Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e30238df-c22c-369a-9c41-239b532041e5.roa
File:                     e30238df-c22c-369a-9c41-239b532041e5.roa (raw, json)
Hash identifier:          VNsCRBwkmkN3tlQP4KrH1gAwXnk2HTZXAk0UoTidnaI=
Subject key identifier:   2B:E2:7B:C0:31:B4:B8:C8:40:E7:1E:D7:6F:9B:E2:61:71:FD:3F:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AE1EBE10544CA7DB0B3D8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e30238df-c22c-369a-9c41-239b532041e5.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        71.233.240.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:e1:eb:e1:05:44:ca:7d:b0:b3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=c634032b-0c15-455b-b4af-b0de1e96cfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:24:66:1b:20:df:97:eb:ab:53:af:e3:cf:1b:
                    94:27:b2:c6:42:4a:56:d6:f2:bd:1a:ef:47:89:ae:
                    93:f5:72:73:e0:7f:77:36:6f:d6:b4:a6:4a:84:48:
                    13:fc:d0:06:6f:83:84:17:52:f3:00:a6:f4:4f:de:
                    ce:ad:c6:4b:eb:7a:97:ee:f2:2b:4c:e4:d2:ae:13:
                    72:c4:03:f7:8e:6e:74:0d:52:1b:7d:7d:1c:1c:c1:
                    a0:d4:c0:46:3d:44:ff:d7:56:b0:da:3b:4d:7c:8b:
                    b2:93:88:15:f9:f4:da:27:07:09:0e:b0:0d:28:cf:
                    13:a3:2d:3b:8a:9e:f7:29:fb:07:0b:5b:1f:08:a7:
                    92:f2:c9:8f:49:e1:77:d2:90:ad:e2:17:b2:9a:aa:
                    31:4d:7a:95:f7:b8:18:3b:a1:ae:73:4e:c1:95:cc:
                    9e:64:46:4e:ba:64:f0:f4:e1:c9:3f:72:e2:14:f8:
                    30:b5:87:e8:b7:c1:71:de:aa:c8:ae:ec:1f:8e:54:
                    cb:cd:b7:ea:03:6f:94:c4:14:ef:a8:e6:a9:ad:fe:
                    3d:50:57:91:ec:9a:67:83:6f:29:0a:75:4d:b3:1d:
                    b0:4c:4e:29:89:bd:56:e3:db:36:ee:4c:1b:7e:f1:
                    78:4c:15:25:01:59:1f:fd:87:d7:39:60:65:80:31:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E2:7B:C0:31:B4:B8:C8:40:E7:1E:D7:6F:9B:E2:61:71:FD:3F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e30238df-c22c-369a-9c41-239b532041e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.233.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:0c:a6:be:f2:c7:a0:6b:5f:3c:ec:0a:c8:7b:ae:8c:0b:
         58:98:f8:35:42:a7:4c:50:f7:cc:f8:68:bf:b8:cf:f7:8b:5b:
         5b:45:42:15:fe:dd:46:b8:d6:93:fe:38:34:07:9e:7b:b5:5e:
         f2:79:67:e9:cc:26:76:e2:5f:d1:75:e8:ce:a8:4b:74:d4:15:
         89:a1:0f:d0:1d:3a:7e:2b:f9:d5:1f:1f:9c:a5:86:ec:31:db:
         56:42:a6:e3:ea:5c:5b:30:eb:bd:da:57:c9:bb:41:f3:14:07:
         7a:be:69:f2:97:c6:7e:7c:2b:7e:9a:43:4f:10:b2:e3:58:d9:
         89:e7:b1:f2:95:14:ca:47:23:eb:77:d6:69:71:71:d1:c4:70:
         04:c6:30:3b:87:db:d9:d5:74:fe:02:0f:ce:0d:2a:6f:59:ed:
         8b:e6:6e:10:ac:ac:34:d4:fd:cc:de:ad:9a:3b:e9:e4:dc:27:
         e5:e2:51:c5:c2:e9:6e:e8:10:df:da:78:58:53:1b:ac:18:3c:
         9a:08:5e:e2:6d:65:9f:9b:21:d7:e7:85:0e:ba:8d:75:e5:fa:
         b5:90:7f:fe:92:19:81:0a:23:fc:32:bf:e0:f9:84:3d:2a:86:
         fd:3e:7a:cc:e3:54:9c:f8:ed:b1:1f:30:5e:9f:74:91:00:b9:
         c6:d4:f4:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOuHr4QVEyn2ws9gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YzYzNDAzMmItMGMxNS00NTViLWI0YWYtYjBkZTFlOTZjZmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyRmGyDfl+urU6/jzxuUJ7LGQkpW1vK9Gu9H
ia6T9XJz4H93Nm/WtKZKhEgT/NAGb4OEF1LzAKb0T97OrcZL63qX7vIrTOTSrhNy
xAP3jm50DVIbfX0cHMGg1MBGPUT/11aw2jtNfIuyk4gV+fTaJwcJDrANKM8Toy07
ip73KfsHC1sfCKeS8smPSeF30pCt4heymqoxTXqV97gYO6Guc07BlcyeZEZOumTw
9OHJP3LiFPgwtYfot8Fx3qrIruwfjlTLzbfqA2+UxBTvqOaprf49UFeR7Jpng28p
CnVNsx2wTE4pib1W49s27kwbfvF4TBUlAVkf/YfXOWBlgDFumwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvie8AxtLjIQOce12+b4mFx/T9ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTMwMjM4ZGYtYzIyYy0z
NjlhLTljNDEtMjM5YjUzMjA0MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+nwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGt/DKa+8sega1887ArIe66MC1iY+DVCp0xQ98z4aL+4z/eLW1tFQhX+
3Ua41pP+ODQHnnu1XvJ5Z+nMJnbiX9F16M6oS3TUFYmhD9AdOn4r+dUfH5ylhuwx
21ZCpuPqXFsw673aV8m7QfMUB3q+afKXxn58K36aQ08QsuNY2YnnsfKVFMpHI+t3
1mlxcdHEcATGMDuH29nVdP4CD84NKm9Z7YvmbhCsrDTU/czerZo76eTcJ+XiUcXC
6W7oEN/aeFhTG6wYPJoIXuJtZZ+bIdfnhQ66jXXl+rWQf/6SGYEKI/wyv+D5hD0q
hv0+eszjVJz47bEfMF6fdJEAucbU9KM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:58:42 2025 by rpki-client