Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa
File:                     14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa (raw, json)
Hash identifier:          UwGXHMKpWMgDP83jfnxaswUus5LuJB04o9DF/A/oXtM=
Subject key identifier:   3D:32:FF:B0:BB:9C:7B:8A:E3:39:8E:59:95:B6:5F:8B:51:CF:DF:8A
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F43285847FDE4DAFF05F5600E43AA8110
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     13335
IP address blocks:        159.242.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:da:ff:05:f5:60:0e:43:aa:81:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=cccca92f-e554-4e7c-8e7b-41afb12bffce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:5e:20:26:68:08:ff:67:40:5c:fa:79:64:
                    d0:c5:7e:9d:60:ba:42:66:7f:c2:59:eb:ae:d4:d9:
                    2c:b0:da:ad:a0:77:36:77:91:4b:b0:b5:c2:95:57:
                    ba:20:07:13:47:48:41:2d:71:e0:b0:66:10:d9:bf:
                    d4:3f:bb:ac:1f:4a:48:1e:58:8a:78:d3:37:a7:75:
                    e7:de:c2:8b:ea:1c:bf:85:60:fe:c1:bf:7e:db:53:
                    06:66:54:05:43:a3:6d:88:f0:ff:6e:5f:12:42:71:
                    52:74:80:04:b3:16:70:af:68:65:d3:23:4e:8f:2a:
                    1f:ec:51:fc:8c:b7:02:fa:84:f4:72:43:23:55:50:
                    83:e6:9b:f1:cb:6e:ce:fb:00:30:5f:b7:0c:36:74:
                    38:e9:3d:af:9e:5a:34:be:1c:a2:5f:95:b2:4b:ae:
                    12:26:68:ec:3c:bd:0b:45:09:e2:e6:53:82:39:87:
                    10:42:55:09:da:4b:e5:fd:a8:30:60:94:74:9b:d4:
                    f6:88:2d:a8:9b:9b:8c:ff:ba:dc:d4:d6:c1:88:27:
                    78:6a:0a:c6:33:0a:0f:32:87:83:cf:03:0e:2d:21:
                    09:66:67:51:ab:51:8b:fc:7d:d3:97:96:e8:5e:3b:
                    d1:a3:69:6b:91:55:94:b6:c5:6a:0b:48:0d:3c:7e:
                    e3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:32:FF:B0:BB:9C:7B:8A:E3:39:8E:59:95:B6:5F:8B:51:CF:DF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.242.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b5:5e:e6:25:d1:6c:83:86:c7:1f:36:62:3c:cc:9d:1e:77:
         84:db:af:4e:df:a6:c8:89:ad:6f:81:0c:ec:82:84:ee:e6:88:
         51:9e:56:a7:b8:60:6a:41:4c:06:cf:b4:80:51:d9:66:47:8a:
         cc:10:cf:35:5a:93:e6:2c:b1:61:7e:40:e4:f3:ac:9c:2d:50:
         ad:66:fc:e8:03:16:84:3f:6f:ad:2e:cb:7a:9d:58:f3:77:90:
         59:3e:0e:61:5f:27:cd:1d:bd:1f:37:aa:fd:1e:16:20:33:29:
         c4:1e:68:55:f1:1d:e6:89:73:22:3f:1b:d0:c2:d7:29:4f:6b:
         2b:3c:f2:93:03:9f:66:a8:4d:0c:c9:f9:9a:a7:60:13:ee:75:
         71:31:1b:41:cc:dc:d9:e9:db:42:84:d8:57:0a:4b:6b:18:90:
         a5:ae:e3:0e:01:34:f8:93:95:9c:c6:b5:e3:39:a7:32:60:0e:
         55:2e:f4:98:01:8e:a8:9a:92:95:d4:3b:85:13:11:d5:14:9b:
         46:10:a3:65:5d:63:35:aa:11:b5:b9:b2:43:40:35:da:1a:fa:
         44:d5:bd:5c:ae:b0:c5:3e:50:ce:24:e0:c1:c2:c0:d0:69:e0:
         7f:b6:f9:db:78:b9:84:bc:98:03:ea:fc:90:7e:02:42:1b:00:
         29:f3:54:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf95Nr/BfVgDkOqgRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI0MTEyNTAyMDAyOFoXDTI1MDIyMzAyMDAyOFowLzEtMCsGA1UEAxMk
Y2NjY2E5MmYtZTU1NC00ZTdjLThlN2ItNDFhZmIxMmJmZmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSpeICZoCP9nQFz6eWTQxX6dYLpCZn/CWeuu
1NkssNqtoHc2d5FLsLXClVe6IAcTR0hBLXHgsGYQ2b/UP7usH0pIHliKeNM3p3Xn
3sKL6hy/hWD+wb9+21MGZlQFQ6NtiPD/bl8SQnFSdIAEsxZwr2hl0yNOjyof7FH8
jLcC+oT0ckMjVVCD5pvxy27O+wAwX7cMNnQ46T2vnlo0vhyiX5WyS64SJmjsPL0L
RQni5lOCOYcQQlUJ2kvl/agwYJR0m9T2iC2om5uM/7rc1NbBiCd4agrGMwoPMoeD
zwMOLSEJZmdRq1GL/H3Tl5boXjvRo2lrkVWUtsVqC0gNPH7jpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD0y/7C7nHuK4zmOWZW2X4tRz9+KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvMTRlNmJkYmYtODkzOS0z
NDQ1LThhZjgtM2IyZjkyZjBmOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn/LyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKi1XuYl0WyDhscfNmI8zJ0ed4Tbr07fpsiJrW+BDOyChO7miFGeVqe4
YGpBTAbPtIBR2WZHiswQzzVak+YssWF+QOTzrJwtUK1m/OgDFoQ/b60uy3qdWPN3
kFk+DmFfJ80dvR83qv0eFiAzKcQeaFXxHeaJcyI/G9DC1ylPays88pMDn2aoTQzJ
+ZqnYBPudXExG0HM3Nnp20KE2FcKS2sYkKWu4w4BNPiTlZzGteM5pzJgDlUu9JgB
jqiakpXUO4UTEdUUm0YQo2VdYzWqEbW5skNANdoa+kTVvVyusMU+UM4k4MHCwNBp
4H+2+dt4uYS8mAPq/JB+AkIbACnzVG8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:11 2025 by rpki-client