Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c91e5a33-50fe-3c2c-bb23-b87ce5134478.roa
File:                     c91e5a33-50fe-3c2c-bb23-b87ce5134478.roa (raw, json)
Hash identifier:          UUIA38vUXB0lsXsyZSNbt36IH+FgSirJRZGKbI7vVUQ=
Subject key identifier:   D8:AC:F3:DE:15:7F:5E:5E:1C:5B:76:59:7C:8A:9C:1A:D4:2C:85:5A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827B312A2222CD10AF6CB7D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c91e5a33-50fe-3c2c-bb23-b87ce5134478.roa
Signing time:             Tue 10 Dec 2024 01:24:13 +0000
ROA not before:           Tue 10 Dec 2024 01:24:13 +0000
ROA not after:            Mon 10 Mar 2025 00:24:13 +0000
asID:                     13335
IP address blocks:        162.158.12.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:b3:12:a2:22:2c:d1:0a:f6:cb:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 01:24:13 2024 GMT
            Not After : Mar 10 00:24:13 2025 GMT
        Subject: CN=7afc2027-ec4b-4cb2-9006-66422955c300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:3e:12:06:7a:87:ee:dd:43:ad:0a:a8:98:
                    56:c7:53:9d:af:38:9e:03:47:a8:0a:6b:6f:d7:27:
                    51:ad:1b:a5:6e:11:0c:a5:c8:29:13:1e:e8:83:bb:
                    39:26:b3:10:7d:a6:ed:5b:e2:93:68:8b:c5:a0:7d:
                    76:3e:35:d8:cb:0f:a4:3f:49:ed:d7:a2:42:9b:e7:
                    be:a6:77:5c:9e:ef:96:cd:4f:1e:18:5e:59:2d:c4:
                    de:8f:03:19:67:42:cc:5f:82:1a:06:6c:94:a4:11:
                    ed:7a:8e:a0:f8:5d:09:a7:73:b8:35:98:d6:80:34:
                    28:03:d6:1c:09:f5:3a:f7:b6:b3:8e:8c:37:1a:93:
                    d4:fc:89:af:1c:39:ac:cd:40:d9:d7:5f:7a:c9:b0:
                    10:fd:ed:93:93:aa:5a:80:d8:de:bb:12:81:bc:4a:
                    ae:2f:8d:c6:08:ea:5e:85:7c:61:3e:eb:c6:ea:fd:
                    67:f9:fe:8f:a0:b7:ab:3e:03:b1:c4:6e:2e:d8:72:
                    20:7c:15:5d:26:38:e0:09:36:a9:9d:71:8d:47:a5:
                    e7:c3:37:c1:1a:f7:c2:a2:cf:9b:fa:53:6c:44:45:
                    2d:ee:75:ad:59:1e:47:bd:d8:a2:6c:16:ad:da:6e:
                    74:c9:eb:47:11:f2:5c:26:e6:8c:11:2a:9b:62:73:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AC:F3:DE:15:7F:5E:5E:1C:5B:76:59:7C:8A:9C:1A:D4:2C:85:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c91e5a33-50fe-3c2c-bb23-b87ce5134478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:66:83:e6:ef:96:0d:72:7b:59:98:a7:bd:49:0f:d1:3e:aa:
         af:b1:df:cb:3c:8b:49:6e:4e:c0:67:37:7e:b8:2e:18:80:7f:
         3e:8f:e4:6a:0f:83:ef:47:ae:79:1d:00:8e:ea:d5:28:17:bf:
         d2:6a:b6:fa:ea:9f:dc:d8:b2:6b:8f:14:81:eb:34:51:dd:d3:
         a1:fe:60:a1:00:86:82:8f:3d:dc:e2:11:cf:ff:05:13:05:83:
         c9:85:04:2b:9c:1b:07:1a:69:2b:e5:ce:58:5d:70:7d:de:d4:
         c6:26:9a:31:7d:1a:5f:73:0f:9a:b7:61:ac:f7:b4:d9:75:89:
         50:d6:83:5f:ab:17:aa:14:f2:e9:54:0c:60:07:0b:e4:49:20:
         17:95:99:bc:0f:27:3d:00:25:c8:48:59:f7:43:01:bf:80:3f:
         df:9d:0e:92:5d:ed:29:58:c7:b8:9e:7b:ec:cc:ef:b2:9b:b1:
         5a:6a:e6:97:89:e7:76:fa:bf:47:b4:8b:f5:46:33:70:8c:9d:
         df:66:5f:63:a4:83:b2:c1:1b:61:81:92:5d:59:68:01:36:c2:
         45:37:62:8e:ee:ff:c8:0e:f5:e2:5d:10:27:bf:6c:89:a1:42:
         9a:cf:a6:b4:3e:8e:56:ac:5f:c3:a0:50:6c:b4:77:4e:6e:a3:
         b9:9b:55:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnsxKiIizRCvbLfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMjQxM1oXDTI1MDMxMDAwMjQxM1owLzEtMCsGA1UEAxMk
N2FmYzIwMjctZWM0Yi00Y2IyLTkwMDYtNjY0MjI5NTVjMzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNI+EgZ6h+7dQ60KqJhWx1OdrzieA0eoCmtv
1ydRrRulbhEMpcgpEx7og7s5JrMQfabtW+KTaIvFoH12PjXYyw+kP0nt16JCm+e+
pndcnu+WzU8eGF5ZLcTejwMZZ0LMX4IaBmyUpBHteo6g+F0Jp3O4NZjWgDQoA9Yc
CfU697azjow3GpPU/ImvHDmszUDZ1196ybAQ/e2Tk6pagNjeuxKBvEquL43GCOpe
hXxhPuvG6v1n+f6PoLerPgOxxG4u2HIgfBVdJjjgCTapnXGNR6XnwzfBGvfCos+b
+lNsREUt7nWtWR5HvdiibBat2m50yetHEfJcJuaMESqbYnNqmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNis894Vf15eHFt2WXyKnBrULIVaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzkxZTVhMzMtNTBmZS0z
YzJjLWJiMjMtYjg3Y2U1MTM0NDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop4MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVmg+bvlg1ye1mYp71JD9E+qq+x38s8i0luTsBnN364LhiAfz6P5GoP
g+9HrnkdAI7q1SgXv9Jqtvrqn9zYsmuPFIHrNFHd06H+YKEAhoKPPdziEc//BRMF
g8mFBCucGwcaaSvlzlhdcH3e1MYmmjF9Gl9zD5q3Yaz3tNl1iVDWg1+rF6oU8ulU
DGAHC+RJIBeVmbwPJz0AJchIWfdDAb+AP9+dDpJd7SlYx7iee+zM77KbsVpq5peJ
53b6v0e0i/VGM3CMnd9mX2Okg7LBG2GBkl1ZaAE2wkU3Yo7u/8gO9eJdECe/bImh
QprPprQ+jlasX8OgUGy0d05uo7mbVV0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:10 2025 by rpki-client