNVP7s4vgT3Z9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNjNzQzMy02ZDVkLTRmN2MtYjJlZi05OGNj
YjFkMTA4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh23CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMUoLQdfcNbkhQX2X/EqyItL+Wt1bQ7Lsu13fGFrKigE1KkRM3cXzPw
PHHiF+8cJ153VNI1ov0wX5tWj9n+kaGPFj9KUyfbJZqxd7udQ+zU0XsesZ6p7hl0
XnlM2GQH0B4U5LBKkam3PmavWgANzTlxhDIa6gNzVliBFAZTYrgUy6JcF8qWWbAK
hV+ZSrYOX0eC6MwvlNOn3AuYq7T1PAAVc69dluDiEbkDXjlsTcRVhu2ET3yNL+rz
TU2XWcoGZAE/SCv22lxT9OBLeoCYgadCDd2zwXcs43O2D7V7RbtZ85OOaRtVYRqW
qFmdYKBhKliUY0LXp1ErGw98gk7ooWU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:16 2025 by rpki-client