Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4635ddba-f536-3736-a87a-086c361d2270.roa
File:                     4635ddba-f536-3736-a87a-086c361d2270.roa (raw, json)
Hash identifier:          Jd9af0Dnwdm9hglwgWOsswK2AZK4/ugcNbhNCspc6Zg=
Subject key identifier:   5B:5D:27:3C:A4:C5:CB:17:E8:CF:47:41:6C:C0:C3:E0:A5:D5:CD:EE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848305C4AAE56D808C3A0B7AB00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4635ddba-f536-3736-a87a-086c361d2270.roa
Signing time:             Fri 13 Dec 2024 03:51:39 +0000
ROA not before:           Fri 13 Dec 2024 03:51:39 +0000
ROA not after:            Thu 13 Mar 2025 02:51:39 +0000
asID:                     13335
IP address blocks:        198.41.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:5c:4a:ae:56:d8:08:c3:a0:b7:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 13 03:51:39 2024 GMT
            Not After : Mar 13 02:51:39 2025 GMT
        Subject: CN=97a88e4f-7ccc-45bb-9a9a-86bc99ad50bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:0d:9a:8c:47:0a:4e:38:ee:37:e4:50:65:
                    11:54:fc:0a:6c:70:10:da:76:66:27:ec:b5:00:ce:
                    09:08:c7:54:d6:48:0f:5b:9b:a9:ab:9a:01:02:a4:
                    37:f2:d2:69:bb:56:8b:64:b7:48:b9:90:3b:83:93:
                    b4:3b:82:c8:e0:cb:ec:03:36:03:61:f2:a3:c8:3e:
                    c1:ca:75:5f:44:05:e3:c9:5c:91:74:79:f3:cc:cb:
                    90:a6:b3:7d:48:20:28:74:27:d9:95:06:af:b9:96:
                    0d:c3:8b:a3:67:b2:44:2b:a7:7f:28:d1:8d:23:8f:
                    cc:86:75:e6:14:7a:1b:bf:ab:70:49:5c:ce:3b:ed:
                    4e:74:54:e1:f2:d7:5a:c8:cd:a2:60:85:9b:7f:fa:
                    17:83:ee:2a:f4:52:cd:61:f9:56:f4:cf:e8:d7:b5:
                    65:21:06:df:fa:22:fd:44:1e:11:ee:2e:e7:52:8b:
                    d3:2a:70:f8:65:b0:fe:ff:aa:fe:38:9b:5c:d2:01:
                    42:8e:bf:65:4b:9f:b0:15:2a:4c:0b:38:d1:9b:e4:
                    6e:45:24:cd:48:6b:cd:4c:d5:38:6e:5d:53:97:e4:
                    0f:91:21:90:96:25:13:9e:85:21:74:f8:8c:9a:7d:
                    15:8b:e8:cc:71:31:b8:1c:67:6d:e7:00:e3:d9:c3:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5D:27:3C:A4:C5:CB:17:E8:CF:47:41:6C:C0:C3:E0:A5:D5:CD:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4635ddba-f536-3736-a87a-086c361d2270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:50:5f:81:c8:5b:e5:00:af:90:a9:a0:02:0d:b2:16:51:92:
         94:cd:a7:01:5c:79:64:87:11:4a:49:46:45:3e:5b:86:dd:ec:
         1e:29:ba:c9:b5:a6:2b:79:74:f6:86:0b:cf:99:de:5c:aa:e6:
         73:d6:51:91:ff:9c:2b:71:c1:f6:14:bf:08:ce:83:38:27:e0:
         ef:cc:6a:bb:3e:1a:21:b6:b8:fa:dc:82:6c:94:f5:34:26:d5:
         76:c9:d3:12:c2:ae:cc:6c:67:3d:9f:7c:b5:f1:8f:df:f4:73:
         73:98:cc:d6:19:71:59:8f:c9:6f:fc:11:5b:5f:4e:6f:c2:05:
         03:72:81:39:a9:0d:ec:c4:51:3e:57:9c:d3:06:3d:cb:3c:30:
         01:99:8b:29:4b:d9:a9:3d:e0:6c:fa:63:c6:48:03:19:7c:25:
         a6:a8:1e:34:85:ef:ec:4c:55:7c:28:55:94:17:37:34:72:21:
         7f:0c:af:bd:99:ae:6c:6d:f1:04:24:65:6a:ce:4d:dc:d2:f5:
         08:03:e7:b4:68:fd:65:66:72:1b:4e:74:ac:bf:03:c7:22:58:
         be:85:7a:3b:7f:4a:bd:f5:00:d6:3f:cb:d6:17:b8:c3:eb:38:
         ce:0d:2c:c8:5d:27:53:98:55:a8:56:47:70:a0:d9:94:04:d2:
         d7:1b:0f:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwXEquVtgIw6C3qwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAzNTEzOVoXDTI1MDMxMzAyNTEzOVowLzEtMCsGA1UEAxMk
OTdhODhlNGYtN2NjYy00NWJiLTlhOWEtODZiYzk5YWQ1MGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGwNmoxHCk447jfkUGURVPwKbHAQ2nZmJ+y1
AM4JCMdU1kgPW5upq5oBAqQ38tJpu1aLZLdIuZA7g5O0O4LI4MvsAzYDYfKjyD7B
ynVfRAXjyVyRdHnzzMuQprN9SCAodCfZlQavuZYNw4ujZ7JEK6d/KNGNI4/MhnXm
FHobv6twSVzOO+1OdFTh8tdayM2iYIWbf/oXg+4q9FLNYflW9M/o17VlIQbf+iL9
RB4R7i7nUovTKnD4ZbD+/6r+OJtc0gFCjr9lS5+wFSpMCzjRm+RuRSTNSGvNTNU4
bl1Tl+QPkSGQliUTnoUhdPiMmn0Vi+jMcTG4HGdt5wDj2cMZjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtdJzykxcsX6M9HQWzAw+Cl1c3uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDYzNWRkYmEtZjUzNi0z
NzM2LWE4N2EtMDg2YzM2MWQyMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZQX4HIW+UAr5CpoAINshZRkpTNpwFceWSHEUpJRkU+W4bd7B4pusm1
pit5dPaGC8+Z3lyq5nPWUZH/nCtxwfYUvwjOgzgn4O/Mars+GiG2uPrcgmyU9TQm
1XbJ0xLCrsxsZz2ffLXxj9/0c3OYzNYZcVmPyW/8EVtfTm/CBQNygTmpDezEUT5X
nNMGPcs8MAGZiylL2ak94Gz6Y8ZIAxl8JaaoHjSF7+xMVXwoVZQXNzRyIX8Mr72Z
rmxt8QQkZWrOTdzS9QgD57Ro/WVmchtOdKy/A8ciWL6Fejt/Sr31ANY/y9YXuMPr
OM4NLMhdJ1OYVahWR3Cg2ZQE0tcbD7Y=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:41 2025 by rpki-client