Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e57c7ca2-1cee-3a0a-a60e-333adff6b36a.roa
File:                     e57c7ca2-1cee-3a0a-a60e-333adff6b36a.roa (raw, json)
Hash identifier:          mocjufsW+Kukc9jp3jeKEv7EPGqAHqb6zQIE59lWOf4=
Subject key identifier:   3C:7E:7A:F8:52:78:3F:47:BD:23:55:31:EE:99:51:AC:D7:0F:EF:C2
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584812D53D88FBBBD8B57B967DE8
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e57c7ca2-1cee-3a0a-a60e-333adff6b36a.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     62775
IP address blocks:        163.253.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:3d:88:fb:bb:d8:b5:7b:96:7d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=ce6dfef1-9f84-4d12-a2e2-4532a7a8d7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:75:ce:c9:32:2d:26:e8:15:e9:44:c6:b3:4b:
                    cf:14:4e:4b:61:24:c7:e5:07:52:16:24:76:68:03:
                    f5:6e:ac:06:59:ac:7f:b4:3e:43:0f:72:36:9b:91:
                    f1:36:53:e9:7b:38:63:a8:d4:74:ea:d0:0e:80:1e:
                    72:32:95:07:df:ca:bb:90:14:97:2a:d3:d3:68:f8:
                    73:83:ce:a6:b1:01:3c:85:3a:00:81:5b:45:9c:e4:
                    b3:a5:fe:c7:59:16:33:a6:03:05:35:18:fa:71:02:
                    f4:17:a7:d0:07:ab:54:02:ac:63:be:fd:ef:7d:a2:
                    c0:39:d9:76:10:e5:50:2b:da:c9:cd:ef:ac:e9:39:
                    1b:dd:ea:a3:e0:e4:56:c6:56:f0:ab:f5:64:6d:78:
                    fa:3c:ba:99:db:65:f7:15:40:17:01:81:a0:4c:ca:
                    dd:d5:e3:b2:8a:cf:45:a6:83:39:3a:d4:d2:3a:4d:
                    8c:4f:3d:63:8a:34:22:91:2f:79:81:55:31:6a:3a:
                    dc:4b:37:95:fe:34:ce:0d:80:58:07:12:2c:6a:d9:
                    0f:12:3d:2b:35:07:6e:a4:1a:25:6c:ce:05:51:64:
                    04:77:1a:e3:c1:de:84:c9:79:57:c9:ec:be:62:9f:
                    43:2b:55:20:3f:e0:32:22:96:dd:0e:a8:d9:40:f4:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7E:7A:F8:52:78:3F:47:BD:23:55:31:EE:99:51:AC:D7:0F:EF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e57c7ca2-1cee-3a0a-a60e-333adff6b36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ed:05:2e:1d:56:7e:5a:6a:14:9f:88:7c:fb:da:5e:03:14:
         02:17:26:1a:38:66:88:51:08:b7:25:86:f6:f9:46:c1:fc:55:
         61:40:fa:75:b5:d4:0e:b1:bf:20:3c:87:13:df:d4:a3:1c:69:
         79:03:42:65:06:0c:63:67:f5:d7:a1:fb:d1:e6:88:82:86:42:
         30:7d:a2:4a:c2:da:6b:ce:a5:21:e9:ab:7f:38:29:c4:26:73:
         75:72:f9:8b:43:76:52:f5:8c:7d:03:09:af:c4:cc:e6:c1:94:
         88:fe:1c:31:d2:3c:c2:56:54:5c:5a:88:52:0d:da:fb:4c:c8:
         e8:d3:12:c5:75:3f:37:a4:f1:59:5c:4c:6e:19:10:c3:e3:70:
         56:df:34:c0:1f:6b:9a:8a:fe:f4:7b:e6:12:fd:19:85:c4:2e:
         aa:09:f1:67:77:b1:7e:e8:23:9d:8d:dc:79:df:73:83:dd:52:
         ba:2c:e5:6d:a4:49:e0:82:81:cb:4c:5b:57:9d:76:30:d7:95:
         16:80:3a:df:b4:55:c9:08:f4:58:72:e7:a9:34:ac:f9:26:00:
         c3:ce:ee:63:c3:81:d2:40:80:6b:24:62:6f:e2:3d:0a:4a:ae:
         f3:c0:7e:8e:b5:33:74:c2:df:c3:62:76:ca:22:2e:ce:a8:c5:
         61:0f:38:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1T2I+7vYtXuWfegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
Y2U2ZGZlZjEtOWY4NC00ZDEyLWEyZTItNDUzMmE3YThkN2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXXOyTItJugV6UTGs0vPFE5LYSTH5QdSFiR2
aAP1bqwGWax/tD5DD3I2m5HxNlPpezhjqNR06tAOgB5yMpUH38q7kBSXKtPTaPhz
g86msQE8hToAgVtFnOSzpf7HWRYzpgMFNRj6cQL0F6fQB6tUAqxjvv3vfaLAOdl2
EOVQK9rJze+s6Tkb3eqj4ORWxlbwq/VkbXj6PLqZ22X3FUAXAYGgTMrd1eOyis9F
poM5OtTSOk2MTz1jijQikS95gVUxajrcSzeV/jTODYBYBxIsatkPEj0rNQdupBol
bM4FUWQEdxrjwd6EyXlXyey+Yp9DK1UgP+AyIpbdDqjZQPT8KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDx+evhSeD9HvSNVMe6ZUazXD+/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZTU3YzdjYTItMWNlZS0z
YTBhLWE2MGUtMzMzYWRmZjZiMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/09MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABftBS4dVn5aahSfiHz72l4DFAIXJho4ZohRCLclhvb5RsH8VWFA+nW1
1A6xvyA8hxPf1KMcaXkDQmUGDGNn9deh+9HmiIKGQjB9okrC2mvOpSHpq384KcQm
c3Vy+YtDdlL1jH0DCa/EzObBlIj+HDHSPMJWVFxaiFIN2vtMyOjTEsV1Pzek8Vlc
TG4ZEMPjcFbfNMAfa5qK/vR75hL9GYXELqoJ8Wd3sX7oI52N3Hnfc4PdUros5W2k
SeCCgctMW1eddjDXlRaAOt+0VckI9Fhy56k0rPkmAMPO7mPDgdJAgGskYm/iPQpK
rvPAfo61M3TC38NidsoiLs6oxWEPOJ8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:58:53 2025 by rpki-client